Hackers are exploiting SharePoint's CVE-2026-50522 to steal machine keys after patching, echoing 2025's ToolShell nation-state breach a year later.