Ransomwarecritical

Microsoft Links Ongoing SharePoint Exploits to Three Chinese Hacker Groups

The Hacker Newsby @TheHackersNewsJul 22, 2025 · 16:43 UTC (Jul 22, 2025)3 min read4 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-49706 CVE-2025-49704 CVE-2025-53771 CVE-2025-53770

Tags: cve-2025-49706 cve-2025-49704 cve-2025-53771 cve-2025-53770 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-49704 +1 related CVE CVE-2025-49706	Authenticated Code Injection RCE in Microsoft SharePoint	8.8 group max	100%	KEVRansomware	Jul 8, 2025 KEV Jul 22, 2025
CVE-2025-53770	Unauthenticated Deserialization RCE in Microsoft SharePoint Server on-premises	9.8	100%	KEVRansomwarePoC ×3	Jul 20, 2025 KEV Jul 20, 2025
CVE-2025-53771	Improper Authentication in Microsoft SharePoint Server Enables Network Spoofing	6.5	100%		Jul 20, 2025

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Jul 22, 2025 Vulnerability / Threat Intelligence Microsoft has formally tied the exploitation of security flaws in internet-facing SharePoint Server instances to two Chinese hacking groups called Linen Typhoon and Violet Typhoon as early as July 7, 2025 , corroborating earlier reports.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.