Microsoft probes SharePoint MAPP leak in global breach
IntroductionOn July 25, 2025, Microsoft disclosed it is investigating potential leaks in its Microsoft Active Protections Program (MAPP), after China-linked threat groups used details to exploit the ‘ToolShell’ SharePoint vulnerability even after official patches. Background: SharePoint & ToolShell Vulnerability Discoverer at Viettel Cybersecurity reported ‘ToolShell’ in Berlin’s hacking contest. Microsoft patched it on July 8,…