FIN8-linked actor targets Citrix NetScaler systemsSecurity Affairs·Aug 29, 15:14 UTC · Aug 29, 2023RansomwareCVE-2023-351960
New Ransomware Campaign Targets Citrix NetScaler FlawInfosecurity Magazine·Aug 29, 16:30 UTC · Aug 29, 2023RansomwareCVE-2023-351960
Ransomware group exploits Citrix NetScaler systems for initial accessHelp Net Security·Aug 29, 00:00 UTC · Aug 29, 2023Ransomware in the wildCVE-2023-351960
Citrix NetScaler Alert: Ransomware Hackers Exploiting Critical VulnerabilityThe Hacker News·Aug 30, 03:26 UTC · Aug 30, 2023RansomwareCVE-2023-351960
Citrix NetScaler customers hit by third actively exploited zeroCyberScoop·Aug 26, 21:28 UTC · Aug 26, 2025Ransomware in the wildCVE-2025-7775CVE-2025-7776CVE-2025-8424+3 CVEs60
August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
Citrix provides additional measures to address Citrix BleedSecurity Affairs·Nov 22, 08:15 UTC · Nov 22, 2023RansomwareCVE-2023-496660
Leaked Black Basta Ransomware Chat Logs Reveal Inner Workings and Internal ConflictsThe Hacker News·Feb 27, 05:08 UTC · Feb 27, 2025Ransomware in the wildCVE-2024-50623CVE-2009-3960CVE-2010-2861+8 CVEs60
Pennsylvania attorney general says SSNs stolen during August ransomware attackThe Record·Nov 17, 19:58 UTC · Nov 17, 2025RansomwareCVE-2025-577760
Pennsylvania AG says recovery continues after office refused to pay ransomware gangThe Record·Sep 2, 18:35 UTC · Sep 2, 2025RansomwareCVE-2025-577760
What happened in Vegas (that you actually want to know about)Cisco Talos·Aug 14, 18:00 UTC · Aug 14, 2025RansomwareCVE-2025-654360
LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break InThe Hacker News·Nov 22, 11:59 UTC · Nov 22, 2023RansomwareCVE-2023-496660
Citrix Bleed 2 Flaw Enables Token Theft; SAP GUI Flaws Risk Sensitive Data ExposureThe Hacker News·Jun 27, 10:45 UTC · Jun 27, 2025Ransomware in the wildCVE-2025-0055CVE-2025-0056CVE-2025-0059+2 CVEs60
Citrix warns of exploitation of Netscaler devices through new bugsThe Record·Jun 25, 20:23 UTC · Jun 25, 2025RansomwareCVE-2025-6543CVE-2025-5349CVE-2025-577760
Major Australian ports blocked after a cyber attack on DP WorldSecurity Affairs·Nov 14, 11:33 UTC · Nov 14, 2023Ransomware57
Additional Entities Targeted by DarkSide Affiliate, TAG-21; Links to WellMess and Sliver InfrastructureRecorded Future·Jul 15, 00:00 UTC · Jul 15, 2025Ransomware57
LockBit ransomware gang leaked data stolen from BoeingSecurity Affairs·Nov 13, 14:02 UTC · Nov 13, 2023Ransomware in the wildCVE-2023-496660
Industrial and Commercial Bank of China (ICBC) suffered a ransomware attackSecurity Affairs·Nov 10, 11:11 UTC · Nov 10, 2023Ransomware in the wildCVE-2023-496660
Week in review: VPNs vulnerable to TunnelCrack attacks, Cybertech Africa 2023Help Net Security·Aug 20, 00:00 UTC · Aug 20, 2023Ransomware in the wildCVE-2023-32560CVE-2023-3519CVE-2023-2448960
IR Q4 2023 trends: Significant increase in ransomware activity found in engagements, while education remains one of the mostCisco Talos·Jan 24, 13:00 UTC · Jan 24, 2024RansomwareCVE-2020-147260
Chinese multinational bank hit by ransomwareHelp Net Security·Nov 10, 00:00 UTC · Nov 10, 2023RansomwareCVE-2023-496660
CLOP Ransomware operators hacked IndiaBulls GroupSecurity Affairs·Jun 23, 09:55 UTC · Jun 23, 2020RansomwareCVE-2019-1978160
Teens with “digital bazookas” are winning the ransomware war, researcher lamentsArs Technica · Security·Nov 15, 00:00 UTC · Nov 15, 2023RansomwareCVE-2023-496660
ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More StoriesThe Hacker News·Jul 30, 15:25 UTC · Jul 30, 2026RansomwareCVE-2026-33017CVE-2026-21858CVE-2025-68613+5 CVEs60
Ransomware Groups Increasingly Deploy EDR Kill TechniquesInfosecurity Magazine·Jul 27, 10:01 UTC · Jul 27, 2026RansomwareCVE-2025-5777CVE-2024-40766CVE-2024-5559160
Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain CredentialsThe Hacker News·Jul 3, 14:36 UTC · Jul 3, 2026RansomwareCVE-2025-577760
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023The Hacker News·Jun 18, 14:12 UTC · Jun 18, 2026RansomwareCVE-2023-3519CVE-2025-5777CVE-2023-48788+1 CVEs160
March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC ZeroRecorded Future·Jun 3, 00:00 UTC · Jun 3, 2026Ransomware in the wildCVE-2017-7921CVE-2026-27483CVE-2026-27944+10 CVEs260
ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & MoreThe Hacker News·Mar 19, 14:25 UTC · Mar 19, 2026Ransomware in the wildCVE-2024-55591CVE-2025-71257CVE-2025-71258+4 CVEs60
Half of Ransomware Access Due to Hijacked VPN CredentialsInfosecurity Magazine·Nov 19, 09:40 UTC · Nov 19, 2025RansomwareCVE-2025-53770CVE-2025-54309CVE-2025-20333+2 CVEs60
Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud AttacksThe Hacker News·Aug 28, 03:58 UTC · Aug 28, 2025Ransomware60
INC Ransom Claims CyberInfosecurity Magazine·Nov 29, 11:50 UTC · Nov 29, 2024RansomwareCVE-2023-496660
THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 11The Hacker News·Nov 18, 11:36 UTC · Nov 18, 2024Ransomware in the wildCVE-2024-5910CVE-2024-9463CVE-2024-9465+29 CVEs60
Ransomware attackers hop from on-premises systems to cloud to compromise Microsoft 365 accountsHelp Net Security·Sep 30, 00:00 UTC · Sep 30, 2024Ransomware157
Microsoft Identifies Storm-0501 as Major Threat in Hybrid Cloud Ransomware AttacksThe Hacker News·Sep 28, 05:55 UTC · Sep 28, 2024Ransomware57
How RansomHub went from zero to 210 victims in six monthsHelp Net Security·Aug 30, 00:00 UTC · Aug 30, 2024Ransomware57
Iranian-linked hackers collaborate with ransomware affiliates, feds sayCyberScoop·Aug 28, 16:48 UTC · Aug 28, 2024Ransomware in the wild60
Pioneer Kitten: Iranian hackers partnering with ransomware affiliatesHelp Net Security·Aug 28, 00:00 UTC · Aug 28, 2024Ransomware57
Report Reveals Record Exploitation Rate For Load BalancersInfosecurity Magazine·Jun 18, 11:00 UTC · Jun 18, 2024Ransomware in the wildCVE-2023-496660
LockBit on a Roll - ICBC Ransomware Attack Strikes at the Heart of the Global Financial OrderSecurity Affairs·Dec 4, 10:48 UTC · Dec 4, 2023Ransomware60