#warlock)


Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

Oct 3, 2026 // 17:37

The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations […]

Warlock ransomware breach SharePoint in water, telecom operator attacks

Oct 2, 2026 // 23:17

The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain […]

Ransomware (Qilin, Warlock) exploits driver flaws to disable over 300 EDR security tools.

Apr 6, 2026 // 13:08

Cisco Talos and Trend Micro have found that threat actors using Qilin and Warlock ransomware are employing the bring your own vulnerable driver (BYOVD) method […]