Follow the latest coverage, related explainers and connected technology stories.
The China-linked Warlock ransomware group exploited Microsoft SharePoint vulnerabilities to breach a water facility, a telecommunications operator, a regional government entity, and a university, before disabling security tools and deploying ransomware on dozens of devices.
Defused detected attempts to chain two vulnerabilities in Microsoft SharePoint, one for authentication bypass and the other for remote code execution, after proof-of-concept exploits were publicly released. The company has not yet observed command execution in its honeypots, but more than 8,700 internet-exposed SharePoint servers represent a significant attack surface.