Government ToolShell Attacks Hit 400+ SharePoint Servers, US Government Victims Named More information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors. Eduard KovacsJuly 24, 2025
Malware & Threats Microsoft Says Chinese APTs Exploited ToolShell Zero-Days Weeks Before Patch Microsoft says the Chinese threat actors Linen Typhoon, Violet Typhoon, and Storm-2603 have been exploiting the ToolShell zero-days. Eduard KovacsJuly 22, 2025
Malware & Threats ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets More details emerged on the ToolShell zero-day attacks targeting SharePoint servers, but confusion remains over the vulnerabilities. Eduard KovacsJuly 22, 2025
Vulnerabilities Microsoft Patches ‘ToolShell’ Zero-Days Exploited to Hack SharePoint Servers Microsoft has started releasing updates to fix the exploited SharePoint zero-days tracked as CVE-2025-53770 and CVE-2025-53771. Eduard KovacsJuly 21, 2025
Threat Intelligence SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the Wild – No Patch Available Enterprises running SharePoint servers should not wait for a fix for CVE-2025-53770 and should commence threat hunting to search for compromise immediately. Mike LennonJuly 20, 2025