Patching against an automated adversary
Posted in Security Architecture, Technology on Jul 23rd, 2025
This month a critical vulnerability in on-premises SharePoint, called ToolShell, was exploited on a massive scale. Attackers could run code on internet facing servers without logging in. Within days, several hundred servers in many countries were confirmed compromised, and the attackers stole the servers´ machine keys, which let them keep access even after the patch. […]