Warlock exploits SharePoint vulnerabilities to disable security tools
A threat actor tracked as Warlock is using SharePoint vulnerabilities to drop web shells, disable endpoint defenses, and stage ransomware across networks, according to The Hacker News and Symantec and Carbon Black.