Overview

• Microsoft said several Chinese companies will no longer receive proof-of-concept code through its Microsoft Active Protections Program.
• The company reduced some partners’ access to early vulnerability feeds as it conducts confidential reviews and an internal investigation.
• A Microsoft spokesperson told Bloomberg the tighter sharing applies in countries that require reporting vulnerabilities to their governments, including China.
• Microsoft notified MAPP partners of SharePoint flaws on June 24, July 3, and July 7, and first observed exploitation attempts on July 7.
• Attacks hit up to 400 organizations and have been used to deploy ransomware, patches have been issued, Beijing denies involvement, and Microsoft has not identified the restricted firms or disclosed investigative findings.