ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets

Threat Level

85% SecurityWeek 7 hours ago Part of cluster #1289

More details emerged on the ToolShell zero-day attacks targeting SharePoint servers, but confusion remains over the vulnerabilities....

Continue Reading on Original Site

Recommended Articles

Google, Microsoft say Chinese hackers are exploiting SharePoint zero-day

TechCrunch 1 hour ago

The tech giants have evidence that Chinese hackers are exploiting the new bug, but warned "multiple actors" are also hacking into affected SharePoint systems....

Critical Sophos Firewall Vulnerabilities Enables pre-auth Remote Code Execution

Cybersecurity News 3 hours ago

Multiple security vulnerabilities affecting Sophos firewall products, with two enabling pre-authentication remote code execution that could allow attackers to compromise systems without valid credenti...

Ransomware attacks in education jump 23% year over year

Cybersecurity Dive 1 hour ago

Education was the fourth-most-targeted sector during the first half of 2025, according to a report from Comparitech....

Microsoft SharePoint zero-day attacks pinned on China-linked ‘Typhoon’ threat groups

CyberScoop 22 minutes ago

Microsoft said two China nation-state threat groups and a separate attacker based in China are exploiting the zero-day vulnerabilities that firstcaused havoc to SharePoint servers over the weekend. Li...

CISA Warns of Interlock Ransomware With Double Extortion Tactics Attacking Windows and Linux Systems

Cybersecurity News 58 minutes ago

The Cybersecurity and Infrastructure Security Agency (CISA), FBI, Department of Health and Human Services, and Multi-State Information Sharing and Analysis Center have issued an urgent joint advisory ...

Threat Intelligence

Ransomware 1

First

Vulnerabilities 1

Zero-Day

Business Intelligence

Countries 1

China

Platforms 1

SharePoint

Information

Article ID: #4216
Published: 7 hours ago
Source: SecurityWeek

Recommended Articles

Google, Microsoft say Chinese hackers are exploiting SharePoint zero-day

Critical Sophos Firewall Vulnerabilities Enables pre-auth Remote Code Execution

Ransomware attacks in education jump 23% year over year

Microsoft SharePoint zero-day attacks pinned on China-linked ‘Typhoon’ threat groups

CISA Warns of Interlock Ransomware With Double Extortion Tactics Attacking Windows and Linux Systems

Save to Folder

We use cookies

Cookie Settings

Essential Cookies

Analytics Cookies

Performance Cookies

Marketing Cookies