News

6 stories in the last 7d

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 236 Advisory 162 Exploit / PoC 140 Research 132 Industry 116 Policy & legal 64 Tools 63 Malware 61 Data breach 54 Threat actor 54 Phishing & fraud 47 Ransomware 6

SeverityAll critical 77 high 295 medium 273 low 100 info 390

Payroll system of mosques, madrasahs hit by ransomware; staff details potentially compromised

Ransomware hit Avelogic's SmartHRMS payroll system serving Singapore mosques and madrasahs under MUIS, potentially exposing staff details.

The SmartHRMS human resources and payroll system used by mosques and madrasahs overseen by Singapore's Islamic Religious Council (MUIS) was hacked and held for ransom. The system is supplied by Singapore-based software vendor Avelogic, which posted a cybersecurity incident notice on its website. Staff details are potentially compromised, according to The Straits Times.

DataBreaches.net22:08 UTC · 59m agoRansomware in the wild

Ransomware group claims attack on Missouri’s Cedar County Memorial Hospital after IT outage

Ransomware group claims attack on Cedar County Memorial Hospital in Missouri, forcing IT shutdown that disrupted EHRs and diverted emergency patients.

Cedar County Memorial Hospital in El Dorado Springs, Missouri shut down its IT networks on August 14 after a disruption left its electronic health record system, patient portal, and internet access unavailable. A ransomware group subsequently claimed responsibility for the attack. Diagnostic imaging was also disrupted, preventing transmission of images to radiologists, and the emergency department partially diverted trauma and critical patients.

DataBreaches.net11:49 UTC · 11h agoRansomware

Silent Ransom Group Hacked Greenberg Traurig; Who notifies the 126k Affected?

Silent Ransom Group listed law firm Greenberg Traurig on its leak site, with roughly 126,000 individuals affected by the breach.

Silent Ransom Group (SRG) added prominent law firm Greenberg Traurig to its leak site of attacked and leaked victims. DataBreaches.net reports exclusive details indicating approximately 126,000 people were affected and raises questions over who is notifying them. SRG's leak site previously carried 64 law firm listings, including Troutman Pepper Locke, reported breached on August 21.

DataBreaches.netSep 14, 13:03 UTC · 1d agoRansomware

New Android Ransomware Records Screens, Steals OTPs and Secretly Takes Photos of Victims

Zimperium uncovered Mantax Otax, an Android ransomware that encrypts files, records screens, steals OTPs, and secretly photographs victims.

Zimperium reported a new Android threat, Mantax Otax, that combines ransomware with surveillance: it encrypts files with AES and adds a .enc extension on Android 9 and older, while abusing MediaProjection for screenshots and MP4 screen recording and using hidden camera previews to photograph victims. The malware intercepts SMS one-time passwords, WhatsApp and Telegram data, and lock-screen PINs through Accessibility abuse and a fake system-lock overlay, and can negotiate ransoms via an on-screen chat. Malicious APKs are hosted on third-party file-sharing services, and researchers linked the activity to Indonesian threat actors, with C2 dynamically retrieved from a GitHub repository (apimantax[.]otax[.]fun). A second variant adds WebSocket communications, app blocking, full-screen overlays, and remote text-to-speech messages.

Cyber Security NewsSep 11, 12:14 UTC · 4d agoRansomware 6 sources

Harley-Davidson Alleged Breach – CL0P Ransomware Adds Motorcycle Maker to the List

CL0P ransomware group listed Harley-Davidson on its extortion leak site, claiming a compromise; the motorcycle maker has not confirmed any breach.

The CL0P ransomware operation added Harley-Davidson to its public extortion portal, a listing highlighted by the ransomNews monitoring account on September 10, 2026. Harley-Davidson has not confirmed any compromise, and the initial access method, affected business unit, timing, and volume of stolen data remain unknown, with no sample files or technical indicators published. The article stresses that leak-site listings alone do not confirm a breach and can serve as negotiation pressure in double-extortion schemes. If verified, stolen data could fuel downstream phishing, BEC, credential-stuffing, and invoice fraud targeting dealers, suppliers, and customers.

Cyber Security NewsSep 11, 07:26 UTC · 4d agoRansomware

“Network outage” disrupts Westfield Public Schools in New Jersey as ransomware group posts samples

A ransomware group posted stolen data samples after a districtwide network outage disrupted Westfield Public Schools in New Jersey.

Westfield Public Schools in New Jersey experienced a districtwide network outage during the first week of school, disrupting communications and digital instruction while classrooms stayed open. The district initially attributed the disruption to networking hardware failure across all schools and offices. A ransomware group has since posted data samples, indicating extortion activity tied to the incident.

DataBreaches.netSep 9, 12:09 UTC · 6d agoRansomware