The China-linked Warlock ransomware group has targeted critical infrastructure, including a water utility and a telecom provider. The attackers gained initial access by exploiting vulnerabilities in Microsoft SharePoint. Administrators are strongly advised to audit SharePoint deployments for unauthorized access and apply the latest security patches immediately to prevent compromise.

ransomwaresharepointvulnerabilityinitial-access
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →