https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving SmarterTools.Sun, 26 Jul 2026 22:32:52 GMThttps://reliaquest.com/blog/threat-spotlight-storm-2603-exploits-CVE-2026-23760-to-stage-warlock-ransomwarecst-2200ReliaQuest identified exploitation of CVE-2026-23760, a critical SmarterMail vulnerability, by the China-based threat actor Storm-2603 to bypass authentication and stage Warlock ransomware. The group abuses the software's Volume Mount feature for system control, then deploys Velociraptor, a legitimate forensic tool, to maintain persistence and prepare for ransomware deployment. The activity occurs alongside a separate wave of probes for CVE-2026-24423, indicating multiple threat vectors targeting internet-facing mail servers.Mon, 09 Feb 2026 10:00:00 GMT