Microsoft Just Confirmed a SharePoint Bug Under Attack—And It’s Worse Than You Think

A critical Microsoft SharePoint bug is under active attack, exposing users to serious security risks. Learn how the vulnerability works, who’s affected.

A newly discovered vulnerability in Microsoft SharePoint is under active attack — and Chinese hackers are being blamed.

What’s Going On?

Security teams at Google and Microsoft have both confirmed that state-backed hacking groups from China are actively exploiting a serious zero-day vulnerability in SharePoint.

The bug, officially listed as CVE-2025-53770, was found just last weekend. But according to both companies, attackers have already been using it in the wild since at least July 7.

What Makes This Bug So Serious?

SharePoint is widely used by businesses, governments, and other organizations to store internal documents and files. Many companies run self-hosted versions of SharePoint — and that’s exactly where this bug strikes.

Once attackers exploit this vulnerability, they can:

• Steal sensitive ...