ToolShell: An all-you-can-eat buffet for threat actors

The ToolShell zero-day vulnerabilities in Microsoft SharePoint have triggered a global wave of attacks, enabling a wide spectrum of threat actors—including nation-state APTs—to bypass authentication, deploy webshells, and steal sensitive data from unpatched on-premises servers.