Related Threat Clusters
-
Microsoft SharePoint Attacks: Over 400 Victims Including US Agencies
A series of attacks exploiting zero-day vulnerabilities in Microsoft SharePoint has compromised over 400 organizations, including multiple US government agencies. The attacks, attributed to Chinese threat groups such as…
2 articles · Updated August 12, 2026 -
Warlock Ransomware Group Enhances Attack Techniques with BYOVD and Remote Access Tools
The Warlock ransomware group, also known as Water Manaul, has escalated its attack methods by exploiting unpatched Microsoft SharePoint servers and employing new tactics for persistence and lateral movement. Recent…
5 articles · Updated March 16, 2026 -
Multiple Attackers Exploit Unpatched SharePoint Servers, Microsoft Reports
Microsoft's DART team discovered two distinct threat actors operating simultaneously within the same victim network, complicating incident response efforts. The investigation began with ransomware activity linked to…
5 articles · Updated June 23, 2026 -
Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching
BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…
1495 articles · Updated February 9, 2026 -
Security Updates for SharePoint Servers Address CVE-2025-49706
Microsoft released security updates for SharePoint Enterprise Server 2016 and SharePoint Server 2019 to address CVE-2025-49706. The updates were published on July 8, 2025, and are critical for users running these…
2 articles · Updated February 28, 2026
Recent Intelligence Reports
- CyberScoop: Microsoft SharePoint attacks ensnare 400 victims, including US agencies — cyberscoop.com · August 13, 2026
- Microsoft Uncovers Parallel Threat Activity From Two Cyberattackers in Single Intrusion — Gbhackers · June 23, 2026
- Warlock Ransomware Group Augments Post — Darkreading · March 17, 2026
- Description of the security update for SharePoint Enterprise Server 2016: July 8, 2025 (KB5002744) — Support.Microsoft · February 28, 2026
- Description of the security update for SharePoint Server 2019: July 8, 2025 (KB5002741) — Support.Microsoft · February 27, 2026
- IR Trends Q3 2025: ToolShell attacks dominate, highlighting criticality of segmentation and rapid response — Blog.Talosintelligence · October 23, 2025