Microsoft SharePoint victim count hits 400+ orgs in ongoing attacks

*Executive summary:* Multiple critical SharePoint Server vulnerabilities (CVE-2025-53770 and CVE-2025-53771) were actively exploited in a multi-wave campaign beginning in July, compromising over 400 organizations — including US government and critical infrastructure — with public proof-of-concept code released and attribution to Chinese-affiliated threat actors; Microsoft issued fixes after the attacks were observed.