Chinese Hacking Group Warlock Escalates SharePoint Exploitation Targeting Critical Infrastructure

A China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025 to conduct targeted attacks on critical infrastructure. The…

Security teams in critical infrastructure must urgently review SharePoint controls and patches in their environments, audit access logs for anomalous activity, and strengthen detection mechanisms on collaborative systems. Stay informed on Microsoft advisories regarding SharePoint vulnerabilities and apply updates as soon as they become available.