#ToolShell Etiketinde En Popüler Paylaşımlar
Patched #SharePoint after #ToolShell? You may still be exposed.
The suspected China-nexus actor behind #Warlock ransomware (Longlegs / Storm-2603) is still breaking into on-prem SharePoint more than a year later. Recent victims include a water utility, a telecom provider, a regional government body, and a university across Portuguese- and Spanish-speaking countries.
How they operate:
→ Exploit SharePoint, then drop web shells
→ Steal ASP. NET machine keys and forge signed payloads for RCE
→ Kill EDR via BYOVD (K7RKScan.sys, CVE-2025-1055)
→ Hide remote access inside VS Code tunnels
→ Stage ransomware in SYSVOL and let domain replication deploy it
In one intrusion, #EDR was disabled on 40+ hosts in about 2 hours, and ransomware hit 33+.
What to do now:
1Patch, then rotate ASP. NET machine keys and restart IIS. Stolen keys survive patching.
2Hunt for web shells in SharePoint LAYOUTS directories.
3Enforce the vulnerable driver blocklist / HVCI.
4Block VS Code tunnels on servers.
5Alert on executables written to SYSVOL.
Your detection window is hours, not days.
Source: #Symantec Threat Hunter Team
#ThreatIntel #Ransomware #SharePoint #CyberSecurity
https://t.co/A82Nqu3w3Y
🚨 The top #CVEs of #2025 weren’t just severe - they were exploited fast.
From #React2Shell to #ToolShell & #CitrixBleed2, attackers weaponized flaws before many orgs could #patch.
📊 https://t.co/kAxe1F3q36
新報告：SharePointのToolShell脆弱性 (CVE-2025-53770/53771) を狙い、Webシェルではなくインメモリ実行型ペイロードが使われている。ネットワークログ＆PCAPでのハンティング必須。#SharePoint #ToolShell #SANSISC https://t.co/ch0bKG6FLy
"#Chinese Threat Actors #Exploit #ToolShell #SharePoint Flaw Weeks After #Microsoft's July Patch"
https://t.co/ekPPvYhFvU
I'm sure "FUCK Microsoft!!!!!!" is what many admin's are saying right now.
@Microsoft=💩
#Linux =🐧
#CyberSecurityNews #TechNews #Windows #WindowsServer
#Warlock #ransomware: Old actor, new tricks? - #ToolShell vuln used in attacks by China-based actor. Read more: https://t.co/1wOh2tZxmh
#ToolShell Used to Compromise Telecoms Company in Middle East - #ZingDoor and #KrustyLoader also used in attacks that hit victims in a variety of countries and sectors. Read more: https://t.co/xFZyjrnoRo
Storm-2603 milks ToolShell: CISA flags SharpyShell; Warlock hitting unpatched SharePoint. Rotate machine keys & patch now. 🔓🐼
Read: https://t.co/A0WUzGV5Sr
#AlphaHunt #CyberSecurity #ToolShell
#ThreatProtection #ProjectAK47 malware links threat actor to #ToolShell activity, read more about Symantec's coverage: https://t.co/H2v9imYQyi
We’ve released a Malware Analysis Report with analysis & detection signatures on files related to Microsoft SharePoint vulnerabilities known as #ToolShell. Review IOCs and detection signatures in our 🆕report 👉 https://t.co/W7EvST0x6e
#WeeklyThreats: Le ultime sugli attacchi basati su #ToolShell, gruppi #cybercrime colpiscono realtà italiane, forniti nuovi dettagli circa #APT russi e cinesi.
L'ultima settimana nel nostro report #OSINT e #CTI
🔗 https://t.co/hr4xm66wa1
@TelsyGruppoTIM #ThreatIntelligence
New cyber threat: ToolShell is exploiting #SharePoint flaws (CVE-2025-53770 & CVE-2025-53771) for full server access — no login needed.
Learn how it works + how to defend against it:
Critical Cyber Update: https://t.co/pzkn6AelYy
#Cybersecurity #MatriumInsights #ToolShell
#Storm2603, a suspected China-based #ThreatActor, is exploiting Microsoft SharePoint #ToolShell #vulnerability to deploy #WarlockRansomware. They use a custom command-and-control framework, #AK47C2, with HTTP and DNS clients. #onpatrol4malware
https://t.co/YLvgyh4ZOM
‼️ #ToolShell: Ricostruzione di una catena di attacco post-compromissione di #SharePoint
🔗 https://t.co/Dvprk3KABc
👉 Report di #Analisi #Forense a cura dello #CSIRT_ITalia
17000以上のオンプレミス SharePoint サーバが公開され、840台がゼロデイ（CVE‑2025‑53770）に未対応。400以上の組織が侵害され、20台以上にwebshell検出。中国系グループが攻撃主導。#ToolShell #SharePointRisk https://t.co/hHiVqd2gwn
Check out our latest episode of Practical Protection: SharePoint and ToolShell https://t.co/Hcem7VZgLX @paulrobichaux
#ToolShell #Sharepoint #vulnerability #Security
Unit 42 recently identified an unattributed group leveraging the recent #ToolShell exploits to deliver 4L4MD4R #ransomware on July 27th 2025. More info at https://t.co/rBfy0QNsSL
#CeSIAnalysis - L’operazione cibernetica #toolshell ha colpito oltre 400 entità, incluse agenzie governative USA, evidenziando la vulnerabilità degli #assetdigitali strategici e la crescente complessità della #hybridwarfare.
🔗https://t.co/jnTtFVW64V.
كاسبرسكي: ثغرات “SharePoint” الجديدة مرتبطة بإصلاح غير مكتمل منذ 2020
#البوابة_التقنية
#تقنية #كاسبرسكي #الأمن_السيبراني #مايكروسوفت
#Microsoft365 #SharePoint #ToolShell
https://t.co/nAYXgpiUS4
El equipo de #ESETResearch ha estado monitoreando una serie de ataques que explotan las #vulnerabilidades zero-day recientemente descubiertas en Microsoft SharePoint, conocidas como #ToolShell https://t.co/Ll01itPmgy vía @ESETLA
新ツールチェーン“ToolShell”、零日SharePoint脆弱性（CVE‑53770/53771）を用いた攻撃が世界中で進行中。修正迂回やファイルレス展開で機密窃取・Warlockランサム配布も。数千台が危険領域に。#ToolShell #SharePointZeroDay
https://t.co/sZU11eKwLX
Sotwe'de En Son Görülen Etiketler
mgai Anxiouspandaa
Son görüldüğü yer United States
ยะลา
Son görüldüğü yer Thailand
vtubercommission
Son görüldüğü yer United States
mgai
Son görüldüğü yer Argentina
beurette #marocaine
Son görüldüğü yer Spain
ตัดหัว
Son görüldüğü yer Thailand
knotslut
Son görüldüğü yer Germany
沦陷大叔
Son görüldüğü yer Malaysia
neymar135videotwitter
Son görüldüğü yer Mexico
anal midget
Son görüldüğü yer Germany
Senin İçin Trendler
En Popüler Kullanıcılar
Elon Musk 
@elonmusk
241.5M takipçi
Barack Obama
@barackobama
118.8M takipçi
Cristiano Ronaldo
@cristiano
114.5M takipçi
Donald J. Trump
@realdonaldtrump
111.9M takipçi
Narendra Modi
@narendramodi
107.1M takipçi
Rihanna
@rihanna
98.7M takipçi
NASA
@nasa
92.3M takipçi
Justin Bieber
@justinbieber
91.8M takipçi
KATY PERRY
@katyperry
90M takipçi
Taylor Swift
@taylorswift13
84M takipçi
Lady Gaga
@ladygaga
75.5M takipçi
Virat Kohli
@imvkohli
73.4M takipçi
Kim Kardashian
@kimkardashian
70.8M takipçi
YouTube
@youtube
68.8M takipçi
Neymar Jr
@neymarjr
66.5M takipçi
Bill Gates
@billgates
65.2M takipçi
Selena Gomez
@selenagomez
63.1M takipçi
The Ellen Show
@theellenshow
62.2M takipçi
CNN
@cnn
61.7M takipçi
X
@x
60.7M takipçi