China's Cyber Security Association has announced that the US exploited vulnerabilities in Microsoft's messaging service to conduct cyberattacks on its defense enterprises.
China's Accusations of Cyberattacks
The Chinese Cyber Security Association reported that US operators launched two major cyberattacks against defense-related companies in China, using bugs found in Microsoft Exchange. The attacks reportedly allowed unauthorized access to the email systems of a key defense supplier for nearly twelve months.
Microsoft's Response and Cybersecurity Incidents
Microsoft has often pointed fingers at Chinese government-backed groups for similar attacks. Back in 2021, a suspected Chinese effort breached thousands of Exchange servers, and in 2023, a subsequent incident saw high-ranking US government personnel's email accounts compromised. Microsoft has stated that hacking groups linked to the Chinese government exploited vulnerabilities in its SharePoint sharing service.
Impact of Accusations on Taiwan Relations
Recent analysis indicates that China has increasingly leveraged hacking accusations as a form of pressure on Taiwan and to influence global cybersecurity discussions. At the beginning of the year, China claimed that Taiwan-based groups launched multiple attacks, despite the island's autonomous governance.
Thus, China's allegations of US cyberattacks once again raise questions about cybersecurity and international relations, highlighting the need for increased protection in both public and private sectors.