China-linked APTs' tool employed in RA World Ransomware attackSecurity Affairs·Feb 13, 15:49 UTC · Feb 13, 2025RansomwareCVE-2024-001260
March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC ZeroRecorded Future·Jun 3, 00:00 UTC · Jun 3, 2026Ransomware in the wildCVE-2017-7921CVE-2026-27483CVE-2026-27944+10 CVEs260
Reynolds ransomware uses BYOVD to disable security before encryptionSecurity Affairs·Feb 11, 15:00 UTC · Feb 11, 2026RansomwareCVE-2025-6894760
CISA confirms exploitation of VMware ESXi flaw by ransomware attackersHelp Net Security·Feb 5, 00:00 UTC · Feb 5, 2026Ransomware in the wildCVE-2025-22225CVE-2025-22224CVE-2025-2222660
October 2025 CVE LandscapeRecorded Future·Dec 9, 00:00 UTC · Dec 9, 2025Ransomware in the wildCVE-2025-59287CVE-2025-61882CVE-2025-41244+29 CVEs60
Week in review: Critical SAP NetWeaver flaw exploited, RSAC 2025 ConferenceHelp Net Security·May 4, 00:00 UTC · May 4, 2025Ransomware in the wildCVE-2025-31324CVE-2025-3928CVE-2025-42599+1 CVEs60
+20,000 internet-exposed VMware ESXi instances vulnerable to CVE-2024Security Affairs·Aug 1, 20:28 UTC · Aug 1, 2024Ransomware in the wildCVE-2024-3708560
Week in review: Windows crypto flaw, API security risks, exploits for Citrix security hole aboundHelp Net Security·May 28, 11:21 UTC · May 28, 2020RansomwareCVE-2019-19494CVE-2019-19781CVE-2020-060160
Week in review: SWAPGS attack, DNS security, vulnerable Siemens PLCs, Black Hat USA 2019Help Net Security·Aug 11, 00:00 UTC · Aug 11, 2019Ransomware60
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More StoriesThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Ransomware in the wildCVE-2026-46817CVE-2023-434660
Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security ToolsThe Hacker News·Feb 17, 05:50 UTC · Feb 17, 2026RansomwareCVE-2025-68947CVE-2025-6115560
CVE-2025-22225 in VMware ESXi now used in active ransomware attacksSecurity Affairs·Feb 4, 22:02 UTC · Feb 4, 2026Ransomware in the wildCVE-2025-22225CVE-2025-22226CVE-2025-2222460
New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD AttackThe Hacker News·Jan 24, 08:57 UTC · Jan 24, 2026RansomwareCVE-2019-1158060
China-Linked Hackers Exploit VMware ESXi ZeroThe Hacker News·Jan 12, 16:25 UTC · Jan 12, 2026Ransomware in the wildCVE-2025-22224CVE-2025-22225CVE-2025-2222660
Russian Hackers Target Ukrainian Organizations Using Stealthy Living-Off-theThe Hacker News·Oct 30, 09:41 UTC · Oct 30, 2025RansomwareCVE-2025-808860
⚡ Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & MoreThe Hacker News·Oct 6, 11:38 UTC · Oct 6, 2025RansomwareCVE-2025-61882CVE-2025-27915CVE-2025-4008+16 CVEs60
Security Affairs newsletter Round 544 by Pierluigi Paganini – INTERNATIONAL EDITIONSecurity Affairs·Oct 5, 11:35 UTC · Oct 5, 2025Ransomware in the wildCVE-2025-4124460
What happened in Vegas (that you actually want to know about)Cisco Talos·Aug 14, 18:00 UTC · Aug 14, 2025RansomwareCVE-2025-654360
ThrottleStop driver abused to terminate AV processesKaspersky Securelist·Aug 6, 10:00 UTC · Aug 6, 2025RansomwareCVE-2025-777160
Ransomware Gangs Exploit Unpatched SimpleHelp Flaws to Target Victims with Double ExtortionThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025RansomwareCVE-2024-57727CVE-2024-57728CVE-2024-5772660
Play Ransomware Exploited Windows CVE-2025-29824 as ZeroThe Hacker News·May 8, 05:38 UTC · May 8, 2025RansomwareCVE-2025-29824CVE-2024-2616960
RansomHub affiliate leverages multi-function Betruger backdoorHelp Net Security·Apr 2, 08:48 UTC · Apr 2, 2025RansomwareCVE-2022-24521CVE-2023-2753260
FIN7, FIN8, and Others Use Ragnar Loader for Persistent Access and Ransomware OperationsThe Hacker News·Mar 8, 11:50 UTC · Mar 8, 2025Ransomware60
RA World Ransomware Attack in South Asia Links to Chinese Espionage ToolsetThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2025RansomwareCVE-2024-0012CVE-2023-20198CVE-2023-2027360
New ‘Termite’ ransomware group claims responsibility for Blue Yonder cyberattackCyberScoop·Dec 9, 19:21 UTC · Dec 9, 2024Ransomware in the wild60
Warning: VMware vCenter and Kemp LoadMaster Flaws Under Active ExploitationThe Hacker News·Nov 21, 03:53 UTC · Nov 21, 2024Ransomware in the wildCVE-2024-1212CVE-2024-38812CVE-2024-38813+1 CVEs60
VMware ESXi Flaw Exploited by Ransomware Groups for Admin AccessThe Hacker News·Jul 31, 04:04 UTC · Jul 31, 2024Ransomware in the wildCVE-2024-37085CVE-2023-28252160
VMware ESXi auth bypass zero-day exploited by ransomware operators (CVE-2024-37085)Help Net Security·Jul 30, 00:00 UTC · Jul 30, 2024Ransomware in the wildCVE-2024-3708560
New HardBit Ransomware 4.0 Uses Passphrase Protection to Evade DetectionThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2024RansomwareCVE-2023-3803560
Week in review: RADIUS protocol critical vuln, Microsoft 0-day exploited for a year, AT&T breachHelp Net Security·Jul 14, 00:00 UTC · Jul 14, 2024RansomwareCVE-2024-3596CVE-2024-3811260
Black Basta Ransomware May Have Exploited MS Windows ZeroThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2024Ransomware in the wildCVE-2024-2616960
TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT AttacksThe Hacker News·Mar 21, 03:22 UTC · Mar 21, 2024RansomwareCVE-2024-2719860
CISA Warning: Akira Ransomware Exploiting Cisco ASA/FTD VulnerabilityThe Hacker News·Feb 17, 07:06 UTC · Feb 17, 2024Ransomware in the wildCVE-2020-3259CVE-2023-2252760
Veritas 360 Defense protects enterprise data and applications across cloudsHelp Net Security·Oct 23, 00:00 UTC · Oct 23, 2023Ransomware60
Previously unknown hacking group targets Hong Kong organizations in supply chain cyberattackCyberScoop·Aug 22, 13:14 UTC · Aug 22, 2023Ransomware in the wild60
Government and researchers keep US attention on Russia\'s cyber activity in UkraineThe Record·Jan 12, 00:00 UTC · Jan 12, 2023Ransomware60
French-speaking cybercriminals continue attacks on African banksCyberScoop·Jan 5, 16:00 UTC · Jan 5, 2023Ransomware in the wild60
Prestige ransomware targets organizations in Ukraine and PolandSecurity Affairs·Oct 16, 23:22 UTC · Oct 16, 2022Ransomware60
Putin Warns Russian Critical Infrastructure to Brace for Potential Cyber AttacksThe Hacker News·Feb 25, 13:38 UTC · Feb 25, 2022Ransomware60
TrickBot member extradited to US faces up to 60 years in prisonSecurity Affairs·Oct 30, 12:57 UTC · Oct 30, 2021Ransomware60