[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![CrowdStrike Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::368621253.png) CrowdStrike [@CrowdStrike](/creator/twitter/CrowdStrike) on x 107.4K followers
Created: 2025-07-21 22:07:30 UTC

On July 18, CrowdStrike Falcon Complete and Adversary OverWatch identified and blocked a wave of exploitation attempts targeting two newly disclosed Microsoft SharePoint zero-day vulnerabilities — now known as ToolShell.

Our latest blog breaks down the attack chain, how the Falcon platform detects and blocks it, and what defenders need to know to stay protected.



![](https://pbs.twimg.com/media/Gwaeg8gXIAAHc5N.png)

XXXXX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1947418181561135583/c:line.svg)

**Related Topics**
[blocks](/topic/blocks)
[overwatch](/topic/overwatch)
[crowdstrike](/topic/crowdstrike)
[stocks technology](/topic/stocks-technology)
[microsoft](/topic/microsoft)

[Post Link](https://x.com/CrowdStrike/status/1947418181561135583)