Leaked NSA hacking tools are a hit on the dark webCyberScoop·Apr 20, 10:00 UTC · Apr 20, 2017RansomwareCVE-2017-014360
Interlock group exploiting the CISCO FMC flaw CVE-2026Security Affairs·Mar 19, 09:22 UTC · Mar 19, 2026RansomwareCVE-2026-2013160
Chinese-speaking hackers exploited ESXi zeroSecurity Affairs·Jan 9, 00:06 UTC · Jan 9, 2026Ransomware in the wildCVE-2025-22226CVE-2025-22224CVE-2025-2222560
August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
Oracle Rushes Patch for CVE-2025-61882 After Cl0p Exploited It in Data Theft AttacksThe Hacker News·Oct 7, 14:28 UTC · Oct 7, 2025RansomwareCVE-2025-61882160
Wing FTP Server flaw actively exploited shortly after technical details were made publicSecurity Affairs·Jul 13, 15:50 UTC · Jul 13, 2025Ransomware in the wildCVE-2025-4781260
Automation and Vulnerability Exploitation Drive Mass Ransomware BreachInfosecurity Magazine·Jul 3, 13:00 UTC · Jul 3, 2025Ransomware in the wildCVE-2024-55591CVE-2024-21762CVE-2024-40766+8 CVEs60
SAP Flaw Exploited by Ransomware Groups and ChineseInfosecurity Magazine·May 15, 15:15 UTC · May 15, 2025Ransomware in the wildCVE-2025-31324CVE-2025-4299960
Black Basta and Bl00dy ransomware gangs exploit recent ConnectWise ScreenConnect bugsSecurity Affairs·Feb 27, 21:03 UTC · Feb 27, 2024RansomwareCVE-2024-1709CVE-2024-170860
Critical Confluence flaw exploited in ransomware attacksSecurity Affairs·Nov 6, 19:09 UTC · Nov 6, 2023Ransomware in the wildCVE-2023-2251860
NonKaspersky Securelist·Aug 15, 12:00 UTC · Aug 15, 2022RansomwareCVE-2022-26809CVE-2022-24491CVE-2022-24497+1 CVEs160
Market for software exploits is often focused on Microsoft flaws, yearsCyberScoop·May 17, 21:40 UTC · May 17, 2021Ransomware60
Researchers warn of a surge in cyber attacks against Microsoft ExchangeSecurity Affairs·Mar 12, 22:51 UTC · Mar 12, 2021Ransomware in the wildCVE-2021-26855CVE-2021-26857CVE-2021-26858+1 CVEs60
First Cyber Attack 'Mass Exploiting' BlueKeep RDP Flaw Spotted in the WildThe Hacker News·Nov 3, 11:34 UTC · Nov 3, 2019RansomwareCVE-2019-070860
Exploit kit traffic drops by 96% since April, what is happening?Security Affairs·May 27, 11:00 UTC · May 27, 2018Ransomware60
StorageCrypt Ransomware is the last malware in order of time exploiting SambaCry to target NAS DevicesSecurity Affairs·Dec 6, 21:49 UTC · Dec 6, 2017RansomwareCVE-2017-749460
Bad Rabbit Ransomware Uses Leaked 'EternalRomance' NSA Exploit to SpreadThe Hacker News·Oct 27, 10:57 UTC · Oct 27, 2017RansomwareCVE-2017-014560
At least 3 different groups have been leveraging the NSA EternalBlue exploit, what's went wrong?Security Affairs·Aug 22, 08:11 UTC · Aug 22, 2017Ransomware57
Shadow Brokers, Who Leaked WannaCry SMB Exploit, Are Back With More 0The Hacker News·May 15, 00:00 UTC · May 15, 2017Ransomware60
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026The Hacker News·Mar 21, 07:03 UTC · Mar 21, 2026Ransomware in the wildCVE-2026-2013160
Play Ransomware Exploited Windows CVE-2025-29824 as ZeroThe Hacker News·May 8, 05:38 UTC · May 8, 2025RansomwareCVE-2025-29824CVE-2024-2616960
Microsoft patches zero-day actively exploited in string of ransomware attacksCyberScoop·Apr 8, 21:22 UTC · Apr 8, 2025Ransomware in the wildCVE-2025-29824CVE-2025-29792CVE-2025-29793+3 CVEs160
Ransomware usage explodes, as app, browser and plug-in vulnerabilities increaseHelp Net Security·Dec 14, 13:19 UTC · Dec 14, 2023Ransomware60
Atlassian confirms ransomware is exploiting latest Confluence bugThe Record·Nov 7, 19:14 UTC · Nov 7, 2023Ransomware in the wildCVE-2023-22518CVE-2021-2608460
Hackers Exploit Log4j Vulnerability to Infect Computers with Khonsari RansomwareThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2021Ransomware in the wildCVE-2021-4422860
Log4Shell update: Attack surface, attacks in the wild, mitigation and remediationHelp Net Security·Dec 13, 00:00 UTC · Dec 13, 2021Ransomware in the wildCVE-2021-44228160
Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with BabukCisco Talos·Nov 3, 12:00 UTC · Nov 3, 2021RansomwareCVE-2021-3694260
Russian-speaking cybercrime evolution: What changed from 2016 to 2021Kaspersky Securelist·Oct 21, 13:02 UTC · Oct 21, 2021Ransomware57
Plug critical VMware vCenter Server flaw before ransomware gangs start exploiting it (CVE-2021-22005)Help Net Security·Sep 29, 14:29 UTC · Sep 29, 2021Ransomware in the wildCVE-2021-22005CVE-2021-21985CVE-2021-2197260
New campaign leverages RIG Exploit kit to deliver the Cerber RansomwareSecurity Affairs·Oct 29, 12:32 UTC · Oct 29, 2017RansomwareCVE-2015-8651CVE-2015-5122CVE-2016-4117+5 CVEs60
IT threat evolution Q3 2016. StatisticsKaspersky Securelist·Nov 3, 10:59 UTC · Nov 3, 2016Ransomware57
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 SetupsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Ransomware in the wildCVE-2026-50751CVE-2026-5075260
Microsoft pins GoAnywhere zero-day attacks to ransomware affiliate StormCyberScoop·Oct 7, 20:44 UTC · Oct 7, 2025Ransomware in the wildCVE-2025-1003560
Medusa ransomware used during exploitation of GoAnywhere file transfer bug, Microsoft saysThe Record·Oct 6, 20:42 UTC · Oct 6, 2025RansomwareCVE-2025-1003560
Attackers exploit Fortinet flaws to deploy Qilin ransomwareSecurity Affairs·Jun 6, 22:09 UTC · Jun 6, 2025Ransomware in the wildCVE-2024-21762CVE-2024-55591CVE-2025-2447260
Verizon discovers spike in ransomware and exploited vulnerabilitiesCyberScoop·Apr 23, 04:01 UTC · Apr 23, 2025Ransomware60
Talos IR trends Q4 2024: Web shell usage and exploitation of publicCisco Talos·Jan 30, 11:00 UTC · Jan 30, 2025Ransomware57
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and TipsThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2024Ransomware in the wildCVE-2024-50623CVE-2020-12271CVE-2024-11639+24 CVEs60
THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 11The Hacker News·Nov 18, 11:36 UTC · Nov 18, 2024Ransomware in the wildCVE-2024-5910CVE-2024-9463CVE-2024-9465+29 CVEs60