New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE AttackThe Hacker News·Jul 21, 07:34 UTC · Jul 21, 2026Ransomware in the wildCVE-2025-3248CVE-2026-33017CVE-2026-55255160
ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More StoriesThe Hacker News·Jun 25, 12:30 UTC · Jun 25, 2026RansomwareCVE-2026-8932CVE-2026-5016060
Researchers flag code that uses AI systems to carry out ransomware attacksCyberScoop·Aug 26, 20:20 UTC · Aug 26, 2025Ransomware in the wild60
JadePuffer Returns With Ransomware Designed to Wipe AI ModelsInfosecurity Magazine·Jul 20, 14:05 UTC · Jul 20, 2026Ransomware in the wildCVE-2025-3248160
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More StoriesThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Ransomware in the wildCVE-2026-46817CVE-2023-434660
Cleo patches zero-day exploited by ransomware gangHelp Net Security·Jun 8, 10:32 UTC · Jun 8, 2026Ransomware in the wildCVE-2024-50623CVE-2024-55956160
New BYOVD loader behind DeadLock ransomware attackCisco Talos·Dec 9, 11:00 UTC · Dec 9, 2025RansomwareCVE-2024-5132460
Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over DevicesThe Hacker News·Oct 22, 04:20 UTC · Oct 22, 2025RansomwareCVE-2025-9242CVE-2025-3600CVE-2025-3660460
Velociraptor leveraged in ransomware attacksCisco Talos·Oct 9, 10:00 UTC · Oct 9, 2025RansomwareCVE-2025-6264160
XWorm 6.0 Returns with 35+ Plugins and Enhanced Data Theft CapabilitiesThe Hacker News·Oct 7, 14:26 UTC · Oct 7, 2025Ransomware60
Someone Created the First AI-Powered Ransomware Using OpenAI's gptThe Hacker News·Sep 5, 12:39 UTC · Sep 5, 2025Ransomware in the wild60
This is your sign to step away from the keyboardCisco Talos·Jul 17, 18:00 UTC · Jul 17, 2025RansomwareCVE-2025-2525760
Medusa ransomware hit over 300 critical infrastructure organizations until February 2025Security Affairs·Mar 13, 08:49 UTC · Mar 13, 2025RansomwareCVE-2024-1709CVE-2023-4878860
Rimini Protect AHS safeguards against security breachesHelp Net Security·Jan 22, 00:00 UTC · Jan 22, 2025Ransomware60
Security Affairs newsletter Round 488 by Pierluigi PaganiniSecurity Affairs·Sep 8, 11:58 UTC · Sep 8, 2024Ransomware in the wildCVE-2024-32896CVE-2024-30078CVE-2024-36401160
BlueSky Ransomware: Fast Encryption via MultithreadingPalo Alto Unit 42·Jun 5, 20:05 UTC · Jun 5, 2024RansomwareCVE-2020-0796CVE-2021-173260
Security Affairs newsletter Round 468 by Pierluigi PaganiniSecurity Affairs·Apr 21, 13:37 UTC · Apr 21, 2024RansomwareCVE-2024-340060
Microsoft blames Clop gang for 'MOVEit Transfer' attacksSecurity Affairs·Jun 5, 15:07 UTC · Jun 5, 2023Ransomware in the wildCVE-2023-3436260
CISA releases ESXiArgs ransomware recovery scriptHelp Net Security·Feb 8, 00:00 UTC · Feb 8, 2023RansomwareCVE-2021-21974CVE-2020-399260
Ransomware groups targeting Mitel VoIP zeroThe Record·Jan 12, 00:00 UTC · Jan 12, 2023Ransomware in the wildCVE-2022-2949960
How XDR Helps Protect Critical InfrastructureThe Hacker News·Dec 8, 12:01 UTC · Dec 8, 2022Ransomware60
Ransomware gang uses a Python script to encrypt VMware ESXi serversSecurity Affairs·Oct 5, 16:13 UTC · Oct 5, 2021Ransomware160
Week in review: HiveNightmare on Windows 10, Kaseya obtains REvil decryptorHelp Net Security·Jul 27, 06:54 UTC · Jul 27, 2021RansomwareCVE-2021-33909CVE-2021-36934CVE-2021-3258960
Threat Brief: Office Documents Can Be Dangerous (But We’ll Continue to Use Them Anyway)Palo Alto Unit 42·Sep 21, 18:41 UTC · Sep 21, 2020Ransomware in the wildCVE-2018-4878CVE-2017-11882CVE-2018-0802+4 CVEs160
What are script-based attacks and what can be done to prevent them?Help Net Security·Jul 31, 00:00 UTC · Jul 31, 2020RansomwareCVE-2017-0199CVE-2017-1188260