Veeam Backup & Replication exploit reused in new Frag ransomware attackSecurity Affairs·Nov 9, 17:50 UTC · Nov 9, 2024RansomwareCVE-2024-4071160
Defining a new methodology for modeling and tracking compartmentalized threatsCisco Talos·May 13, 10:00 UTC · May 13, 2025Ransomware57
⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and MoreThe Hacker News·Aug 4, 12:16 UTC · Aug 4, 2026RansomwareCVE-2026-50746CVE-2026-50747CVE-2026-50748+45 CVEs60
New decryptor for Babuk Tortilla ransomware variant releasedCisco Talos·Jan 9, 09:00 UTC · Jan 9, 2024Ransomware60
Microsoft Fixes ZeroInfosecurity Magazine·Apr 12, 09:30 UTC · Apr 12, 2023Ransomware in the wildCVE-2023-28252CVE-2023-2155460
Hackers Exploit Apache HTTP Server Flaw to Deploy Linuxsys Cryptocurrency MinerThe Hacker News·Jul 21, 06:31 UTC · Jul 21, 2025RansomwareCVE-2021-41773CVE-2024-36401CVE-2023-22527+5 CVEs60
Week in review: Hacking through subtitles, new class of attacks against AndroidHelp Net Security·May 28, 00:00 UTC · May 28, 2017Ransomware60
After remote-code test, DHS sounds the alarm on BlueKeepCyberScoop·Jun 17, 21:38 UTC · Jun 17, 2019Ransomware in the wild160
Worries mount over maxCyberScoop·Sep 26, 14:30 UTC · Sep 26, 2025Ransomware in the wildCVE-2025-10035CVE-2023-0669160
Popular Netop Remote Learning Software Found Vulnerable to HackingThe Hacker News·Apr 9, 12:01 UTC · Apr 9, 2021RansomwareCVE-2021-27192CVE-2021-27193CVE-2021-27194+1 CVEs60
Older vulnerabilities and those with lower severity scores still being exploited by ransomwareHelp Net Security·Sep 25, 00:00 UTC · Sep 25, 2019Ransomware60
Several Flaws Found in CyberPower and Dataprobe ProductsInfosecurity Magazine·Aug 14, 16:00 UTC · Aug 14, 2023Ransomware in the wildCVE-2023-3259CVE-2023-3260CVE-2023-3261+6 CVEs160
Week in review: WordPress ransomware, NotPetya aftermathHelp Net Security·Aug 20, 00:00 UTC · Aug 20, 2017Ransomware60
Dynamic analysis of firmware components in IoT devicesKaspersky Securelist·Jul 6, 10:00 UTC · Jul 6, 2022Ransomware145
Security Affairs newsletter Round 550 by Pierluigi PaganiniSecurity Affairs·Nov 16, 15:27 UTC · Nov 16, 2025Ransomware in the wildCVE-2025-1248060
Critical JetBrains TeamCity Flaw Could Expose Source Code and Build Pipelines to AttackersThe Hacker News·Oct 2, 11:09 UTC · Oct 2, 2023Ransomware in the wildCVE-2023-42793CVE-2023-36618CVE-2023-36619160
Week in review: MySQL databases held for ransom, CloudPets as surveillance devicesHelp Net Security·Mar 5, 00:00 UTC · Mar 5, 2017Ransomware57
HelloKitty Ransomware Group Exploiting Apache ActiveMQ VulnerabilityThe Hacker News·Nov 4, 04:55 UTC · Nov 4, 2023Ransomware in the wildCVE-2023-4660460
Multiple Flaws in CyberPower and Dataprobe Products Put Data Centers at RiskThe Hacker News·Aug 15, 00:00 UTC · Aug 15, 2023Ransomware in the wildCVE-2023-3259CVE-2023-3267CVE-2023-3260+6 CVEs60
Threat Source newsletter (Sept. 16, 2021)Cisco Talos·Sep 16, 18:00 UTC · Sep 16, 2021Ransomware in the wildCVE-2021-40444CVE-2021-36965CVE-2021-2643560
Threat Source newsletter (Oct. 24, 2019)Cisco Talos·Oct 24, 18:00 UTC · Oct 24, 2019RansomwareCVE-2019-1193260
USCYBERCOM & CISA warn orgs to fix CVE-2021Security Affairs·Sep 3, 21:48 UTC · Sep 3, 2021Ransomware in the wildCVE-2021-2608460
Cryptomining attacks against Apple devices increase sharplyHelp Net Security·Oct 16, 00:00 UTC · Oct 16, 2018RansomwareCVE-2017-7269CVE-2017-5638CVE-2016-630960
CL0P-Linked Hackers Breach Dozens of Organizations Through Oracle Software FlawThe Hacker News·Oct 10, 06:41 UTC · Oct 10, 2025Ransomware in the wildCVE-2025-61882160
PwnedPiper PTS Security Flaws Threaten 80% of Hospitals in the U.S.The Hacker News·Aug 12, 13:04 UTC · Aug 12, 2021RansomwareCVE-2021-37161CVE-2021-37162CVE-2021-37163+5 CVEs60
ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-YearThe Hacker News·Apr 17, 14:47 UTC · Apr 17, 2026Ransomware in the wildCVE-2026-33825CVE-2009-0238160
Hackers scan for VMware vCenter servers vulnerable to CVE-2021Security Affairs·Jun 4, 21:44 UTC · Jun 4, 2021RansomwareCVE-2021-2198560
Researchers Uncover Hacker Group Behind Organized FinancialThe Hacker News·Jan 6, 04:15 UTC · Jan 6, 2022RansomwareCVE-2017-1000486CVE-2015-7450CVE-2010-532660
CVE-2025-22225 in VMware ESXi now used in active ransomware attacksSecurity Affairs·Feb 4, 22:02 UTC · Feb 4, 2026Ransomware in the wildCVE-2025-22225CVE-2025-22226CVE-2025-2222460
Chinese-speaking hackers exploited ESXi zeroSecurity Affairs·Jan 9, 00:06 UTC · Jan 9, 2026Ransomware in the wildCVE-2025-22226CVE-2025-22224CVE-2025-2222560
Rounding up some of the major headlines from RSACisco Talos·May 16, 18:00 UTC · May 16, 2024RansomwareCVE-2024-30044CVE-2024-3005160
CLOP targets Gladinet CentreStack servers in largeSecurity Affairs·Dec 19, 11:48 UTC · Dec 19, 2025Ransomware in the wildCVE-2025-11371CVE-2025-30406CVE-2025-61882+2 CVEs160
Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud AttacksThe Hacker News·Aug 28, 03:58 UTC · Aug 28, 2025Ransomware60
Attackers actively exploiting Atlassian Confluence and Oracle WebLogic flawsHelp Net Security·May 2, 00:00 UTC · May 2, 2019RansomwareCVE-2019-2725CVE-2019-339660
Fortra Sheds Light on GoAnywhere MFT ZeroThe Hacker News·Apr 21, 04:57 UTC · Apr 21, 2023Ransomware in the wildCVE-2023-066960
Experts Sound Alarm Over Growing Attacks Exploiting Zoho ManageEngine ProductsThe Hacker News·Feb 24, 05:28 UTC · Feb 24, 2023RansomwareCVE-2022-4796660
Microsoft Links Ongoing SharePoint Exploits to Three Chinese Hacker GroupsThe Hacker News·Jul 22, 16:43 UTC · Jul 22, 2025RansomwareCVE-2025-49706CVE-2025-49704CVE-2025-53771+1 CVEs60