Microsoft Investigates Suspected Cybersecurity Leak Amid Espionage Campaign
Microsoft is probing a potential breach within its cybersecurity partner program after failing to fully patch a critical flaw exploited by Chinese state-affiliated groups. The vulnerability, first demonstrated at Berlin's Pwn2Own conference, resurfaced despite an initial July fix, raising concerns about leaked pre-release information from the MAPP program.
Linen Typhoon and Violet Typhoon, alongside a third China-linked group, capitalized on the SharePoint weakness within hours of Microsoft's final patch attempt. Trend Micro's threat awareness head noted suspicious timing between partner notifications and exploit deployment, suggesting insider knowledge may have accelerated attacks.