Warlock Ransomware Uses Year-Old SharePoint ToolShell Flaws Against a Water Utility and a Telecom

·2 views

TL;DR what: Warlock (Longlegs) broke into on-premises SharePoint servers at a water utility, a telecom provider, a regional government body and a university over two months, using the ToolShell vulnerabilities. impact: In one intrusion the group used a vulnerable K7RKScan driver to disable protection software on at least 40 hosts in about two hours, then pushed Warlock ransomware to 33 hosts from the domain SYSVOL share. fix: Microsoft released fixes for CVE-2025-49704, CVE-2025-49706, CVE-2025-53770 and CVE-2025-53771 in July 2025, and its ToolShell guidance also calls for rotating SharePoint

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

CVE-2026-63292: A Configuration-Dependent Stack Overflow in Apache httpd 2.4

CVE-2026-63292: A Configuration-Dependent Stack Overflow in Apache httpd 2.4 What Apache disclosed The Apache Software Foundation published CVE-2026-63292 as a stack-based buffer overflow in mod_vhost_alias, fixed in Apache HTTP Server 2.4.69 on 1 October 2026. Apache classifies the defect as moderate and states that all releases from 2.4.0 through 2.4.68 are affected on every platform. The advisory credits Hyojae Lee and Zhen Kong; the issue was reported on 17 June 2026 and fixed in the 2.4.x branch as r1938676. mod_vhost_alias removes the need for one block per hostname. Its VirtualDocumentR

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to export App Store and Google Play reviews to a spreadsheet

After a release, the fastest signal on what broke is the review section. But Apple and Google show reviews in different places, with different fields, and neither gives you a simple export. If you look after an app on both platforms, or watch competitor apps, you end up reading two stores by hand. The App Store and Google Play Reviews Scraper, published by Hay Equipos on the Apify Store, pulls public reviews from both stores in one run and returns them in one identical table. You paste app IDs or store links, choose a country and a sort order, and get ratings, review text, app versions, dates,

0 comments Read more at DEV Community

ProgrammingDEV Community ·

I built an AI content agent that would rather drop a topic than make things up

Most “AI writes your blog” setups fail in the same way: not with bad style, but with a confidently written falsehood. For most niches that is embarrassing. For an insurance website it is a real problem — a wrong sentence about a legal obligation or the scope of cover can mislead a reader. This is how I designed an AI agent for gopoistenie.sk, a Slovak insurance website (motor liability, comprehensive cover, GAP, home and travel insurance). It prepares one article every week — and it is built so that a lack of facts is a reason to stop, not a reason to improvise.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to export App Store top charts and search results to a spreadsheet

If you work on app store optimization, competitor tracking or market research, you need the same few numbers over and over: who ranks for a keyword, who sits in the top grossing chart, and how ratings and versions change. The App Store app shows this one screen at a time, which makes it slow to compare and impossible to track over weeks. The App Store Apps actor, published by Hay Equipos on the Apify Store, turns that into rows. It searches by keyword, looks up apps by id, App Store link or bundle id, and reads Apple's top free, paid and grossing charts for iPhone, iPad and Mac, for any countr

0 comments Read more at DEV Community