Australia’s ICT regulatory environment in 2025 is evolving rapidly with stricter requirements under the SOCI Act, Privacy Act reforms, and…

In cybersecurity, the battlefield is rarely where you expect it. Sometimes, it’s not the flashy zero-days or exotic malware strains that…

Symantec exposed Warlock ransomware (a probable Anylock rebrand) used by China-linked Storm-2603. It exploits the SharePoint zero-day and BYOVD to disable security and encrypt files with the .x2anylock extension.

Hackers exploited the ToolShell SharePoint RCE flaw (CVE-2025-53770) to deploy Zingdoor and ShadowPad in attacks on global telecom and government targets.

Government-backed hackers breached a US nuclear component manufacturer (KCNSC) using unpatched SharePoint RCE flaws, accessing sensitive IT and financial data.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

GOLD SALEM (Storm-2603) is exploiting SharePoint via ToolShell then abusing the Velociraptor DFIR tool as a ransomware precursor. The group deploys Warlock and LockBit 3.0 variants, often targeting critical infra.

Researchers at Check Point Research have uncovered a large-scale espionage operation conducted by the Chinese APT group Ink

Microsoft has disclosed a sophisticated sequence of multi-stage incursions leveraging Adversary-in-the-Middle (AiTM) session hijacking in tandem with Business

A full step-by-step guide with all scripts to deploy a vulnerable SharePoint-style site on Windows IIS and ship its logs with Fluent Bit —…

Microsoft’s April 2026 Patch Tuesday fixes 163 flaws, including an exploited SharePoint spoofing bug (CVE-2026-32201). Patch by April 28 per CISA mandate.

The April iteration of “Patch Tuesday” has arrived with such consequence that to overlook it would be an

Ancient vulnerabilities frequently resurface at the most unforeseen junctures. While Microsoft was disseminating its April suite of security

Explore attacks on SharePoint and learn detection strategies from a SOC perspective.

TL;DR Researchers have published full technical details and proof-of-concept code for a SharePoint remote code execution flaw. Tracked as CVE-2026-33112 (CVSS 8.8), it lets a low-privilege user ru…