Chinese state hackers targeting Microsoft customers

Chinese state-sponsored hackers are actively exploiting critical security vulnerabilities in users of Microsoft’s popular SharePoint servers to steal sensitive data and deploy malicious code, the US tech giant warned Tuesday.

Microsoft said it has observed three threat groups — dubbed Linen Typhoon, Violet Typhoon, and Storm-2603 — targeting internet-facing SharePoint servers using two newly disclosed vulnerabilities that allow attackers to bypass authentication and execute remote code.