🧰 Microsoft SharePoint

The items that name it 6

• This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
  article2026-10-27It is written here as Microsoft SharePoint (mentioned only as the 2025 CVE added to CISA KEV on a Sunday).

  mentioned only as the 2025 CVE added to CISA KEV on a Sunday

• ZDI: The October 2026 Security Update Review
  advisory2026-10-13
• Inside Knight Office, a New M365 AiTM Phishing Kit
  writeup2026-09-02

  Spoofed as the source of a phishing lure page implying a document to download

• A Threat Actor Abuses Another Free Trial
  writeup2026-03-06

  ToolShell exploitation observed; IP 51.161.152.26 also seen in a ToolShell case by Unit 42

• Velociraptor Misuse, Pt. II: The Eye of the Storm
  writeup2025-12-03

  Exploited via the ToolShell vulnerability chain (CVE-2025-49706, CVE-2025-49704, CVE-2025-53770, CVE-2025-53771) for authentication bypass and remote code execution, enabling web shell deployment across Incidents 1 and 2

• Known Exploited Vulnerabilities Catalog | CISA
  other