Resecurity, Friday, August 1st, 2025
Sharepoint Zero-Day Exploit (Toolshell) - Network Infrastructure Mapping
As reported by ISMG, nearly 150 different organizations' on-premises SharePoint servers have been exploited by attackers targeting the zero-day vulnerabilities now tracked as ToolShell. Early attacks have been attributed to China-linked groups, in some cases leading to Warlock ransomware infections.
more →