Microsoft has linked recent SharePoint server attacks to Chinese state-affiliated hacking groups, including Linen Typhoon, Violet Typhoon and Storm-2603. At least 54 organizations have been breached, including universities, energy companies and a federal health agency. Microsoft has patched all affected SharePoint versions and warns that unpatched systems remain at high risk of further exploitation.
Source: The Verge