Microsoft SharePoint attacks ensnare 400 victims, including federal agenciesCyberScoop·Jul 24, 18:39 UTC · Jul 24, 2025Ransomware in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49706+3 CVEs60
Ransomware gang targets Microsoft SharePoint servers for the first timeThe Record·Dec 7, 00:00 UTC · Dec 7, 2022RansomwareCVE-2019-0604160
Week in review: ScreenConnect servers open to attack, exploited Microsoft SharePoint flawHelp Net Security·Mar 22, 00:00 UTC · Mar 22, 2026Ransomware in the wildCVE-2026-20963CVE-2026-3564CVE-2026-20131160
Week in review: Microsoft SharePoint servers under attack, landing your first cybersecurity jobHelp Net Security·Jul 27, 00:00 UTC · Jul 27, 2025Ransomware in the wildCVE-2025-40599CVE-2025-5430960
July 2026 CVE LandscapeRecorded Future·Aug 7, 00:00 UTC · Aug 7, 2026Ransomware in the wildCVE-2025-3248CVE-2008-4128CVE-2017-17215+78 CVEs160
Microsoft linked attacks on SharePoint flaws to ChinaSecurity Affairs·Jul 23, 06:20 UTC · Jul 23, 2025RansomwareCVE-2025-5377060
Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched SystemsThe Hacker News·Jul 28, 15:57 UTC · Jul 28, 2025Ransomware in the wildCVE-2025-49706CVE-2025-4970460
Microsoft Links Ongoing SharePoint Exploits to Three Chinese Hacker GroupsThe Hacker News·Jul 22, 16:43 UTC · Jul 22, 2025RansomwareCVE-2025-49706CVE-2025-49704CVE-2025-53771+1 CVEs60
SharePoint Flaws Used to Hack Switzerland's Federal IT AgencySecurity Affairs·Aug 4, 20:16 UTC · Aug 4, 2026Ransomware in the wildCVE-2026-50522160
US Tops Hit List as 396 SharePoint Systems Compromised GloballyInfosecurity Magazine·Jul 30, 11:02 UTC · Jul 30, 2025RansomwareCVE-2025-5377060
Microsoft says Warlock ransomware deployed in SharePoint attacks as governments scrambleThe Record·Jul 24, 16:00 UTC · Jul 24, 2025RansomwareCVE-2025-4970660
Fog ransomware attack on Asia financial org draws attention over use of employee monitoring softwareThe Record·Jun 12, 17:06 UTC · Jun 12, 2025Ransomware57
Incident Response Analyst Report of 2019Kaspersky Securelist·Aug 6, 10:00 UTC · Aug 6, 2020Ransomware57
Storm-2603 Deploys DNS-Controlled Backdoor in Warlock and LockBit Ransomware AttacksThe Hacker News·Aug 6, 14:41 UTC · Aug 6, 2025RansomwareCVE-2025-49706CVE-2025-4970460
June 2026 CVE LandscapeRecorded Future·Jul 17, 00:00 UTC · Jul 17, 2026Ransomware in the wildCVE-2026-35616CVE-2026-25939CVE-2020-17103+53 CVEs60
Ransomware Deployed in Compromised SharePoint ServersInfosecurity Magazine·Jul 24, 14:45 UTC · Jul 24, 2025RansomwareCVE-2025-53770CVE-2025-5377160
CISA and FBI Warn of Global Threat from Ghost RansomwareInfosecurity Magazine·Feb 20, 09:45 UTC · Feb 20, 2025RansomwareCVE-2018-13379CVE-2010-2861CVE-2009-3960+3 CVEs60
A Microsoft 365 feature can ransom files on SharePoint and OneDriveCouldSecurity Affairs·Jun 17, 06:34 UTC · Jun 17, 2022Ransomware157
Analyzing the Threat of Ransomware Attacks Against US ElectionsRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware60
Warlock Ransomware Hitting Victims Globally Through SharePoint ToolSheInfosecurity Magazine·Aug 20, 12:00 UTC · Aug 20, 2025Ransomware60
BRB, pausing for a "Sanctuary Moon" marathonCisco Talos·Jul 24, 18:00 UTC · Jul 24, 2025Ransomware in the wildCVE-2025-5377060
ToolShell under siege: Check Point analyzes Chinese APT StormSecurity Affairs·Aug 1, 11:19 UTC · Aug 1, 2025Ransomware57
How to thwart human-operated ransomware campaigns?Help Net Security·Apr 30, 00:00 UTC · Apr 30, 2020RansomwareCVE-2019-1978CVE-2019-11510CVE-2019-0604+2 CVEs60
IR Trends Q3 2025: ToolShell attacks dominate, highlighting criticality of segmentation and rapid responseCisco Talos·Oct 23, 10:00 UTC · Oct 23, 2025Ransomware in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49704+1 CVEs160
April 2026 CVE LandscapeRecorded Future·Jun 3, 00:00 UTC · Jun 3, 2026Ransomware in the wildCVE-2026-33032CVE-2026-39987CVE-2009-0238+30 CVEs160
Veeam releases new Veeam Backup for Microsoft Office 365 v4Help Net Security·Nov 6, 00:00 UTC · Nov 6, 2019Ransomware160
Week in review: Claude Mythos finds 271 Firefox flaws, Vercel breachHelp Net Security·Apr 26, 00:00 UTC · Apr 26, 2026Ransomware in the wildCVE-2026-20133CVE-2026-21876CVE-2026-2895060
Exposed Without a Breach: The Cost of Data BlindnessSecurity Affairs·Aug 5, 10:42 UTC · Aug 5, 2025Ransomware in the wildCVE-2025-5377060
⚡ Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-theThe Hacker News·Aug 27, 05:11 UTC · Aug 27, 2025Ransomware in the wildCVE-2018-0171CVE-2025-43300CVE-2025-7353+5 CVEs60
⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AIThe Hacker News·Jun 2, 03:39 UTC · Jun 2, 2026Ransomware in the wildCVE-2026-0257CVE-2026-8732CVE-2026-27771+31 CVEs60
Cloudflare tracked 230 billion daily threats and here is what it foundHelp Net Security·Jun 14, 15:33 UTC · Jun 14, 2026Ransomware60
Strings in the maze: Finding hidden strengths and gaps in your teamCisco Talos·Oct 23, 18:00 UTC · Oct 23, 2025RansomwareCVE-2025-5495760
How a noisy ransomware intrusion exposed a long-term espionage footholdHelp Net Security·Dec 2, 00:00 UTC · Dec 2, 2025RansomwareCVE-2025-53770CVE-2024-21887CVE-2025-4427+2 CVEs60
March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC ZeroRecorded Future·Jun 3, 00:00 UTC · Jun 3, 2026Ransomware in the wildCVE-2017-7921CVE-2026-27483CVE-2026-27944+10 CVEs260
Don’t swing at everythingCisco Talos·Jul 23, 18:00 UTC · Jul 23, 2026RansomwareCVE-2026-60137CVE-2026-6303060
Attackers are handing off access in 22 seconds, Mandiant findsHelp Net Security·Jun 19, 12:06 UTC · Jun 19, 2026RansomwareCVE-2025-31324CVE-2025-61882CVE-2025-53770+1 CVEs60
Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion AttacksThe Hacker News·May 1, 17:16 UTC · May 1, 2026Ransomware60
Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR ToolsThe Hacker News·Apr 6, 10:07 UTC · Apr 6, 2026Ransomware57
Ransomware activity never dies, it multipliesHelp Net Security·Jan 16, 00:00 UTC · Jan 16, 2026Ransomware57