SharePoint MAPP leak investigation visual with Microsoft servers

Microsoft probes SharePoint MAPP leak in global breach

IntroductionOn July 25, 2025, Microsoft disclosed it is investigating potential leaks in its Microsoft Active Protections Program (MAPP), after China-linked threat groups used details to exploit the ‘ToolShell’ SharePoint vulnerability even after official patches. Background: SharePoint & ToolShell Vulnerability Discoverer at Viettel Cybersecurity reported ‘ToolShell’ in Berlin’s hacking contest. Microsoft patched it on July 8,…