Chinese Hackers Exploit SharePoint Zero-Days in Global 'ToolShell' Attack Spree
State-linked Chinese threat actors are actively exploiting critical Microsoft SharePoint zero-day vulnerabilities, breaching dozens of multinational corporations and government entities. The 'ToolShell' exploit chain enables unauthenticated remote code execution, granting attackers full access to servers and sensitive data. With proof-of-concept exploits now public, organizations must urgently patch vulnerable on-premises SharePoint systems.