A critical vulnerability in on-premise SharePoint servers allowed state-backed hackers to breach governments and institutions worldwide. Experts are questioning why more hasn't been done or said.

Victims of the recent global hacking campaign include the National Institutes of Health and the National Nuclear Security Administration, officials said.