<\/p>\n
Three China-linked cyber espionage groups have been implicated in a major hacking campaign that has compromised a wide range of organisations globally, including multiple US government agencies. The cyberattack, which exploits critical vulnerabilities in Microsoft\u2019s widely used SharePoint server software, has prompted urgent investigations by federal officials and private security experts, according to a report by Politico<\/i>.<\/p>\n<\/div>\n Microsoft<\/a> confirmed in a recent blog post that the three threat actors, identified as Violet Typhoon, Linen Typhoon, and Storm-2603, are actively involved in the campaign. These groups are believed to be state-affiliated and have been previously associated with cyber operations targeting Western interests.<\/p>\n<\/div>\n Two US officials, speaking on condition of anonymity due to the sensitivity of the situation, disclosed that at least four to five federal agencies<\/a> have been affected, though the full scale of the breach remains unclear. \u201cMore than one\u201d agency had been confirmed as compromised as of Monday, one of the officials added.<\/p>\n<\/div>\n The attackers are exploiting a serious flaw in customer-managed, on-premises versions of Microsoft SharePoint, a collaborative platform used extensively across government and corporate sectors. Microsoft stated that the cloud<\/a>-hosted versions of SharePoint are not impacted by the vulnerability.<\/p>\n<\/div>\n Since the breach was detected over the weekend, both federal cybersecurity teams and private analysts have been working to contain the damage. Microsoft said it is confident the threat actors will continue to exploit unpatched systems, warning of the urgent need for organisations to update their software.<\/p>\n<\/div>\n The tech<\/a> giant has said it is working closely with the US Cybersecurity and Infrastructure Security Agency (CISA), the Department of Defense\u2019s Cyber Defence Command, and international cybersecurity partners to mitigate the threat. A CISA spokesperson noted that Microsoft had been \u201cresponding quickly\u201d since the agency first raised the alarm.<\/p>\n<\/div>\n This latest breach adds to a growing list of high-profile cybersecurity incidents involving Microsoft and suspected Chinese hackers<\/a>. In 2023, attackers linked to China reportedly accessed email accounts belonging to the US ambassador to China and the US Commerce Secretary by exploiting a string of Microsoft security flaws, shortcomings that were later criticised by a federal review board.<\/p>\n<\/div>\n