Research
4 MIN
ToolShell: When Patching Isn't the Whole Fix
The SharePoint exploitation wave stole cryptographic machine keys, so attackers could return after servers were patched. A timeline of the campaign, why key theft changes response, and what to check on any on-premises SharePoint farm.