Sophos uncovers GOLD SALEM, a new ransomware group exploiting SharePoint flaws. The group uses EDR evasion and legitimate tools to attack global targets.

Australia’s ICT regulatory environment in 2025 is evolving rapidly with stricter requirements under the SOCI Act, Privacy Act reforms, and…

In cybersecurity, the battlefield is rarely where you expect it. Sometimes, it’s not the flashy zero-days or exotic malware strains that…

Symantec exposed Warlock ransomware (a probable Anylock rebrand) used by China-linked Storm-2603. It exploits the SharePoint zero-day and BYOVD to disable security and encrypt files with the .x2anylock extension.

Hackers exploited the ToolShell SharePoint RCE flaw (CVE-2025-53770) to deploy Zingdoor and ShadowPad in attacks on global telecom and government targets.

Government-backed hackers breached a US nuclear component manufacturer (KCNSC) using unpatched SharePoint RCE flaws, accessing sensitive IT and financial data.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

GOLD SALEM (Storm-2603) is exploiting SharePoint via ToolShell then abusing the Velociraptor DFIR tool as a ransomware precursor. The group deploys Warlock and LockBit 3.0 variants, often targeting critical infra.

Researchers at Check Point Research have uncovered a large-scale espionage operation conducted by the Chinese APT group Ink

Microsoft has disclosed a sophisticated sequence of multi-stage incursions leveraging Adversary-in-the-Middle (AiTM) session hijacking in tandem with Business