Microsoft reportedly cuts China's early access to bug disclosures, PoC exploit code

Microsoft curtailed distribution of proof-of-concept exploit code to companies in countries required to report vulnerabilities (including China) after widespread exploitation of two SharePoint zero-day flaws that impacted more than 400 organizations; initial patches were bypassed and later replaced, prompting concerns that details from Microsoft’s MAPP early-disclosure program were leaked and used by threat actors (including state-linked groups, data thieves, and a ransomware gang).