Parasitic SharePoint Exploits

We are seeing attacks against SharePoint itself and attempts to exploit backdoors left behind by attackers.

https://isc.sans.edu/diary/Parasitic%20Sharepoint%20Exploits/32148

Cisco ISE Vulnerability Exploited

A recently patched vulnerability in Cisco ISE is now being exploited. The Zero Day Initiative has released a blog detailing the exploit chain to obtain code execution as an unauthenticated user.

https://www.zerodayinitiative.com/blog/2025/7/24/cve-2025-20281-cisco-ise-api-unauthenticated-remote-code-execution-vulnerability

MyAsus Vulnerablity

The MyAsus tool does not store its access tokens correctly, potentially providing an attacker with access to sensitive functions

https://www.asus.com/content/security-advisory/