Chinese authorities today publicly accused U.S. intelligence agencies of orchestrating cyberattacks against two of China’s key military enterprises. According to the Cyber Security Association of China, the attacks reportedly exploited a previously unknown “zero-day” vulnerability in Microsoft Exchange email server software.
Chinese officials allege that U.S.-linked offensive cyber actors infiltrated a defense-sector company’s email systems using this security flaw, maintaining covert access for nearly a year. The cyber intrusions, which began as early as 2022, are said to have severely compromised sensitive communications and national defense data.
The U.S. government has yet to issue an official response to these allegations.