Microsoft has launched an investigation regarding a suspected data leak from its Active Protections Program (MAPP) that could have allowed Chinese hackers to exploit vulnerabilities in SharePoint software.
Investigation of Data Leak
Microsoft is examining whether information shared through the MAPP program may have leaked, which could have facilitated cyberattacks. The company confirmed it continually evaluates the effectiveness and security of its partner programs.
Hackers and SharePoint Vulnerabilities
The attack is reportedly being carried out by state-affiliated hacker groups from China. The vulnerability in SharePoint was first discovered in May, leading to a patch release by Microsoft. However, experts noted that exploitation attempts began shortly after the last notification to partners about the vulnerability.
General Risks and Security of MAPP
This is not the first time Microsoft has faced leaks related to the MAPP program. The possibility of revising the program's terms is being discussed, as recent events highlight confidentiality and data security risks.
The data leak poses a significant threat not only to Microsoft but to the entire cybersecurity ecosystem. The MAPP program may need to be revised to minimize future risks.