ProPublica reports that Microsoft relied on engineers based in China to maintain its SharePoint “OnPrem” software. This version of SharePoint was recently exploited by Chinese state-sponsored hackers to breach US government systems. The report raises concerns about the security implications of outsourcing critical infrastructure maintenance to countries with adversarial relationships with the US, and highlights potential vulnerabilities in supply chain security. Microsoft has not yet issued a full statement on the matter.