Warlock Ransomware Hitting Victims Globally Through SharePoint ToolSheInfosecurity Magazine·Aug 20, 12:00 UTC · Aug 20, 2025Ransomware60
Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail ServerThe Hacker News·Feb 12, 05:15 UTC · Feb 12, 2026Ransomware in the wildCVE-2025-52691CVE-2026-23760CVE-2026-2442360
Microsoft says Warlock ransomware deployed in SharePoint attacks as governments scrambleThe Record·Jul 24, 16:00 UTC · Jul 24, 2025RansomwareCVE-2025-4970660
Hackers Turn Velociraptor DFIR Tool Into Weapon in LockBit Ransomware AttacksThe Hacker News·Oct 11, 13:04 UTC · Oct 11, 2025RansomwareCVE-2025-626460
Orange Data Breach Raises SIMInfosecurity Magazine·Aug 21, 11:30 UTC · Aug 21, 2025Data breachCVE-2025-5377060
Three hacking groups, two vulnerabilities and all eyes on ChinaThe Record·Dec 8, 15:09 UTC · Dec 8, 2025VulnerabilityCVE-2025-49704CVE-2025-49706CVE-2025-53770+1 CVEs60
IR Trends Q3 2025: ToolShell attacks dominate, highlighting criticality of segmentation and rapid responseCisco Talos·Oct 23, 10:00 UTC · Oct 23, 2025Ransomware in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49704+1 CVEs160
Storm-2603 spotted deploying ransomware on exploited SharePoint serversHelp Net Security·Aug 4, 12:44 UTC · Aug 4, 2025Ransomware in the wildCVE-2025-53770CVE-2025-49706CVE-2025-49704+2 CVEs160
SolarWinds Web Help Desk Exploited for RCE in MultiThe Hacker News·Mar 7, 07:03 UTC · Mar 7, 2026Vulnerability in the wildCVE-2025-40551CVE-2025-40536CVE-2025-26399+1 CVEs60
Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security ToolsThe Hacker News·Feb 17, 05:50 UTC · Feb 17, 2026RansomwareCVE-2025-68947CVE-2025-6115560
Threat Actors Ramp Up Public App Exploits as ToolShell Gains TractionInfosecurity Magazine·Oct 24, 12:29 UTC · Oct 24, 2025Threat actor in the wildCVE-2025-53770CVE-2025-5377160
ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & MoreThe Hacker News·Oct 3, 04:59 UTC · Oct 3, 2025MalwareCVE-2024-3400CVE-2017-792160
Security Affairs newsletter Round 538 by Pierluigi PaganiniSecurity Affairs·Aug 24, 07:18 UTC · Aug 24, 2025RansomwareCVE-2025-29824CVE-2025-31324CVE-2025-4330060
Microsoft SharePoint attacks ensnare 400 victims, including federal agenciesCyberScoop·Jul 24, 18:39 UTC · Jul 24, 2025Ransomware in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49706+3 CVEs60
Latin America and the Caribbean Cybercrime LandscapeRecorded Future·Apr 1, 00:00 UTC · Apr 1, 2026Ransomware60
France's Cybersecurity Agency Reports Ransomware Attack Drop in 2025Infosecurity Magazine·Mar 11, 16:50 UTC · Mar 11, 2026Ransomware60
CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively ExploitedThe Hacker News·Mar 11, 07:17 UTC · Mar 11, 2026Vulnerability in the wildCVE-2021-22054CVE-2025-26399CVE-2026-160360
How a noisy ransomware intrusion exposed a long-term espionage footholdHelp Net Security·Dec 2, 00:00 UTC · Dec 2, 2025RansomwareCVE-2025-53770CVE-2024-21887CVE-2025-4427+2 CVEs60
China-linked hackers exploit patched ToolShell flaw to breach Middle East telecomSecurity Affairs·Oct 24, 08:37 UTC · Oct 24, 2025Vulnerability in the wildCVE-2025-53770CVE-2021-3694260
Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July PatchThe Hacker News·Oct 22, 12:56 UTC · Oct 22, 2025VulnerabilityCVE-2025-53770CVE-2025-49704CVE-2025-49706+1 CVEs160
⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, ZeroThe Hacker News·Oct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-2104360
⚡ Weekly Recap — SharePoint Breach, Spyware, IoT Hijacks, DPRK Fraud, Crypto Drains and MoreThe Hacker News·Jul 28, 15:57 UTC · Jul 28, 2025Malware in the wildCVE-2025-49706CVE-2025-49704CVE-2025-20281+27 CVEs60
Week in review: Microsoft SharePoint servers under attack, landing your first cybersecurity jobHelp Net Security·Jul 27, 00:00 UTC · Jul 27, 2025Ransomware in the wildCVE-2025-40599CVE-2025-5430960
Chinese nation-state groups exploiting SharePoint vulnerability, Microsoft confirmsThe Record·Jul 22, 19:12 UTC · Jul 22, 2025Vulnerability in the wildCVE-2025-49706CVE-2025-49704CVE-2025-53770+1 CVEs60
Microsoft Links Ongoing SharePoint Exploits to Three Chinese Hacker GroupsThe Hacker News·Jul 22, 16:43 UTC · Jul 22, 2025RansomwareCVE-2025-49706CVE-2025-49704CVE-2025-53771+1 CVEs60
SharePoint ‘ToolShell’ Vulnerabilities Exploited by Chinese HackersInfosecurity Magazine·Jul 22, 15:40 UTC · Jul 22, 2025VulnerabilityCVE-2025-53770CVE-2025-5377160
Beers with Talos Ep. #87: Happy 3rd birthday BWT — It’s story time!Cisco Talos·Jul 8, 13:40 UTC · Jul 8, 2020Industry55