Reverse RDP Attack - Rogue RDP Server can be used to hack RDP clientsSecurity Affairs·Feb 6, 08:40 UTC · Feb 6, 2019Ransomware60
Rapid7 warns of RDP exposure for millions of endpointsSecurity Affairs·Aug 14, 21:54 UTC · Aug 14, 2017RansomwareCVE-2017-017660
Quarterly Report: Incident Response trends from Spring 2021Cisco Talos·Jun 10, 12:00 UTC · Jun 10, 2021RansomwareCVE-2021-26855CVE-2021-26857CVE-2021-26858+4 CVEs60
Attacks on web applications spike in third quarter, new Talos IR data showsCisco Talos·Oct 24, 12:00 UTC · Oct 24, 2023Ransomware60
Quarterly Report: Incident Response Trends in Q4 2022Cisco Talos·Jan 26, 09:00 UTC · Jan 26, 2023Ransomware60
Access to airport's security system sold on dark webHelp Net Security·Jul 11, 00:00 UTC · Jul 11, 2018Ransomware60
Quarterly Report: Incident Response Trends in Q3 2022Cisco Talos·Oct 25, 12:00 UTC · Oct 25, 2022RansomwareCVE-2020-147260
Quarterly Report: Incident Response trends from Q3 2021Cisco Talos·Oct 28, 12:00 UTC · Oct 28, 2021RansomwareCVE-2021-3011660
Quarterly Report: Incident Response Trends in Q2 2022Cisco Talos·Jul 26, 14:03 UTC · Jul 26, 2022RansomwareCVE-2021-44228CVE-2021-4504660
Quarterly Report: Incident Response trends in Q1 2022Cisco Talos·Apr 26, 13:11 UTC · Apr 26, 2022Ransomware in the wildCVE-2021-44228CVE-2021-45046CVE-2021-22204+1 CVEs60
Quarterly Report: Incident Response trends in Summer 2020Cisco Talos·Sep 1, 15:00 UTC · Sep 1, 2020RansomwareCVE-2019-1893560
Incident Response trends Q2 2023: Data theft extortion rises, while healthcare is still mostCisco Talos·Jul 26, 12:00 UTC · Jul 26, 2023Ransomware in the wildCVE-2023-0669CVE-2021-27101CVE-2021-27102+3 CVEs60
FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware AttacksThe Hacker News·Feb 29, 03:28 UTC · Feb 29, 2024Ransomware in the wild60
How offense and defense came together to plug a hole in a popular Microsoft programCyberScoop·Aug 2, 19:48 UTC · Aug 2, 2019Ransomware in the wild60
RDP: a Double-Edged Sword for IT TeamsThe Hacker News·Feb 28, 14:23 UTC · Feb 28, 2025RansomwareCVE-2025-21309CVE-2025-2129760
Most interesting IR cases in 2023: insider threats and moreKaspersky Securelist·Sep 3, 11:01 UTC · Sep 3, 2024Ransomware60
New Ransom Payment Schemes Target Executives, TelemedicineKrebs on Security·Dec 8, 19:21 UTC · Dec 8, 2022Ransomware60
A Dissection of the “EsteemAudit” Windows Remote Desktop ExploitPalo Alto Unit 42·May 31, 12:00 UTC · May 31, 2017RansomwareCVE-2017-907360
FBI warns of PYSA Ransomware attacks against Education Institutions in US and UKSecurity Affairs·Mar 17, 12:01 UTC · Mar 17, 2021Ransomware60
Iranian APT UNC1860 Linked to MOIS Facilitates Cyber Intrusions in Middle EastThe Hacker News·Sep 20, 12:44 UTC · Sep 20, 2024RansomwareCVE-2019-060460
Microsoft Fixes 71 CVEs Including Actively Exploited ZeroInfosecurity Magazine·Dec 11, 10:15 UTC · Dec 11, 2024Ransomware in the wildCVE-2024-49138CVE-2022-24521CVE-2023-23376+3 CVEs160
⚡ THN Weekly Recap: New Attacks, Old Tricks, Bigger ImpactThe Hacker News·May 6, 07:05 UTC · May 6, 2025RansomwareCVE-2025-25015CVE-2025-22224CVE-2025-22225+18 CVEs60
Product Walkthrough: How Datto BCDR Delivers Unstoppable Business ContinuityThe Hacker News·Mar 28, 10:15 UTC · Mar 28, 2025Ransomware60
Clop: Behind MOVEit Lies a Loud, Adaptable and Persistent Threat GroupInfosecurity Magazine·Jul 11, 17:15 UTC · Jul 11, 2023RansomwareCVE-2023-3436260
Threat Source newsletter (Sept. 16, 2021)Cisco Talos·Sep 16, 18:00 UTC · Sep 16, 2021Ransomware in the wildCVE-2021-40444CVE-2021-36965CVE-2021-2643560
Payroll Provider Gives Extortionists a PaydayKrebs on Security·Feb 26, 18:56 UTC · Feb 26, 2019Ransomware60
RansomHub Ransomware Group Targets 210 Victims Across Critical SectorsThe Hacker News·Sep 3, 12:52 UTC · Sep 3, 2024RansomwareCVE-2023-46604CVE-2023-22515CVE-2023-3519+3 CVEs60
Introducing ToyMaker, an initial access broker working in cahoots with double extortion gangsCisco Talos·Apr 23, 10:00 UTC · Apr 23, 2025Ransomware60
Twelve: from initial compromise to ransomware and wipersKaspersky Securelist·Sep 20, 13:33 UTC · Sep 20, 2024RansomwareCVE-2021-21972CVE-2021-2200560
Head Mare hacktivists: attacks on companies in Russia and BelarusKaspersky Securelist·Sep 2, 10:00 UTC · Sep 2, 2024RansomwareCVE-2023-3883160
⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach WidensThe Hacker News·Oct 27, 14:16 UTC · Oct 27, 2025Ransomware in the wildCVE-2025-59287CVE-2025-54957CVE-2025-6950+21 CVEs60
Securing a hybrid workforce with log managementHelp Net Security·Mar 22, 13:22 UTC · Mar 22, 2021Ransomware60
Desktop and IoT threat report for Q2 2025Kaspersky Securelist·Sep 5, 09:00 UTC · Sep 5, 2025Ransomware in the wildCVE-2025-31324CVE-2024-57727CVE-2024-57728+4 CVEs60
August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and TipsThe Hacker News·Dec 23, 12:14 UTC · Dec 23, 2024RansomwareCVE-2024-12727CVE-2024-12728CVE-2024-12729+23 CVEs160
⚡ Weekly Recap: BadCam Attack, WinRAR 0-Day, EDR Killer, NVIDIA Flaws, Ransomware Attacks & MoreThe Hacker News·Aug 12, 04:40 UTC · Aug 12, 2025Ransomware in the wildCVE-2025-54948CVE-2025-54987CVE-2025-8088+30 CVEs60
Desktop and IoT threat statistics for Q2 2026Kaspersky Securelist·Aug 10, 09:52 UTC · Aug 10, 2026Ransomware in the wildCVE-2026-33825CVE-2026-50751CVE-2026-5075260
Talos IR trends Q3 2024: IdentityCisco Talos·Oct 24, 10:00 UTC · Oct 24, 2024RansomwareCVE-2024-3708560
⚡ Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & MoreThe Hacker News·Oct 6, 11:38 UTC · Oct 6, 2025RansomwareCVE-2025-61882CVE-2025-27915CVE-2025-4008+16 CVEs60