CISA Releases Malware Analysis Report Associated with Microsoft SharePoint Vulnerabilities

Source: All CISA Advisories | Added:

CISA has released a Malware Analysis Report detailing malware associated with Microsoft SharePoint vulnerabilities, specifically CVE-2025-49704 and CVE-2025-49706. These vulnerabilities have been exploited by cyber threat actors using an exploit chain known as 'ToolShell' to gain unauthorized access to SharePoint servers and steal sensitive data.

---

Impact: Microsoft SharePoint

In the Wild: Yes

Age: Recently disclosed

Remediation: Organizations are encouraged to use the indicators of compromise (IOCs) and detection signatures provided in the MAR to identify malware.

Read Full Original Article →