Warlock Exploits SharePoint Vulnerabilities to Disable Security Defenses and Deploy Ransomware

A China-linked threat actor known as Warlock continues to exploit security flaws in Microsoft SharePoint to target organizations in Portuguese- and…

Immediately audit your SharePoint installations and apply the latest Microsoft security patches. Strengthen monitoring for anomalous traffic to and from SharePoint servers and verify that security tools remain active and unmodified. Consider isolating instances exposed directly to the internet.