Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

The suspected China-linked group Warlock has exploited multiple Microsoft SharePoint Server vulnerabilities in attacks against organizations in Portuguese- and Spanish-speaking countries. The attacks have affected critical infrastructure, government, and education organizations.