CTIR trends
Tagsransomware
Full article59 words · extracted from blog.talosintelligence.com · click to collapse
October 23, 2025 06:00
IR Trends Q3 2025: ToolShell attacks dominate, highlighting criticality of segmentation and rapid response
Cisco Talos Incident Response observed a surge in attacks exploiting public-facing applications — mainly via ToolShell targeting SharePoint — for initial access, with post-exploitation phishing and evolving ransomware tactics also persisting this quarter.
By Lexi DiScola
Text extracted automatically; images, tables and formatting may be missing. Original: https://blog.talosintelligence.com/category/ctir-trends-2/