
US nuclear weapons agency reportedly breached in Microsoft SharePoint attacks
Tom Warren
created: July 23, 2025, 8:24 a.m. | updated: July 23, 2025, 1:48 p.m.
Hours after Microsoft revealed that hacking groups affiliated with the Chinese government have been exploiting a flaw in its SharePoint software, Bloomberg reported that the National Nuclear Security Administration was also breached in the attacks.
The exploit affects on-premises versions of SharePoint, but not the SharePoint Online service that Microsoft operates as part of its Microsoft 365 cloud service.
While the nuclear weapons agency has reportedly been affected by the SharePoint exploit, no sensitive or classified information has leaked, according to Bloomberg.
That might be because the US Department of Energy uses Microsoft 365 cloud systems for a lot of its SharePoint work.
All impacted systems are being restored.”Microsoft has now patched all versions of SharePoint that have been impacted by the zero-day exploit.
1 month ago: The Verge