Microsoft has linked the exploitation of security vulnerabilities in SharePoint Server to two Chinese hacking groups, Linen Typhoon and Violet Typhoon, since July 7, 2025, confirming prior reports. Additionally, a third group known as Storm-2603 has also been identified as utilizing these flaws for initial access.