Rapid7 says 71% of tracked exploitation starts within a week
Across 43 newly exploited high- and critical-severity flaws, disclosure-to-exploitation averaged three days.
54
Threat actor
INC Ransom
- Mentions · 7d1
- Mentions · 30d9
- All mentions12
- First seenSep 17, 2026
- Last mentioned3d ago
Timeline
12 articles · newest firstRapid7: high-severity flaws exploited within three days in Q3
The Gentlemen and Qilin led claimed ransomware incidents, the US accounted for 60% of attacks, and AI was operational in 8%.
56
Nord Security counts 2,894 ransomware attacks in third quarter
The July–September total is up 50% year over year and 8.6% from the prior quarter, led by The Gentlemen and Qilin.
62
Ahold Delhaize cyberattack disrupts services in the US and Europe
Stores stayed open; investigators have not found stolen customer, associate or partner data.
74
Ahold Delhaize takes US and European systems offline after cyberattack
Stores stayed open, and the company says investigators have found no evidence of stolen sensitive data.
74
Retail giant Ahold Delhaize takes systems offline after cyberattack
Ahold Delhaize took systems offline after a cyberattack, disrupting apps and scheduling at US and European grocery chains.
76
FBI: FortiBleed attackers can lock organizations out of their own firewalls
FBI says FortiBleed operators hit over 80,000 FortiGate devices and can lock victims out of firewalls.
84
FBI, Secret Service add to warnings of FortiBleed credential stealing campaign
FBI and Secret Service say FortiBleed compromised over 86,000 Fortinet firewalls in 194 countries.
90
Ransomware Data Theft Surged 275% in 2026: Schools, Hospitals, and Government Agencies Had Some of the Largest Claims
Zscaler ThreatLabz reports ransomware data theft claims surged 275%, with Babuk2, INC Ransom, and Pear claiming 30TB, 20TB, and 16TB thefts.
62
Ransomware Attacks Reach Record High for 2026
NCC Group reports a record 1,073 organizations hit by ransomware in August 2026, with Qilin and The Gentlemen the most prolific groups.
62
AI Agents Now Run Ransomware Attacks End-to-End Without Human Operators
SOCRadar documented JADEPUFFER, an AI agent that autonomously executed a ransomware campaign from Langflow exploit through encryption and extortion.
80
Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows
Black Kite reports manufacturing ransomware incidents up 40% in 2026, with new gang The Gentlemen responsible for 12% of attacks.
55
Related CVEs
by mentions- CVE-2025-3248100%9.8Unauthenticated RCE in Langflow /api/v1/validate/code
- CVE-2026-2485887%9.8FortiCloud SSO Authentication Bypass Across Multiple Fortinet Products
Appears with
- Qilinthreat actor · 5
- The Gentlementhreat actor · 5
- Lynxthreat actor · 3
- Ahold Delhaizevictim · 3
- SOCRadarorganization · 2
- Clopthreat actor · 2
- Akirathreat actor · 2
- FBIorganization · 2
- Gall & Gallvictim · 2
- Albert Heijnvictim · 2
- Rapid7organization · 2
- Dutch National Cyber Security Centreorganization · 2
- Stop & Shopvictim · 2
- FortiGateproduct · 2
- Delhaizevictim · 2
- Fortinetvendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.