CiberLATAMbywhalemate

#SharePoint

This archive brings together reporting on risks, vulnerabilities, and secure use of collaboration and document management platforms in corporate environments. It includes exposure analysis, defensive guidance, and context on how these tools shape the attack surface for organizations across Latin America.

Warlock exploited SharePoint in critical attacks

Symantec tied Warlock to a SharePoint on-prem intrusion that stole ASP.NET keys, disabled defenses and spread through SYSVOL.

Oct 21, 2026 · 38 min

Brazil flags Fortinet bypass, critical CVEs

Brazil’s CISC/MJSP bulletin cited active Fortinet exploitation, CVE-2025-20265, and alerts tied to .gov.br domains.

Oct 10, 2026 · 2 min

Mexico, Argentina hit by ransomware wave

The Gentlemen hit a Mexican organization, while BlackFog reported an attack on Argentina’s Oldelval and other incidents were cited in Colombia.

Oct 10, 2026 · 3 min

Mexico accounted for 52 ransomware attacks

SCILabs recorded 290 ransomware attacks in Latin America in the first half of 2026. Mexico accounted for 17.93%, with finance in focus.

Oct 4, 2026 · 4 min

CISA adds SharePoint CVE-2026-65660 to KEV

CISA added CVE-2026-65660 to the KEV catalog after active exploitation was reported. Microsoft has already released patches.

Sep 27, 2026 · 2 min

CISA adds five critical CVEs to KEV catalog

CISA added CVE-2026-73570 in Zimbra to KEV and set the federal remediation deadline for Aug. 24.

Aug 22, 2026 · 4 min

CISA Confirms SharePoint, Check Point Exploits

CISA added SharePoint and Check Point flaws to KEV as active exploitation continues. Latin America faces added pressure from ERP and firewall bugs.

Aug 4, 2026 · 3 min

CISA warns on three SharePoint flaws

CISA says three SharePoint Server on-premises flaws are being actively exploited and urges patching plus tighter hardening.

Jul 19, 2026 · 3 min