Warlock ransomware hit water and telecom operators via SharePoint ToolShell, spreading over SYSVOL. https://intel.threadlinqs.com/threat/TL-2026-2833 #ThreatIntel #CVE_2025_49704 #CVE_2025_49706 #WarLock