Chinese Hackers Exploit Microsoft SharePoint Vulnerability in Global Cyberattack
Originally Published 5 months ago — by Microsoft
Microsoft has issued security updates for on-premises SharePoint servers to address active exploits by Chinese state-sponsored threat actors targeting vulnerabilities CVE-2025-49706 and CVE-2025-49704, which are being used to deploy web shells and steal machine keys. Organizations are urged to apply updates, enable AMSI and Defender Antivirus, rotate server keys, and monitor for indicators of compromise to prevent exploitation.