Storm-2603 spotted deploying ransomware on exploited SharePoint serversHelp Net Security·Aug 4, 12:44 UTC · Aug 4, 2025Ransomware in the wildCVE-2025-53770CVE-2025-49706CVE-2025-49704+2 CVEs60
Unwrapping the emerging Interlock ransomware attackCisco Talos·Nov 7, 11:00 UTC · Nov 7, 2024Ransomware57
Small and mid-sized organizations remain especially vulnerable to persistent compromisesHelp Net Security·Jul 12, 00:00 UTC · Jul 12, 2019Ransomware60
CVE-2025-22225 in VMware ESXi now used in active ransomware attacksSecurity Affairs·Feb 4, 22:02 UTC · Feb 4, 2026Ransomware in the wildCVE-2025-22225CVE-2025-22226CVE-2025-2222460
Ransomware Groups Prioritize Defense Evasion for Data ExfiltrationInfosecurity Magazine·Jul 10, 13:00 UTC · Jul 10, 2024RansomwareCVE-2020-1472CVE-2018-13379CVE-2023-0669160
Akira ransomware received $42M in ransom payments from over 250 victimsSecurity Affairs·Apr 21, 20:07 UTC · Apr 21, 2024RansomwareCVE-2020-3259CVE-2023-2026960
Microsoft details techniques of Mac ransomwareSecurity Affairs·Jan 6, 17:53 UTC · Jan 6, 2023Ransomware57
Spirals ransomware locks down victim systems in under 24 hoursHelp Net Security·Jul 17, 00:00 UTC · Jul 17, 2026Ransomware57
Honeypot-Factory: The Use of Deception in ICS/OT EnvironmentsThe Hacker News·Feb 17, 08:56 UTC · Feb 17, 2023Ransomware57
August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
Quarterly Report: Incident Response Trends in Q2 2022Cisco Talos·Jul 26, 14:03 UTC · Jul 26, 2022RansomwareCVE-2021-44228CVE-2021-4504660
Increasing security measures are driving cybercriminals to alter their techniquesHelp Net Security·Feb 27, 00:00 UTC · Feb 27, 2019Ransomware60
GHOSTENGINE Exploits Vulnerable Drivers to Disable EDRs in Cryptojacking AttackThe Hacker News·May 29, 05:25 UTC · May 29, 2024RansomwareCVE-2021-44228CVE-2023-24860CVE-2023-3601060
Attacks on web applications spike in third quarter, new Talos IR data showsCisco Talos·Oct 24, 12:00 UTC · Oct 24, 2023Ransomware60
A deep dive into Phobos ransomware, recently deployed by 8Base groupCisco Talos·Nov 17, 13:01 UTC · Nov 17, 2023Ransomware57
Bitdefender partners with Sharp to improve threat prevention in multifunction business printersHelp Net Security·Oct 28, 00:00 UTC · Oct 28, 2022Ransomware57
⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 BitThe Hacker News·Sep 22, 15:16 UTC · Sep 22, 2025Ransomware in the wildCVE-2025-10585CVE-2025-55241CVE-2025-10035+14 CVEs160
Ransomware attack risk increases on holidays/weekends, FBI and CISASecurity Affairs·Sep 1, 13:27 UTC · Sep 1, 2021Ransomware60
AI-Enabled Adversaries Compress Time-toInfosecurity Magazine·Mar 18, 13:00 UTC · Mar 18, 2026Ransomware in the wild60
The Gentlemen Ransomware Expands With Rapid Affiliate GrowthInfosecurity Magazine·Apr 21, 14:00 UTC · Apr 21, 2026Ransomware57
Uncovering Qilin attack methods exposed through multiple casesCisco Talos·Oct 27, 02:00 UTC · Oct 27, 2025Ransomware57
Cryptominers, ransomware among top malware in IR engagements in Q4Cisco Talos·Nov 20, 16:00 UTC · Nov 20, 2019Ransomware in the wild60
ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 StoriesThe Hacker News·Jul 7, 04:32 UTC · Jul 7, 2026Ransomware60
Meteoric attack deploys Quantum ransomware in mere hoursHelp Net Security·Apr 26, 00:00 UTC · Apr 26, 2022Ransomware57
Quarterly Report: Incident Response trends in Q1 2022Cisco Talos·Apr 26, 13:11 UTC · Apr 26, 2022Ransomware in the wildCVE-2021-44228CVE-2021-45046CVE-2021-22204+1 CVEs60
Most interesting IR cases in 2023: insider threats and moreKaspersky Securelist·Sep 3, 11:01 UTC · Sep 3, 2024Ransomware60
Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and EdgeThe Hacker News·Jul 23, 13:11 UTC · Jul 23, 2026Ransomware57
Significant decrease in Locky ransomware attacksHelp Net Security·Jun 26, 21:24 UTC · Jun 26, 2018Ransomware57
Talos IR ransomware engagements and the significance of timeliness in incident responseCisco Talos·Jul 16, 10:00 UTC · Jul 16, 2025RansomwareCVE-2024-57727160
Cisco has been hacked by a ransomware gangHelp Net Security·Sep 12, 12:52 UTC · Sep 12, 2022Ransomware57
Cisco Talos shares insights related to recent cyber attack on CiscoCisco Talos·Aug 10, 19:30 UTC · Aug 10, 2022Ransomware60
Conti Leaks Reveal Ransomware Gang's Interest in FirmwareThe Hacker News·Jun 3, 03:22 UTC · Jun 3, 2022Ransomware57
Don’t swing at everythingCisco Talos·Jul 23, 18:00 UTC · Jul 23, 2026RansomwareCVE-2026-60137CVE-2026-6303060
Shifting from reactive to proactive: Cyber resilience amid nationCyberScoop·Oct 24, 12:00 UTC · Oct 24, 2025Ransomware in the wild60
GhostSec’s joint ransomware operation and evolution of their arsenalCisco Talos·Mar 5, 13:00 UTC · Mar 5, 2024Ransomware60