Cisco Talos Incident Response observed a surge in attacks exploiting public-facing applications, mainly via ToolShell targeting SharePoint, for initial access, with post-exploitation phishing and evolving ransomware tactics also persisting this quarter.
First seen on blog.talosintelligence.com
Jump to article: blog.talosintelligence.com/ir-trends-q3-2025/
