United States Secret Service

Mentions · 7d3
Mentions · 30d3
All mentions3
First seenOct 20, 2026
Last mentioned4d ago

Timeline

3 articles · newest first

SafePay Ransomware Affects 600+ Organizations

SafePay ransomware has compromised at least 600 organizations since August 2024 by exploiting exposed VPNs, remote access and backup servers.

Cyber Security Newsupdated Oct 22, 06:48 UTC · 3d agofirst Oct 21, 07:27 UTC · 4d agoRansomwareExploited7 sourcesCVE-2020-3259 CVE-2023-20269 CVE-2023-27532+2

CISA says SafePay ransomware hit 600+ organizations and wiped backups

The October 20 joint advisory covers activity since August 2024 and five exploited CVEs, including critical CVE-2024-40711.

GBHackersupdated Oct 22, 06:48 UTC · 3d agofirst Oct 21, 07:07 UTC · 4d agoRansomwareExploited7 sourcesCVE-2020-3259 CVE-2023-20269 CVE-2023-27532+23 · 2 reads

CISA, FBI detail SafePay ransomware hitting 600+ victims since 2024

Agencies say SafePay uses stolen or guessed passwords, phishing, and five known edge-device flaws, then encrypts files for crypto payment.

CISA Advisoriesupdated Oct 22, 06:48 UTC · 3d agofirst Oct 20, 12:00 UTC · 5d agoRansomwareExploited7 sourcesCVE-2020-3259 CVE-2023-20269 CVE-2023-27532+2

Related CVEs

by mentions

CVE-2024-4071190%9.8
Unauthenticated Deserialization RCE in Veeam Backup & Replication
published Sep 7, 2024Veeam Backup & ReplicationKEVRansomwarePoC
CVE-2024-4076618%9.8
Improper Access Control in SonicWall SonicOS Management (Gen 5/6/7 Firewalls)
published Aug 23, 2024SonicWall SonicOS (Gen 5 firewalls)KEVRansomware
CVE-2023-2026925%9.1
Unauthenticated Brute-Force VPN Access in Cisco ASA and Firepower Threat Defense
published Sep 6, 2023Cisco Adaptive Security Appliance (ASA)KEVRansomware
CVE-2020-325972%7.5
Unauthenticated Memory-Disclosure Flaw in Cisco ASA and FTD Web Services
published May 6, 2020Cisco Adaptive Security Appliance (ASA) SoftwareKEVRansomware
CVE-2023-2753281%7.5
Missing Authentication in Veeam Backup & Replication Exposes Stored Credentials
published Mar 10, 2023Veeam Backup & ReplicationKEVRansomware

Appears with

FBIorganization · 3
CISAorganization · 3
SafePaythreat actor · 3
SafePaymalware · 2
SonicWallvendor · 1
National Crime Agencyorganization · 1
UK law enforcementorganization · 1
Landeskriminalamt Rheinland-Pfalzorganization · 1
SonicOSproduct · 1
600+ organizations in critical infrastructurevictim · 1
German investigatorsorganization · 1

Entities are extracted by the model from each article. First seen Oct 20, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.