Storm-2603 Exploits CVE-2026-23760 to Stage Warlock Ransomware

Storm-2603 is actively exploiting a critical SmarterMail vulnerability (CVE-2026-23760) to bypass authentication, establish persistent access using legitimate tools, and stage Warlock ransomware on internet-facing servers—making immediate patching and network isolation essential to prevent widespread compromise.