{"ok":true,"trend":{"id":878719,"platform":"mastodon","region":"global","key":"🤖 china-linked actor warlock is still exploiting microsoft sharepoint flaws, both old and new, to disable security tools","title":"🤖 China-linked actor Warlock is still exploiting Microsoft SharePoint flaws, both old and new, to disable security tools","url":"https://infosec.exchange/@cloud/117377736976519832","first_seen":"2026-10-03T16:18:16.388850Z","last_seen":"2026-10-03T16:18:16.388850Z","last_rank":11,"peak_rank":11,"last_volume":1,"peak_volume":1,"seen_count":1,"score":0.78734375,"category_hint":"cybersecurity","section":"technology","category":"cybersecurity","summary":"Symantec's Carbon Black unit reports that Warlock, a China-linked threat actor, continues to exploit both patched and newly disclosed Microsoft SharePoint vulnerabilities to disable security tools and deploy ransomware. Targets include critical infrastructure, government bodies and educational organisations in Portuguese- and Spanish-speaking countries. Security teams are urged to patch SharePoint servers and monitor for attempts to tamper with endpoint protection.","why":"Organisations are on alert over ongoing ransomware attacks exploiting SharePoint flaws.","tone":"negative","entities":["Warlock","Microsoft SharePoint","Symantec","Carbon Black"],"summarized_at":"2026-10-03T16:19:22.842054Z","meta":{"tag":"infosec","via":"scan","kind":"status","lang":"en","instance":"mastodon.social","tag_uses":1189},"nw":null,"promo":null,"kind":null,"importance":null,"hidden":false,"hide_reason":null,"judged_at":null,"title_en":"China-linked Warlock group keeps exploiting SharePoint flaws","section_name":"Technology","category_name":"Cybersecurity","timeline":[{"captured_at":"2026-10-03T16:18:16.388850Z","rank":11,"volume":1}],"posts":[{"platform":"mastodon","url":"https://infosec.exchange/@cloud/117377736976519832","author":"cloud@infosec.exchange","title":null,"snippet":"🤖 China-linked actor Warlock is still exploiting Microsoft SharePoint flaws, both old and new, to disable security tools and deploy ransomware. Targets: critical infrastructure, government and education orgs in Portuguese- and Spanish-speaking countries (Symantec/Carbon Black).…","posted_at":"2026-10-03T15:42:09Z","likes":1}],"elsewhere":[],"window":"7d"}}