China accuses US of exploiting Microsoft zero-day in cyberattack | CyberScoop<\/title> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"China accuses US of exploiting Microsoft zero-day in cyberattack\"> <meta property=\"og:description\" content=\"The accusation, the latest from Beijing, says U.S. intelligence agencies attacked two Chinese military enterprises.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cyberscoop\/\"> <meta property=\"article:published_time\" content=\"2025-08-01T14:05:20+00:00\"> <meta property=\"article:modified_time\" content=\"2025-08-01T14:05:23+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack-2.jpg\"> <meta property=\"og:image:width\" content=\"1920\"> <meta property=\"og:image:height\" content=\"1286\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"Tim Starks\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:creator\" content=\"@timstarks\"> <meta name=\"twitter:site\" content=\"@CyberScoopNews\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1752617955g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1750115417g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1753281318g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=13897d660a0ac2c9c7d1\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" title=\"JSON\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/85417\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/cyberscoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.8.2\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=85417\">\n<link rel=\"alternate\" title=\"oEmbed (JSON)\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fchina-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack%2F\">\n<link rel=\"alternate\" title=\"oEmbed (XML)\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fchina-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"wp-singular post-template-default single single-post postid-85417 single-format-standard wp-theme-scoopnewsgroup wp-child-theme-cyberscoop\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--newsletter js-stickybar\" readability=\"0.82\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"26.56704361874\">\n<div class=\"single-article__header-content\" readability=\"35.872\">\n<ul class=\"single-article__eyebrow\">\n<li class=\"single-article__category\"> <a class=\"single-article__category-link\" href=\"https:\/\/cyberscoop.com\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack\/\"> <span>Geopolitics<\/span> <\/a> <\/li>\n<\/ul>\n<p> The accusation, the latest from Beijing, says U.S. intelligence agencies attacked two Chinese military enterprises. <\/p>\n<p>  <br \/>\n<audio id=\"audio-player\" src=\"https:\/\/wp-tts-cdn.api.scpnewsgrp.com\/cyberscoop\/85417\/english.openai.mp3\"><\/audio> <\/p>\n<div readability=\"11\">\n<div>\n<p>Listen to this article<\/p>\n<p>  <\/p>\n<p>0:00<\/p>\n<\/p><\/div>\n<p>  <\/p>\n<p> <span id=\"tts-tooltip\">Learn more.<\/span> <span> This feature uses an automated voice, which may result in occasional errors in pronunciation, tone, or sentiment. <\/span> <\/p>\n<\/div>\n<p>  <\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"429\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack.jpg?resize=640%2C429&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack-2.jpg 1920w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack-2.jpg?resize=300,201 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack-2.jpg?resize=768,514 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack-2.jpg?resize=1024,686 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack-2.jpg?resize=1536,1029 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack-2.jpg?resize=600,402 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack-2.jpg?resize=251,168 251w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack-2.jpg?resize=503,337 503w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack-2.jpg?resize=1008,675 1008w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack-2.jpg?resize=1259,843 1259w\" sizes=\"(max-width: 1008px) 100vw, 1008px\"><figcaption> Members of the Peoples Liberation Army band leave after the closing session of the Chinese People’s Political Consultative Conference, or CPPCC, at the Great Hall of the People on March 10, 2025 in Beijing. (Photo by Kevin Frayer\/Getty Images) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"28.951634877384\"><body readability=\"60.127843137255\"><\/p>\n<p>U.S. intelligence agencies launched cyberattacks on two Chinese military enterprises dating back to 2022, in one case exploiting a Microsoft zero-day, China alleged Friday.<\/p>\n<p>The Cyber Security Association of China said that in the first case, U.S. agencies from July of 2022 to July of 2023 \u201cexploited a zero-day vulnerability in Microsoft Exchange Mail to attack and control the mail server of a major Chinese military enterprise for nearly a year,\u201d according to a Google translation of <a href=\"https:\/\/mp.weixin.qq.com\/s\/MjIlXBYK0kK2ysU6a78BAg?poc_token=HK6jjGijR1tliMkiB6rM932Mn0lEn2bMRb8ht7XY\">the statement<\/a>. They then used that access to steal data, the statement continues.<\/p>\n<p>In the second case, the association said the U.S. agencies \u201claunched a cyberattack against a Chinese military enterprise in the communications and satellite internet sectors\u201d from July to November of last year by exploiting vulnerabilities in electronic file systems, where they also stole information. The statement didn\u2019t name either enterprise.<\/p>\n<p>While Chinese allegations of U.S. government hacking have become increasingly common \u2014 including a batch of allegations in <a href=\"https:\/\/cyberscoop.com\/chinese-law-enforcement-places-nsa-operatives-on-wanted-list-over-alleged-cyberattacks\/\">April<\/a> and in <a href=\"https:\/\/cyberscoop.com\/chinese-cyber-center-us-alleged-cyberattacks-trade-secrets\/\">December<\/a> of last year \u2014 the latest accusation is notable for its assertion that the agencies exploited a zero-day, or previously unknown and unpatched vulnerability, at U.S.-headquarted Microsoft.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Last week, <a href=\"https:\/\/cyberscoop.com\/microsoft-sharepoint-zero-days-china-typhoon\/\">Microsoft accused<\/a> Chinese government-linked hackers of exploiting zero-days in its Sharepoint product in its own most recent finger-pointing at Beijing.<\/p>\n<p>The Office of the Director of National Intelligence did not immediately respond to a request for comment Friday.<\/p>\n<p>Asked on Fox News in June about Chinese hacking and theft of U.S. intellectual property, President Donald Trump answered bluntly.<\/p>\n<p>\u201cYou don\u2019t think we do that to them? We do. We do a lot of things,\u201d <a href=\"https:\/\/www.yahoo.com\/news\/trump-leaves-maria-bartiromo-speechless-144824982.html\">Trump said<\/a>. \u201cThat\u2019s the way the world works. It\u2019s a nasty world.\u201d<\/p>\n<p>China has also alleged cyberattacks from other governments, <a href=\"https:\/\/bindinghook.com\/articles-hooked-on-trends\/china-is-using-cyber-attribution-to-pressure-taiwan\/\">particularly from Taiwan<\/a>, even as it has focused much of its attention on the United States. It tallied 600 foreign government-level attacks in 2024 alone.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>\u201cHacker groups, particularly those affiliated with US intelligence agencies, leverage established cyberattack teams, extensive supporting engineering systems, a standardized attack equipment arsenal, and robust vulnerability analysis and discovery capabilities to conduct attacks and infiltration against [China\u2019s] critical information infrastructure, important information systems, and key personnel, posing a serious threat to national cybersecurity,\u201d the Friday statement reads.<\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\">\n<div class=\"author-card\" readability=\"7.7216117216117\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/08\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack-1.jpg?w=640&ssl=1\" alt=\"Tim Starks\"> <\/figure>\n<\/p><\/div>\n<div class=\"author-card__details\" readability=\"10.901098901099\">\n<h4 class=\"author-card__name\">Written by Tim Starks<\/h4>\n<p> Tim Starks is senior reporter at CyberScoop. His previous stops include working at The Washington Post, POLITICO and Congressional Quarterly. An Evansville, Ind. native, he’s covered cybersecurity since 2003. Email Tim here: <a href=\"mailto:tim.starks@cyberscoop.com\">tim.starks@cyberscoop.com<\/a>. <\/div>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<p>  <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>China accuses US of exploiting Microsoft zero-day in cyberattack |<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[271,4719,4720,302,625,910,1170],"tags":[277,4721,4722,306,630,911,1171],"class_list":["post-7855","post","type-post","status-publish","format-standard","hentry","category-china","category-defense","category-exchange","category-geopolitics","category-microsoft","category-office-of-the-director-of-national-intelligence-odni","category-zero-days","tag-china","tag-defense","tag-exchange","tag-geopolitics","tag-microsoft","tag-office-of-the-director-of-national-intelligence-odni","tag-zero-days"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/china\/\" rel=\"category tag\">China<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/defense\/\" rel=\"category tag\">defense<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/exchange\/\" rel=\"category tag\">Exchange<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/geopolitics\/\" rel=\"category tag\">Geopolitics<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/microsoft\/\" rel=\"category tag\">Microsoft<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/office-of-the-director-of-national-intelligence-odni\/\" rel=\"category tag\">Office of the Director of National Intelligence (ODNI)<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/zero-days\/\" rel=\"category tag\">zero-days<\/a>","tag_info":"zero-days","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/7855","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=7855"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/7855\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=7855"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=7855"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=7855"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":7855,"date":"2025-08-01T09:05:20","date_gmt":"2025-08-01T14:05:20","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=85417"},"modified":"2025-08-01T09:05:20","modified_gmt":"2025-08-01T14:05:20","slug":"china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2025\/08\/01\/china-accuses-us-of-exploiting-microsoft-zero-day-in-cyberattack\/","title":{"rendered":"China accuses US of exploiting Microsoft zero-day in cyberattack"},"content":{"rendered":"