US Nuclear Agency Hacked in Microsoft SharePoint Frenzy

News brief: Microsoft SharePoint "ToolShell" zero-day vulnerabilities were exploited in the wild, enabling threat actors to breach systems at the U.S. National Nuclear Security Administration (NNSA). The agency reported a very small number of impacted systems and no known loss of classified data; Microsoft has linked some activity to Chinese nation-state groups (Linen Typhoon, Violet Typhoon, Storm-2603) and released patches and mitigations for CVE-2025-49706 and CVE-2025-49704.