Two Chinese nation-state actors and one China-based threat actor have tried to exploit the vulnerability for weeks, Microsoft said.

Microsoft’s detailed attribution and response to the exploitation of SharePoint vulnerabilities signal an urgent need for public and private sector organizations to strengthen defenses. As Chinese actors continue to exploit critical systems,

Microsoft released security updates for SharePoint Subscription Edition and SharePoint 2019, noting “customers should apply these updates immediately to ensure they’re protected.” The company added that it was developing security updates for supported versions of SharePoint 2019 and SharePoint 2016.