North Korean IT workers set their sights on European organizationsHelp Net Security·Apr 2, 00:00 UTC · Apr 2, 2025Ransomware45
Scattered Spider, fresh off retail sector attack spree, pivots to insurance industryCyberScoop·Jun 16, 20:52 UTC · Jun 16, 2025Ransomware in the wild60
Google Warns of Scattered Spider Attacks Targeting IT Support Teams at U.S. Insurance FirmsThe Hacker News·Jun 18, 05:19 UTC · Jun 18, 2025Ransomware57
Salesforce customers duped by series of socialCyberScoop·Jun 4, 18:40 UTC · Jun 4, 2025Ransomware in the wild60
Cybercrime evolving into national security threat: GoogleThe Record·Feb 12, 22:08 UTC · Feb 12, 2025Ransomware60
The ransomware economy is shifting toward straightCyberScoop·Mar 16, 14:25 UTC · Mar 16, 2026Ransomware in the wild60
Hundreds of Salesforce customer orgs hit in clever attack with potentially huge blast radiusHelp Net Security·Sep 8, 11:32 UTC · Sep 8, 2025Ransomware57
Google previews cyber ‘disruption unit’ as U.S. government, industry weigh going heavier on offenseCyberScoop·Aug 27, 18:30 UTC · Aug 27, 2025Ransomware in the wild60
Zero‑Day Attacks on Enterprise Software Reach Record HighInfosecurity Magazine·Mar 6, 12:29 UTC · Mar 6, 2026Ransomware in the wild60
North Korean operatives spotted using evasive techniques to steal data and cryptocurrencyCyberScoop·Oct 16, 21:54 UTC · Oct 16, 2025Ransomware in the wild60
Google links axios supply chain attack to North Korean groupThe Record·Mar 31, 20:35 UTC · Mar 31, 2026Ransomware57
Aflac duped by social-engineering attack, marking another hit on insurance industryCyberScoop·Jun 20, 15:50 UTC · Jun 20, 2025Ransomware in the wild60
Attackers hit security device defects hard in 2024CyberScoop·Apr 24, 14:36 UTC · Apr 24, 2025RansomwareCVE-2024-3400CVE-2023-46805CVE-2024-21887+2 CVEs60
Google links Axios npm supply chain attack to North KoreaSecurity Affairs·Apr 1, 13:47 UTC · Apr 1, 2026Ransomware57
The Ongoing Fallout from a Breach at AI Chatbot Maker SalesloftKrebs on Security·Sep 1, 22:29 UTC · Sep 1, 2025Ransomware57
Google confirms Salesforce CRM breach, faces extortion threatSecurity Affairs·Aug 10, 17:39 UTC · Aug 10, 2025Ransomware45
BlackFile actively extorting data-theft victims in retail and hospitality sectorCyberScoop·Apr 27, 14:18 UTC · Apr 27, 2026Ransomware in the wild160
North Korean operatives have infiltrated hundreds of Fortune 500 companiesCyberScoop·Apr 30, 22:22 UTC · Apr 30, 2025Ransomware in the wild60
ShinyHunters Wage Broad Corporate Extortion SpreeKrebs on Security·Oct 8, 00:36 UTC · Oct 8, 2025RansomwareCVE-2025-6188260
“No honor among thieves”: M&S hacking group starts turf warArs Technica · Security·Jul 7, 18:12 UTC · Jul 7, 2025Ransomware57
Attackers fake IT support calls to steal Salesforce dataHelp Net Security·Jun 4, 00:00 UTC · Jun 4, 2025Ransomware45
Google: Clop Accessed “Significant Amount” of Data in Oracle EBS ExploInfosecurity Magazine·Oct 10, 11:15 UTC · Oct 10, 2025Ransomware in the wildCVE-2025-6188260
Extortion Emails Sent to Executives by SelfInfosecurity Magazine·Oct 2, 15:45 UTC · Oct 2, 2025Ransomware57
Google warns of Cl0p extortion campaign against Oracle ESecurity Affairs·Oct 3, 05:22 UTC · Oct 3, 2025Ransomware60
Hackers Impersonate IT Support to Breach Leading Financial CompaniesSecurity Affairs·Aug 7, 15:51 UTC · Aug 7, 2026Ransomware57
What defenders are learning from Black Basta's leaked chat logsCyberScoop·Feb 24, 16:45 UTC · Feb 24, 2025Ransomware in the wild60
Google Links Redact Extortion Group to BlackFile RebrandInfosecurity Magazine·Aug 7, 09:40 UTC · Aug 7, 2026Ransomware45
Cybercriminals ‘Spooked’ After Scattered Spider ArrestsInfosecurity Magazine·Jul 31, 12:20 UTC · Jul 31, 2025Ransomware57
Google Links China, Iran, Russia, North Korea to Coordinated Defense Sector Cyber OperationsThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Ransomware60
Dozens of Oracle customers impacted by Clop data theft for extortion campaignCyberScoop·Oct 9, 16:02 UTC · Oct 9, 2025Ransomware in the wildCVE-2025-6188260
Google Warns of New Threat Group Targeting BPOs and HelpdesksInfosecurity Magazine·Apr 9, 08:35 UTC · Apr 9, 2026Ransomware45
Harvard University hit in Oracle EBS cyberattack, 1.3 TB of data leaked by Cl0p groupSecurity Affairs·Oct 14, 14:08 UTC · Oct 14, 2025RansomwareCVE-2025-61882CVE-2023-34362CVE-2023-066960
Researchers spot exploitation of another critical Oracle defectCyberScoop·Jul 1, 19:23 UTC · Jul 1, 2026Ransomware in the wildCVE-2026-4681760
Possible U.S.-developed exploits linked to first known ‘mass’ iOS attackCyberScoop·Mar 3, 22:42 UTC · Mar 3, 2026Ransomware60
RA World Ransomware Attack in South Asia Links to Chinese Espionage ToolsetThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2025RansomwareCVE-2024-0012CVE-2023-20198CVE-2023-2027360
Hitachi subsidiary GlobalLogic impacted by Clop’s attack spree on Oracle customersCyberScoop·Nov 11, 19:26 UTC · Nov 11, 2025Ransomware in the wildCVE-2025-6188260
ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More StoriesThe Hacker News·Jun 25, 12:30 UTC · Jun 25, 2026RansomwareCVE-2026-8932CVE-2026-5016060
CL0P-Linked Hackers Breach Dozens of Organizations Through Oracle Software FlawThe Hacker News·Oct 10, 06:41 UTC · Oct 10, 2025Ransomware in the wildCVE-2025-61882160