Microsoft says the Chinese threat actors Linen Typhoon, Violet Typhoon, and Storm-2603 have been exploiting the ToolShell zero-days.

A security patch Microsoft released this month failed to fully fix a critical flaw in the U.S. tech giant's SharePoint server software, opening the door to a sweeping global cyber espionage effort, a timeline reviewed by Reuters shows.

After a ProPublica investigation raised security concerns, Microsoft will cease using China-based engineers for work on sensitive Pentagon cloud computing systems.

The move comes after a ProPublica report highlighted a Microsoft program that allows foreign engineers to indirectly interact with U.S. military systems through American “escort” intermediaries.

Amid geopolitical tensions and Communist Party’s policies, Amazon has become the latest Western technology giant to scale back operations in China. Lately, IBM, Microsoft, and Apple, among others, have reduced their activities in China and have relocated operations.

The change follows a ProPublica report that outlined how Microsoft’s use of Chinese engineers left U.S. defense clients vulnerable to cybersecurity risks.

Microsoft has used engineers based in China to support highly sensitive US Defence Department cloud systems via a model called "digital escorting", a ProPublica investigation has revealed. American workers with security clearance input commands written by foreign engineers,