exploitation

Exploitation hits Rejetto HFS vulnerability discovered by AI

by
Exploitation hits Rejetto HFS vulnerability discovered by AI

Threat actors are exploiting a critical vulnerability in the Rejetto HTTP File Server (HFS) to bypass authentication and gain remote code execution (RCE), VulnCheck warns. The flaw is tracked as CVE-2026-61500 (CVSS score of 9.3) and exists because the open source file server passes output from its non-cryptographic session cookie generator to unauthenticated clients during … Read more

Warlock expands SharePoint exploitation in attacks on critical infrastructure

by
Warlock expands SharePoint exploitation in attacks on critical infrastructure

The Warlock ransomware group continues to target SharePoint servers in attacks on critical infrastructure, government and educational institutions, Symantec reports. Warlock is believed to be operated by a China-based hacking group called Longlegs and Storm-2603, which has been linked to malicious operations such as CL-CRI-1040, CamoFei and ChamelGang. Last year, Chinese state-sponsored groups Linen Typhoon … Read more