Topic: detection indicators compromise

Microsoft SharePoint Zero-Day Exploited in RCE Attacks - No Fix Yet

Microsoft SharePoint is under active attack via zero-day vulnerabilities (CVE-2025-53770 and CVE-2025-53771), enabling remote code execution on on-premises servers, with at least 85 servers compromised globally. Microsoft recommends mitigations like enabling AMSI, deploying Defender AV, and rotat...