Sodinokibi ransomware uses MS API to encrypt open and locked filesSecurity Affairs·May 11, 07:58 UTC · May 11, 2020Ransomware60
Nokoyawa ransomware attacks with Windows zeroKaspersky Securelist·Apr 11, 17:36 UTC · Apr 11, 2023RansomwareCVE-2023-28252CVE-2022-24521CVE-2022-37969+1 CVEs60
AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, AndroidThe Hacker News·Jul 2, 05:15 UTC · Jul 2, 2026RansomwareCVE-2023-486360
⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and MoreThe Hacker News·Jul 6, 13:02 UTC · Jul 6, 2026RansomwareCVE-2026-48276CVE-2026-48283CVE-2026-48277+69 CVEs160
A Look Into Public Clouds From the Ransomware Actor's PerspectivePalo Alto Unit 42·Jun 5, 22:33 UTC · Jun 5, 2024Ransomware60
Wormable bash DarkRadiation Ransomware targets Linux distrosSecurity Affairs·Jun 22, 20:59 UTC · Jun 22, 2021Ransomware60
Ransomware incidents in Japan during the first half of 2025Cisco Talos·Aug 19, 10:00 UTC · Aug 19, 2025Ransomware60
Review: Group-IB Threat Hunting FrameworkHelp Net Security·Jun 15, 08:51 UTC · Jun 15, 2021Ransomware60
Recorded Future Announces Powerful Enhancements to its Ransomware Mitigation SolutionRecorded Future·Nov 28, 00:00 UTC · Nov 28, 2025Ransomware60
JADEPUFFER: First End-to-End AISecurity Affairs·Jul 3, 11:29 UTC · Jul 3, 2026Ransomware in the wildCVE-2025-3248CVE-2021-2944160
The Top 10 Attack Surface Exposures in 2026The Hacker News·Jun 17, 10:30 UTC · Jun 17, 2026Ransomware60
BlueSky Ransomware: Fast Encryption via MultithreadingPalo Alto Unit 42·Jun 5, 20:05 UTC · Jun 5, 2024RansomwareCVE-2020-0796CVE-2021-173260
Votiro integrates with Box to prevent new and unknown threats before they enter the networkHelp Net Security·Oct 21, 00:00 UTC · Oct 21, 2022Ransomware60
Stolen certificates in two waves of ransomware and wiper attacksKaspersky Securelist·Dec 22, 17:01 UTC · Dec 22, 2022Ransomware60
Wormable DarkRadiation Ransomware Targets Linux and Docker InstancesThe Hacker News·Jun 25, 03:05 UTC · Jun 25, 2021Ransomware60
Customizable Elpaco ransomware abuses the Everything libraryKaspersky Securelist·Nov 26, 10:00 UTC · Nov 26, 2024RansomwareCVE-2020-147260
Double-extortion ransomware attacks on the riseHelp Net Security·May 18, 00:00 UTC · May 18, 2021Ransomware60
Windows CLFS and five exploits used by ransomware operatorsKaspersky Securelist·Dec 21, 09:53 UTC · Dec 21, 2023RansomwareCVE-2023-28252CVE-2022-24521CVE-2022-37969+1 CVEs60
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and TipsThe Hacker News·Dec 23, 12:14 UTC · Dec 23, 2024RansomwareCVE-2024-12727CVE-2024-12728CVE-2024-12729+23 CVEs160
SonicWall pins attack on customer portal to undisclosed nationCyberScoop·Nov 6, 16:33 UTC · Nov 6, 2025Ransomware in the wild60
WAFs can't give organizations the security they needHelp Net Security·Feb 16, 00:00 UTC · Feb 16, 2022Ransomware60
AI-assisted Slopoly malware powers Hive0163’s ransomware campaignsSecurity Affairs·Mar 13, 11:36 UTC · Mar 13, 2026Ransomware60
IT threat evolution Q1 2021Kaspersky Securelist·May 31, 07:32 UTC · May 31, 2021Ransomware in the wildCVE-2021-26855CVE-2021-26857CVE-2021-26858+1 CVEs60
Cuba ransomware gang hacked 49 US critical infrastructure organizationsSecurity Affairs·Dec 4, 18:23 UTC · Dec 4, 2021Ransomware60
SamSam - The Evolution Continues Netting Over $325,000 in 4 WeeksCisco Talos·Jan 22, 17:29 UTC · Jan 22, 2018Ransomware60
Rounding up some of the major headlines from RSACisco Talos·May 16, 18:00 UTC · May 16, 2024RansomwareCVE-2024-30044CVE-2024-3005160
Hacked WordPress Sites Abusing Visitors' Browsers for Distributed BruteThe Hacker News·Mar 7, 13:45 UTC · Mar 7, 2024RansomwareCVE-2021-443660
Security Affairs newsletter Round 430 by Pierluigi PaganiniSecurity Affairs·Aug 6, 08:03 UTC · Aug 6, 2023Ransomware in the wildCVE-2023-38750CVE-2023-38606CVE-2023-38408+1 CVEs60
Hackers Exploit Critical Langflow Bug in Just 20 HoursInfosecurity Magazine·Mar 20, 10:20 UTC · Mar 20, 2026Ransomware in the wildCVE-2026-33017160
Ransomware spike exposes cracks in cloud securityHelp Net Security·May 5, 00:00 UTC · May 5, 2025Ransomware60
New BYOVD loader behind DeadLock ransomware attackCisco Talos·Dec 9, 11:00 UTC · Dec 9, 2025RansomwareCVE-2024-5132460
Votiro completes SOC 2 Type II compliance for Votiro CloudHelp Net Security·May 15, 00:00 UTC · May 15, 2022Ransomware60
Codefinger ransomware gang uses compromised AWS keys to encrypt S3 bucketSecurity Affairs·Jan 15, 11:53 UTC · Jan 15, 2025Ransomware60
August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
Shadow AI, deepfakes, and supply chain compromise are rewriting the financial sector threat playbookHelp Net Security·Jul 23, 07:00 UTC · Jul 23, 2026Ransomware in the wild60