Microsoft SharePoint Servers in Thousands of Firms Targeted Using ToolShell Zero-Day Vulnerability

Microsoft has warned customers about active attacks exploiting a remote code execution (RCE) vulnerability in its SharePoint server software. Malicious actors are using this flaw to gain unauthorised and persistent access to on-premise servers, and thousands of organisations could be affected. Attackers may retain access even after servers are patched with updates released by Microsoft for SharePoint servers.