U.S. Nuclear Weapons Agency Breached via Microsoft SharePoint Vulnerability

The National Nuclear Security Administration (NNSA), responsible for managing America's nuclear arsenal, was among the victims of a recent Microsoft SharePoint hack. Initial assessments suggest no classified or sensitive data was compromised. The breach, attributed to a zero-day vulnerability, impacted a limited number of systems within the Department of Energy's network, all of which are now under restoration.

This incident mirrors the 2020 SolarWinds attack, where NNSA systems were similarly compromised through third-party software. Microsoft has pointed to state-sponsored hackers from China as the likely perpetrators, though the full scope of the global campaign remains under investigation.

The NNSA's critical functions—from naval reactor development to nuclear weapons logistics—appear unaffected. The agency's reliance on Microsoft's M365 cloud platform and robust cybersecurity measures minimized potential damage.