← Latest The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach Opened securelist.com Nov 5, 2026 researchcloudincidentprivacyctidetectionstorm-2603 A fileless SharePoint intrusion tracked as Storm-2603. Read at securelist.com ↗ Acknowledge Also covered by Securelist