Microsoft Restricts China’s Access to Cybersecurity Program Following SharePoint Hack

Microsoft has curtailed Chinese firms' participation in its Microsoft Active Protections Program (MAPP) after investigators linked program members to a wave of cyberattacks targeting SharePoint servers. The 17-year-old initiative, designed to give security partners early vulnerability details, became a liability when attackers exploited leaked information.

The breach timeline reveals a troubling pattern: Microsoft shared SharePoint flaw details with MAPP partners on June 24, July 3, and July 7—the same day attacks first appeared. Security analysts note this correlation suggests insider knowledge fueled the campaign, which ultimately compromised over 400 organizations.

As a defensive measure, Microsoft will no longer provide proof-of-concept exploit code to certain Chinese security firms. While such code accelerates patch development, its weaponization potential now outweighs the benefits for these partners.