Threat Intel

Threat actor analysis, TTPs, IOCs, malware observations, advisory-style writeups, campaign summaries, OSINT findings, and defensive implications.

Threat Intel

URGENT ADVISORY: ToolShell — Critical SharePoint RCE Chain Under Active Exploitation

URGENT: CVE-2025-53770/53771 ToolShell exploit chain under active exploitation since July 17, 2025. If you run on-prem SharePoint Server, you are vulnerable to unauthenticated RCE.