Microsoft Investigates SharePoint Vulnerabilities Exploited in Ransomware Attacks
TL;DR
A China-based hacking group, Storm-2603, is exploiting vulnerabilities in Microsoft SharePoint servers to deploy Warlock ransomware, affecting over 420 servers globally and targeting various U.S. government agencies and organizations, with Microsoft urging immediate security updates.
- Microsoft: SharePoint flaws exploited in Warlock ransomware attacks BleepingComputer
- Microsoft says some SharePoint server hackers now using ransomware Reuters
- Microsoft Probing If Chinese Hackers Learned SharePoint Flaws Through Alert Bloomberg
- ToolShell: An all-you-can-eat buffet for threat actors WeLiveSecurity
- Disrupting active exploitation of on-premises SharePoint vulnerabilities Microsoft
Want the full story? Read the original reporting
Read on BleepingComputer