The Cybersecurity and Infrastructure Security Agency published a malware analysis report on files related to Microsoft SharePoint vulnerabilities and encouraged organizations to use the indicators of compromise and detection signatures to identify malware.
CISA releases malware analysis report for SharePoint vulnerabilities
August 07, 2025 / By ICBA
The Cybersecurity and Infrastructure Security Agency published a malware analysis report on files related to Microsoft SharePoint vulnerabilities and encouraged organizations to use the indicators of compromise and detection signatures to identify malware.
The Cybersecurity and Infrastructure Security Agency published a malware analysis report on files related to Microsoft SharePoint vulnerabilities and encouraged organizations to use the indicators of compromise and detection signatures to identify malware.
Background: On July 19, Microsoft published a blog post addressing active attacks against on-premises SharePoint servers that exploit a spoofing vulnerability. The chain, publicly reported as “ToolShell,” enables malicious actors to fully access SharePoint content, including file systems and internal configurations, and execute code over the network.
More: CISA last week updated its alert on vulnerabilities with Microsoft SharePoint servers to reflect newly released information as threat actor tactics, techniques, and procedures continue to evolve.
Microsoft Recommendations: Microsoft recommends customers use supported versions of on-premises SharePoint servers with the latest security updates and enable Antimalware Scan Interface (AMSI) and Microsoft Defender Antivirus (or equivalent solutions) for all on-premises SharePoint deployments.
ICBA Resources: Additional cybersecurity resources for community bankers are available on ICBA’s Cyber and Data Security Center.
Subscribe now
Sign up for the Independent Banker newsletter to receive twice-monthly emails about new issues and must-read content you might have missed.
Sponsored Content
Featured Webinars
Join ICBA Community
Interested in discussing this and other topics? Network with and learn from your peers with the app designed for community bankers.
Subscribe Today
Sign up for Independent Banker eNews to receive twice-monthly emails that alert you when a new issue drops and highlight must-read content you might have missed.
News Watch Today
Join the Conversation with ICBA Community
ICBA Community is an online platform led by community bankers to foster connections, collaborations, and discussions on industry news, best practices, and regulations, while promoting networking, mentorship, and member feedback to guide future initiatives.
Join the Community Example Text
