Warlock reportedly continues to exploit SharePoint flaws in critical infrastructure attacks

SecurityWeek, citing Symantec, reports that Warlock’s operator continues to exploit SharePoint vulnerabilities. Symantec says at least four organizations in Portuguese- and Spanish-speaking countries were hit over two months, including a water utility, telecom provider, regional government body and university. In one intrusion, attackers disabled security software on at least 40 systems and ran Warlock ransomware on at least 33.