Strings in the maze: Finding hidden strengths and gaps in your team
Summary: Cisco Talos' IR Trends Q3 2025 report found over 60% of incident response cases involved attackers exploiting public-facing applications, mainly through the ToolShell attack chain against unpatched Microsoft SharePoint servers, up from under 10% the prior quarter. About 20% of cases were ransomware-related, down from 50%, while attackers increased use of compromised internal accounts for phishing and public administration became the top targeted sector for the first time since the reports began in 2021.
What you should know: Attackers are exploiting new vulnerabilities almost immediately, so even small delays in patching widely used software like SharePoint can put an organization and its data at serious risk.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026