SafePay Ransomware Affects 600+ Organizations
SafePay ransomware has compromised at least 600 organizations since August 2024 by exploiting exposed VPNs, remote access and backup servers.
90
Country
North America
- Mentions · 7d0
- Mentions · 30d1
- All mentions3
- First seenAug 19, 2026
- Last mentioned12d ago
Timeline
3 articles · newest firstAI Coding Tools Now a Prime Target for Threat Actors, Google Warns
Google Threat Intelligence Group warns threat actors increasingly target AI coding tools and proprietary AI data, with UNC6780's Dustmaker enabling large-scale supply chain compromises.
75
Banks look for fraud signals in customer behavior
ThreatMark's 2026 benchmark finds 55% of banks see social engineering in most fraud, pushing behavioral intelligence and earlier detection during customer sessions.
28
Related CVEs
by mentions- CVE-2024-4071190%9.8Unauthenticated Deserialization RCE in Veeam Backup & Replication
- CVE-2024-4076618%9.8Improper Access Control in SonicWall SonicOS Management (Gen 5/6/7 Firewalls)
- CVE-2023-2026927%9.1Unauthenticated Brute-Force VPN Access in Cisco ASA and Firepower Threat Defense
- CVE-2020-325972%7.5Unauthenticated Memory-Disclosure Flaw in Cisco ASA and FTD Web Services
- CVE-2023-2753281%7.5Missing Authentication in Veeam Backup & Replication Exposes Stored Credentials
Appears with
- Google Threat Intelligence Groupvendor · 1
- CISAorganization · 1
- GitHub Actionsproduct · 1
- Googleorganization · 1
- Fraud Readiness Benchmark 2026product · 1
- Dustmakermalware · 1
- Geminivendor · 1
- UNC6780threat actor · 1
- PyPIvendor · 1
- ThreatMarkorganization · 1
- Reconmalware · 1
- German investigatorsorganization · 1
- FBIorganization · 1
- SafePaythreat actor · 1
- npmvendor · 1
- United States Secret Serviceorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.