Skip to main content

Tag: cve 2025 49704

1 article

Server room with rows of computer equipment and network gear in a neutral, institutional space.

Warlock Ransomware Exploits SharePoint in Global Attacks

In a lightning-fast attack, the Warlock ransomware group exploited Microsoft SharePoint vulnerabilities to infect at least 40 hosts in just two hours, disabling endpoint protection and unleashing widespread chaos. This China-linked gang has been using a chain of zero-day exploits, including ToolShell, to gain initial access to on-premises SharePoint deployments.

Analyst 207