Ransomware Gang Exploits SimpleHelp RMM to Compromise Utility BillingInfosecurity Magazine·Jun 13, 11:00 UTC · Jun 13, 2025Ransomware in the wildCVE-2024-57727CVE-2024-57728CVE-2024-5772660
CLOP targets Gladinet CentreStack servers in largeSecurity Affairs·Dec 19, 11:48 UTC · Dec 19, 2025Ransomware in the wildCVE-2025-11371CVE-2025-30406CVE-2025-61882+2 CVEs60
Threat Brief: Office Documents Can Be Dangerous (But We’ll Continue to Use Them Anyway)Palo Alto Unit 42·Sep 21, 18:41 UTC · Sep 21, 2020Ransomware in the wildCVE-2018-4878CVE-2017-11882CVE-2018-0802+4 CVEs160
Oracle EBS Under Fire as Cl0p Exploits CVE-2025-61882 in RealThe Hacker News·Oct 8, 04:30 UTC · Oct 8, 2025Ransomware in the wildCVE-2025-6188260
U.S., U.K. and Australia Warn of Iranian Hackers Exploiting Microsoft, Fortinet FlawsThe Hacker News·Nov 22, 07:14 UTC · Nov 22, 2021Ransomware in the wildCVE-2021-34473CVE-2020-12812CVE-2019-5591+1 CVEs60
Threat Source newsletter (Oct. 28, 2021)Cisco Talos·Oct 28, 18:00 UTC · Oct 28, 2021Ransomware in the wildCVE-2021-41733CVE-2021-4201360
Threat Source newsletter (Oct. 14, 2021)Cisco Talos·Oct 14, 18:00 UTC · Oct 14, 2021Ransomware in the wildCVE-2021-40461CVE-2021-38672CVE-2021-41733+1 CVEs60
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026The Hacker News·Mar 21, 07:03 UTC · Mar 21, 2026Ransomware in the wildCVE-2026-2013160
Threat Source newsletter (Aug. 1, 2019)Cisco Talos·Aug 1, 18:00 UTC · Aug 1, 2019Ransomware in the wild60
⚡ Weekly Recap: BadCam Attack, WinRAR 0-Day, EDR Killer, NVIDIA Flaws, Ransomware Attacks & MoreThe Hacker News·Aug 12, 04:40 UTC · Aug 12, 2025Ransomware in the wildCVE-2025-54948CVE-2025-54987CVE-2025-8088+30 CVEs60
Researchers warn of a surge in cyber attacks against Microsoft ExchangeSecurity Affairs·Mar 12, 22:51 UTC · Mar 12, 2021Ransomware in the wildCVE-2021-26855CVE-2021-26857CVE-2021-26858+1 CVEs60
Microsoft blames Clop gang for 'MOVEit Transfer' attacksSecurity Affairs·Jun 5, 15:07 UTC · Jun 5, 2023Ransomware in the wildCVE-2023-3436260
Threat Source Newsletter (May 13, 2021)Cisco Talos·May 13, 18:00 UTC · May 13, 2021Ransomware in the wildCVE-2021-31166CVE-2021-146860
Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail ServerThe Hacker News·Feb 12, 05:15 UTC · Feb 12, 2026Ransomware in the wildCVE-2025-52691CVE-2026-23760CVE-2026-2442360
Hackers Found Exploiting Oracle WebLogic RCE Flaw to Spread RansomwareThe Hacker News·May 1, 07:31 UTC · May 1, 2019Ransomware in the wildCVE-2019-272560
October 2025 CVE LandscapeRecorded Future·Dec 9, 00:00 UTC · Dec 9, 2025Ransomware in the wildCVE-2025-59287CVE-2025-61882CVE-2025-41244+29 CVEs60
August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
Microsoft patches zero-days used by state-sponsored and ransomware threat actors (CVE-2023-23397, CVE-2023-24880)Help Net Security·Mar 14, 00:00 UTC · Mar 14, 2023Ransomware in the wildCVE-2023-23397CVE-2023-24880CVE-2022-44698+3 CVEs60
Oracle patches critical E-Business Suite flaw exploited by Cl0p hackersSecurity Affairs·Oct 6, 19:51 UTC · Oct 6, 2025Ransomware in the wildCVE-2025-6188260
CISA plans to share more information on ransomware actors in its exploited vulnerability alertsThe Record·Oct 13, 13:47 UTC · Oct 13, 2023Ransomware in the wildCVE-2023-21608CVE-2023-20109CVE-2023-41763+2 CVEs60
Week in review: Password-less security, WPA3 design flaws, new Windows 10 update controlsHelp Net Security·May 13, 13:23 UTC · May 13, 2020Ransomware in the wildCVE-2019-1573CVE-2019-021160
Zyxel addresses ZeroSecurity Affairs·Feb 25, 20:25 UTC · Feb 25, 2020Ransomware in the wildCVE-2020-905460
Oracle E-Business Suite Flaw CVE-2026The Hacker News·Jun 30, 11:37 UTC · Jun 30, 2026Ransomware in the wildCVE-2026-46817CVE-2025-61882CVE-2026-3527360
FreePBX Servers Targeted by ZeroThe Hacker News·Sep 12, 12:01 UTC · Sep 12, 2025Ransomware in the wildCVE-2025-5781960
Hackers seen exploiting bugs in browsers and popular file transfer toolThe Record·Oct 3, 13:21 UTC · Oct 3, 2023Ransomware in the wildCVE-2023-5217CVE-2023-4004460
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [10 February]The Hacker News·May 6, 07:05 UTC · May 6, 2025Ransomware in the wildCVE-2024-57726CVE-2024-57727CVE-2024-57728+18 CVEs60
Cryptominers, ransomware among top malware in IR engagements in Q4Cisco Talos·Nov 20, 16:00 UTC · Nov 20, 2019Ransomware in the wild60
Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p RansomwareThe Hacker News·Apr 29, 04:05 UTC · Apr 29, 2023Ransomware in the wildCVE-2023-27351CVE-2023-27532CVE-2023-138960
April 2026 CVE LandscapeRecorded Future·Jun 3, 00:00 UTC · Jun 3, 2026Ransomware in the wildCVE-2026-33032CVE-2026-39987CVE-2009-0238+30 CVEs60
Desktop and IoT threat statistics for Q1 2026Kaspersky Securelist·May 18, 12:00 UTC · May 18, 2026Ransomware in the wildCVE-2026-2013160
More helpful resources for users of all skill levels to help you Take a Security ActionCisco Talos·Oct 19, 18:00 UTC · Oct 19, 2023Ransomware in the wildCVE-2023-2019860