Hundreds of organizations breached by SharePoint mass-hacks

Researchers report active exploitation of a SharePoint zero-day (CVE-2025-53770) affecting self-hosted instances and enabling remote code execution; scans found at least 400 compromised organizations (including the NNSA), Google/Microsoft link multiple China-backed groups to the attacks, and Microsoft has since released patches while warning of further compromises.