Ransomware on Steroids: Cryptowall 2.0Cisco Talos·Jan 6, 07:14 UTC · Jan 6, 2015RansomwareCVE-2013-366060
RangeForce platform updates enable users to conduct offensive and defensive attack scenariosHelp Net Security·Jun 29, 00:00 UTC · Jun 29, 2022Ransomware57
Conti chats confirm that the gang ability to conduct firmwareSecurity Affairs·Jun 2, 17:09 UTC · Jun 2, 2022Ransomware60
ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-YearThe Hacker News·Apr 17, 14:47 UTC · Apr 17, 2026Ransomware in the wildCVE-2026-33825CVE-2009-0238160
Operation Phobos Aetor: Police dismantled 8Base ransomware gangSecurity Affairs·Feb 11, 08:46 UTC · Feb 11, 2025Ransomware57
Hades ransomware gang targets big organizations in the USSecurity Affairs·Mar 26, 18:37 UTC · Mar 26, 2021Ransomware57
Over 60% of Network Security Appliance Flaws Exploited as Zero DaysInfosecurity Magazine·May 21, 12:30 UTC · May 21, 2024Ransomware60
What happens when you engage Cisco Talos Incident Response?Cisco Talos·Sep 24, 10:00 UTC · Sep 24, 2025Ransomware60
Critical Flaw Exposes 60,000 Redis Servers to Remote ExploitationInfosecurity Magazine·Oct 7, 16:00 UTC · Oct 7, 2025Ransomware in the wildCVE-2025-4984460
SonicWall SSL VPN Flaw and Misconfigurations Actively Exploited by Akira Ransomware HackersThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2025Ransomware in the wildCVE-2024-4076660
⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and MoreThe Hacker News·May 19, 04:33 UTC · May 19, 2026Ransomware in the wildCVE-2026-42897CVE-2026-20182CVE-2026-2012760
Nebulon TimeJump offers ransomware recovery for critical application data and infected operating systemsHelp Net Security·Mar 30, 00:00 UTC · Mar 30, 2022Ransomware60
A New Ransomware Targeting Apple macOS Users Through Pirated AppsThe Hacker News·Jul 1, 09:08 UTC · Jul 1, 2020Ransomware57
SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root AccessThe Hacker News·Jul 20, 16:44 UTC · Jul 20, 2026RansomwareCVE-2026-15409CVE-2026-1541060
Analysis of Cuba ransomware gang activity and toolingKaspersky Securelist·Sep 11, 10:00 UTC · Sep 11, 2023RansomwareCVE-2021-31207CVE-2021-34473CVE-2021-34523+8 CVEs60
IR Trends Q3 2025: ToolShell attacks dominate, highlighting criticality of segmentation and rapid responseCisco Talos·Oct 23, 10:00 UTC · Oct 23, 2025Ransomware in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49704+1 CVEs160
Security Affairs newsletter Round 537 by Pierluigi PaganiniSecurity Affairs·Aug 17, 00:26 UTC · Aug 17, 2025Ransomware in the wildCVE-2025-2525660
UIWIX, the Fileless Ransomware that leverages NSA EternalBlue Exploit to spreadSecurity Affairs·May 20, 08:26 UTC · May 20, 2017Ransomware57
New MyloBot Malware Variant Sends Sextortion Emails Demanding $2,732 in BitcoinThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2022Ransomware57
Microsoft Reveals Tactics Used by 4 Ransomware Families Targeting macOSThe Hacker News·Jan 6, 17:00 UTC · Jan 6, 2023Ransomware57
New bug in PC booting process could take years to fix, researchers sayCyberScoop·Jul 29, 18:01 UTC · Jul 29, 2020Ransomware in the wild60
'China Chopper' web shell makes a comeback in Lebanon, other Asian countriesCyberScoop·Aug 28, 13:36 UTC · Aug 28, 2019Ransomware in the wild60
VMware ESXi Flaw Exploited by Ransomware Groups for Admin AccessThe Hacker News·Jul 31, 04:04 UTC · Jul 31, 2024Ransomware in the wildCVE-2024-37085CVE-2023-28252160
Phobos Ransomware Family Expands With New FAUST VariantInfosecurity Magazine·Jan 29, 17:15 UTC · Jan 29, 2024Ransomware60
A taste of the latest release of QakBot...........................Security Affairs·May 6, 09:22 UTC · May 6, 2021Ransomware57
IT threat evolution Q2 2020. PC statisticsKaspersky Securelist·Sep 3, 10:30 UTC · Sep 3, 2020RansomwareCVE-2017-8570CVE-2017-11882CVE-2017-0199+4 CVEs60
XPAJ: Reversing a Windows x64 BootkitKaspersky Securelist·Jun 19, 18:16 UTC · Jun 19, 2012Ransomware60
⚡ Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & MoreThe Hacker News·Oct 6, 11:38 UTC · Oct 6, 2025RansomwareCVE-2025-61882CVE-2025-27915CVE-2025-4008+16 CVEs60
2025 Cloud Threat Hunting and Defense LandscapeRecorded Future·Nov 6, 00:00 UTC · Nov 6, 2025Ransomware57
8Base Group Deploying New Phobos Ransomware Variant via SmokeLoaderThe Hacker News·Nov 20, 06:05 UTC · Nov 20, 2023Ransomware57
8Base ransomware operators use a variant of Phobos ransomwareSecurity Affairs·Nov 19, 09:13 UTC · Nov 19, 2023Ransomware57
Russia-linked RomCom group targeted Ukrainian government agencies since late 2023Security Affairs·Oct 17, 21:13 UTC · Oct 17, 2024Ransomware57
Black Basta Ransomware Evolves with Email Bombing, QR Codes, and Social EngineeringThe Hacker News·Dec 9, 17:44 UTC · Dec 9, 2024Ransomware57
Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p RansomwareThe Hacker News·Apr 29, 04:05 UTC · Apr 29, 2023Ransomware in the wildCVE-2023-27351CVE-2023-27532CVE-2023-138960
Albabat, Kasseika, Kuiper: New Ransomware Gangs Rise with Rust and GolangThe Hacker News·Jan 30, 07:39 UTC · Jan 30, 2024Ransomware157
Incident Response trends Q2 2023: Data theft extortion rises, while healthcare is still mostCisco Talos·Jul 26, 12:00 UTC · Jul 26, 2023Ransomware in the wildCVE-2023-0669CVE-2021-27101CVE-2021-27102+3 CVEs60
ToyMaker Uses LAGTOY to Sell Access to CACTUS Ransomware Gangs for Double ExtortionThe Hacker News·Apr 26, 10:38 UTC · Apr 26, 2025Ransomware57
NailaoLocker ransomware targets EU healthcareSecurity Affairs·Feb 20, 15:48 UTC · Feb 20, 2025RansomwareCVE-2024-2491960
Leaked Credentials Up 160%: What Attackers Are Doing With ThemThe Hacker News·Aug 8, 11:00 UTC · Aug 8, 2025Ransomware60
Cryptojacking on the rise in poorer countries where ransoms can't be paidCyberScoop·Nov 27, 16:24 UTC · Nov 27, 2017Ransomware in the wild60