Microsoft, SharePoint
Digest more
Violet Typhoon, Linen Typhoon, and Storm-2603 exploited critical SharePoint flaws; over 60 organisations breached globally despite recent patches.
In a blog post Tuesday, Microsoft said it observed hackers attempting to “gain initial access to target organizations.” According to Microsoft, those involved included hacking groups called Linen Typhoon and Violet Typhoon—which Microsoft said are linked to the Chinese government—and China-based group Storm-2603.
Hackers have been exploiting a vulnerability to attack SharePoint and connected Microsoft services in what will be a big problem for corporate Mac users this week.
To secure the endpoints, Microsoft recommends applying the July 2025 security updates immediately, as well as enabling Antimalware Scan Interface (AMSI) for SharePoint and making sure Defender Antivirus is deployed.
Microsoft released an emergency security patch on Sunday to “mitigate active attacks targeting on-premises servers.”