Did a Vendor's Leak Help Attackers Exploit Microsoft's SharePoint Servers?

The Zero Day Initiative, part of Trend Micro, raises concerns over a possible leak that allowed attackers, including Chinese spies, to exploit Microsoft SharePoint vulnerabilities (CVE-2025-53770, CVE-2025-53771) despite security patches released shortly after. Experts suggest that threat actors may have utilized large language models like Google Gemini to identify exploitation routes, as Microsoft has provided no guidance for recent vulnerabilities, indicating potential distrust in their MAPP program.

Want More Context? 🔎