Ransomwarecritical
Microsoft says Warlock ransomware deployed in SharePoint attacks as governments scramble
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-49706 | Improper Authentication in Microsoft SharePoint Server (ToolShell Campaign) | 6.5 | 99% | KEVRansomware | KEV |
From the original article
3 min read at therecord.media
Chinese hackers are exploiting a new vulnerability in Microsoft SharePoint products to deploy ransomware, increasing the pressure on governments around the world as they race to assess any damage done to their systems. In an update on Wednesday night, Microsoft said a China-based actor it identifies as Storm-2603 is now deploying Warlock ransomware after exploiting CVE-2025-49706.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.