A Dissection of the “EsteemAudit” Windows Remote Desktop ExploitPalo Alto Unit 42·May 31, 12:00 UTC · May 31, 2017RansomwareCVE-2017-907360
How offense and defense came together to plug a hole in a popular Microsoft programCyberScoop·Aug 2, 19:48 UTC · Aug 2, 2019Ransomware in the wild60
DXXD Ransomware encrypts files on unmapped network sharesSecurity Affairs·Oct 13, 06:45 UTC · Oct 13, 2016Ransomware60
IR Trends Q3 2025: ToolShell attacks dominate, highlighting criticality of segmentation and rapid responseCisco Talos·Oct 23, 10:00 UTC · Oct 23, 2025Ransomware in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49704+1 CVEs160
Threat Assessment: Black Basta RansomwarePalo Alto Unit 42·Jun 5, 17:55 UTC · Jun 5, 2024Ransomware60
Microsoft Fixes Seven ZeroInfosecurity Magazine·Jun 9, 10:58 UTC · Jun 9, 2021Ransomware in the wildCVE-2021-31955CVE-2021-33742CVE-2021-31956+6 CVEs160
Most interesting IR cases in 2023: insider threats and moreKaspersky Securelist·Sep 3, 11:01 UTC · Sep 3, 2024Ransomware60
First Cyber Attack 'Mass Exploiting' BlueKeep RDP Flaw Spotted in the WildThe Hacker News·Nov 3, 11:34 UTC · Nov 3, 2019RansomwareCVE-2019-070860
Quarterly Report: Incident Response trends in Summer 2020Cisco Talos·Sep 1, 15:00 UTC · Sep 1, 2020RansomwareCVE-2019-1893560
From exploits to honeypots: How the security community is preparing for BlueKeep’s moment of truthCyberScoop·Jul 9, 19:01 UTC · Jul 9, 2019Ransomware in the wild60
Zentera helps SMEs defend against insider threats and ransomwareHelp Net Security·Feb 10, 00:00 UTC · Feb 10, 2022Ransomware60
FBI, CISA Warn of Rising AvosLocker Ransomware Attacks Against Critical InfrastructureThe Hacker News·Oct 22, 03:10 UTC · Oct 22, 2023Ransomware60
Thwart the pressing threat of RDP password attacksHelp Net Security·Jul 23, 00:00 UTC · Jul 23, 2019RansomwareCVE-2019-070860
Talos IR trends Q4 2024: Web shell usage and exploitation of publicCisco Talos·Jan 30, 11:00 UTC · Jan 30, 2025Ransomware57
Quarterly Report: Incident Response Trends in Q4 2022Cisco Talos·Jan 26, 09:00 UTC · Jan 26, 2023Ransomware60
REvil ransomware attack against MSPs and its clients around the worldKaspersky Securelist·Jul 6, 15:23 UTC · Jul 6, 2021Ransomware57
How to recover files encrypted by YanluowangKaspersky Securelist·Apr 18, 10:00 UTC · Apr 18, 2022Ransomware57
RDP: a Double-Edged Sword for IT TeamsThe Hacker News·Feb 28, 14:23 UTC · Feb 28, 2025RansomwareCVE-2025-21309CVE-2025-2129760
The story of the year: ransomware in the headlinesKaspersky Securelist·Dec 7, 10:00 UTC · Dec 7, 2021Ransomware57
Targeted ransomware: it’s not just about encrypting your data!Kaspersky Securelist·Nov 11, 10:00 UTC · Nov 11, 2020Ransomware60
Kaspersky released a new decryptor for ContiSecurity Affairs·Mar 18, 21:52 UTC · Mar 18, 2023Ransomware57
New Ransom Payment Schemes Target Executives, TelemedicineKrebs on Security·Dec 8, 19:21 UTC · Dec 8, 2022Ransomware60
IT threat evolution Q2 2020. PC statisticsKaspersky Securelist·Sep 3, 10:30 UTC · Sep 3, 2020RansomwareCVE-2017-8570CVE-2017-11882CVE-2017-0199+4 CVEs60
Legion Cyberworks and Horizon3.ai join forces to improve security controls for organizationsHelp Net Security·Jan 10, 12:27 UTC · Jan 10, 2024Ransomware57
The Top 10 Attack Surface Exposures in 2026The Hacker News·Jun 17, 10:30 UTC · Jun 17, 2026Ransomware60
New BitLocker extortion activity: RDP, MSSQL, RMM AbuseKaspersky Securelist·Jul 21, 13:00 UTC · Jul 21, 2026Ransomware60
Ransom Cartel Ransomware: A Possible Connection With REvilPalo Alto Unit 42·Jun 5, 17:50 UTC · Jun 5, 2024Ransomware57
Microsoft Fixes 71 CVEs Including Actively Exploited ZeroInfosecurity Magazine·Dec 11, 10:15 UTC · Dec 11, 2024Ransomware in the wildCVE-2024-49138CVE-2022-24521CVE-2023-23376+3 CVEs160
The evolution of ransomware in 2019 .............................Security Affairs·May 27, 16:34 UTC · May 27, 2020Ransomware57
Transcription Service Leaked Medical RecordsKrebs on Security·Apr 23, 21:35 UTC · Apr 23, 2018Ransomware57
Velociraptor leveraged in ransomware attacksCisco Talos·Oct 9, 10:00 UTC · Oct 9, 2025RansomwareCVE-2025-626460
Experts saw 100k+ daily brute-force attacks on RDP during COVIDSecurity Affairs·Jun 29, 13:21 UTC · Jun 29, 2020Ransomware57
FBI and CISA published a new advisory on AvosLocker ransomwareSecurity Affairs·Oct 13, 10:55 UTC · Oct 13, 2023Ransomware57
India says allegedly leaked nuclear plant files pose no safety riskThe Record·Jul 20, 18:36 UTC · Jul 20, 2026Ransomware57
Product Walkthrough: How Datto BCDR Delivers Unstoppable Business ContinuityThe Hacker News·Mar 28, 10:15 UTC · Mar 28, 2025Ransomware60
Quarterly report: Incident Response trends in Summer 2020Cisco Talos·Jun 15, 14:55 UTC · Jun 15, 2020RansomwareCVE-2019-19781CVE-2019-1151060
Incident response statistics and cases at educational institutions in BrazilKaspersky Securelist·Aug 3, 13:00 UTC · Aug 3, 2026Ransomware57
BlueKeep RDP flaw: Nearly a million Internet-facing systems are vulnerableHelp Net Security·Nov 15, 08:03 UTC · Nov 15, 2023Ransomware in the wildCVE-2019-070860
Attacks on web applications spike in third quarter, new Talos IR data showsCisco Talos·Oct 24, 12:00 UTC · Oct 24, 2023Ransomware60