Hackers Target SharePoint Flaw to Access IIS Machine Keys

Zero-day exploits against Microsoft SharePoint are enabling attackers to extract IIS machine keys, establishing persistent backdoors that survive patches and reboots. In mid-July 2025, threat actors began abusing two critical SharePoint vulnerabilities—CVE-2025-53770 (deserialization, CVSS 9.8) and CVE-2025-53771 (authentication bypass, CVSS 6.3)—in an attack campaign dubbed “ToolShell”. The campaign’s ultimate goal is harvesting IIS machine keys, which protect ViewState, […]

The post Hackers Target SharePoint Flaw to Access IIS Machine Keys appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.