August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
Leaked Black Basta Ransomware Chat Logs Reveal Inner Workings and Internal ConflictsThe Hacker News·Feb 27, 05:08 UTC · Feb 27, 2025Ransomware in the wildCVE-2024-50623CVE-2009-3960CVE-2010-2861+8 CVEs60
Week in review: VPNs vulnerable to TunnelCrack attacks, Cybertech Africa 2023Help Net Security·Aug 20, 00:00 UTC · Aug 20, 2023Ransomware in the wildCVE-2023-32560CVE-2023-3519CVE-2023-2448960
Citrix NetScaler customers hit by third actively exploited zeroCyberScoop·Aug 26, 21:28 UTC · Aug 26, 2025Ransomware in the wildCVE-2025-7775CVE-2025-7776CVE-2025-8424+3 CVEs60
CLOP Ransomware operators hacked IndiaBulls GroupSecurity Affairs·Jun 23, 09:55 UTC · Jun 23, 2020RansomwareCVE-2019-1978160
FIN8-linked actor targets Citrix NetScaler systemsSecurity Affairs·Aug 29, 15:14 UTC · Aug 29, 2023RansomwareCVE-2023-351960
Citrix NetScaler Alert: Ransomware Hackers Exploiting Critical VulnerabilityThe Hacker News·Aug 30, 03:26 UTC · Aug 30, 2023RansomwareCVE-2023-351960
Ransomware Groups Increasingly Deploy EDR Kill TechniquesInfosecurity Magazine·Jul 27, 10:01 UTC · Jul 27, 2026RansomwareCVE-2025-5777CVE-2024-40766CVE-2024-5559160
Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain CredentialsThe Hacker News·Jul 3, 14:36 UTC · Jul 3, 2026RansomwareCVE-2025-577760
INC Ransom Claims CyberInfosecurity Magazine·Nov 29, 11:50 UTC · Nov 29, 2024RansomwareCVE-2023-496660
Ransomware attackers hop from on-premises systems to cloud to compromise Microsoft 365 accountsHelp Net Security·Sep 30, 00:00 UTC · Sep 30, 2024Ransomware157
Report Reveals Record Exploitation Rate For Load BalancersInfosecurity Magazine·Jun 18, 11:00 UTC · Jun 18, 2024Ransomware in the wildCVE-2023-496660
Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New ExploitsThe Hacker News·Sep 6, 07:46 UTC · Sep 6, 2023Ransomware in the wildCVE-2023-36844CVE-2023-36845CVE-2023-36846+3 CVEs60
Week in review: Kubernetes security challenges, NIST Privacy Framework, Mitsubishi Electric breachHelp Net Security·Jan 26, 00:00 UTC · Jan 26, 2020Ransomware in the wildCVE-2019-19781CVE-2020-067460
In alerting about two Citrix bugs, CISA recommends immediate attention for oneThe Record·Jan 18, 20:42 UTC · Jan 18, 2024Ransomware in the wildCVE-2023-6548CVE-2023-654960
Citrix provides additional measures to address Citrix BleedSecurity Affairs·Nov 22, 08:15 UTC · Nov 22, 2023RansomwareCVE-2023-496660
HHS warns of ‘Citrix Bleed’ attacks after hospital outagesThe Record·Dec 1, 22:06 UTC · Dec 1, 2023Ransomware in the wildCVE-2023-496660
LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break InThe Hacker News·Nov 22, 11:59 UTC · Nov 22, 2023RansomwareCVE-2023-496660
IR Q4 2023 trends: Significant increase in ransomware activity found in engagements, while education remains one of the mostCisco Talos·Jan 24, 13:00 UTC · Jan 24, 2024RansomwareCVE-2020-147260
LockBit ransomware gang leaked data stolen from BoeingSecurity Affairs·Nov 13, 14:02 UTC · Nov 13, 2023Ransomware in the wildCVE-2023-496660
Industrial and Commercial Bank of China (ICBC) suffered a ransomware attackSecurity Affairs·Nov 10, 11:11 UTC · Nov 10, 2023Ransomware in the wildCVE-2023-496660
Citrix Bleed 2 Flaw Enables Token Theft; SAP GUI Flaws Risk Sensitive Data ExposureThe Hacker News·Jun 27, 10:45 UTC · Jun 27, 2025Ransomware in the wildCVE-2025-0055CVE-2025-0056CVE-2025-0059+2 CVEs60
Citrix warns of exploitation of Netscaler devices through new bugsThe Record·Jun 25, 20:23 UTC · Jun 25, 2025RansomwareCVE-2025-6543CVE-2025-5349CVE-2025-577760
How LockBit used Citrix Bleed to breach Boeing and other targetsHelp Net Security·Nov 22, 00:00 UTC · Nov 22, 2023Ransomware in the wildCVE-2023-496660
Citrix users hit by actively exploited zeroCyberScoop·Jun 25, 20:38 UTC · Jun 25, 2025Ransomware in the wildCVE-2025-6543CVE-2025-5777CVE-2025-5349+1 CVEs60
‘Advanced’ hacker seen exploiting Cisco, Citrix zeroThe Record·Nov 12, 18:17 UTC · Nov 12, 2025RansomwareCVE-2025-5777CVE-2025-2033760
Additional Entities Targeted by DarkSide Affiliate, TAG-21; Links to WellMess and Sliver InfrastructureRecorded Future·Jul 15, 00:00 UTC · Jul 15, 2025Ransomware57
Cyber experts and officials raise alarms about exploits against Citrix and Apache productsThe Record·Nov 3, 18:13 UTC · Nov 3, 2023Ransomware in the wildCVE-2023-46604CVE-2023-496660
Industrial and Commercial Bank of China dealing with LockBit ransomware attackThe Record·Nov 9, 21:55 UTC · Nov 9, 2023RansomwareCVE-2023-496660