Related Threat Clusters
-
Microsoft SharePoint Attacks: Over 400 Victims Including US Agencies
A series of attacks exploiting zero-day vulnerabilities in Microsoft SharePoint has compromised over 400 organizations, including multiple US government agencies. The attacks, attributed to Chinese threat groups such as…
2 articles · Updated August 12, 2026 -
Warlock Ransomware Group Enhances Attack Techniques with BYOVD and Remote Access Tools
The Warlock ransomware group, also known as Water Manaul, has escalated its attack methods by exploiting unpatched Microsoft SharePoint servers and employing new tactics for persistence and lateral movement. Recent…
5 articles · Updated March 16, 2026 -
Multiple Attackers Exploit Unpatched SharePoint Servers, Microsoft Reports
Microsoft's DART team discovered two distinct threat actors operating simultaneously within the same victim network, complicating incident response efforts. The investigation began with ransomware activity linked to…
5 articles · Updated June 23, 2026 -
Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching
BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…
1495 articles · Updated February 9, 2026
Recent Intelligence Reports
- CyberScoop: Microsoft SharePoint attacks ensnare 400 victims, including US agencies — cyberscoop.com · August 13, 2026
- Microsoft Uncovers Parallel Threat Activity From Two Cyberattackers in Single Intrusion — Gbhackers · June 23, 2026
- Warlock Ransomware Group Augments Post — Darkreading · March 17, 2026
- IR Trends Q3 2025: ToolShell attacks dominate, highlighting criticality of segmentation and rapid response — Blog.Talosintelligence · October 23, 2025