Windows CLFS and five exploits used by ransomware operators (Exploit #1 – CVE-2022Kaspersky Securelist·Dec 21, 10:28 UTC · Dec 21, 2023Ransomware in the wildCVE-2022-24521CVE-2023-23376CVE-2023-28252+2 CVEs60
More Hacking Groups Found Exploiting SMB Flaw Weeks Before WannaCryThe Hacker News·May 19, 15:00 UTC · May 19, 2017RansomwareCVE-2017-014360
Super-stealthy attackers used NSA exploit weeks before WannaCryCyberScoop·May 19, 21:43 UTC · May 19, 2017Ransomware in the wild60
Henry IV, Hotspur, Hal, and hallucinationsCisco Talos·Feb 26, 19:00 UTC · Feb 26, 2026Ransomware in the wildCVE-2026-2012760
What is the Diamond Model of Intrusion Analysis?Recorded Future·Oct 21, 00:00 UTC · Oct 21, 2025Ransomware60
Chaos RaaS Emerges After BlackSuit Takedown, Demanding $300K from U.S. VictimsThe Hacker News·Aug 12, 04:39 UTC · Aug 12, 2025Ransomware60
Dark market overview and predictions for 2025Kaspersky Securelist·Dec 16, 09:27 UTC · Dec 16, 2024Ransomware60
Akira ransomware continues to evolveCisco Talos·Oct 21, 16:50 UTC · Oct 21, 2024Ransomware in the wildCVE-2024-40766CVE-2020-3259CVE-2023-20263+5 CVEs60
Red Cross Hack Linked to Iranian Influence Operation?Krebs on Security·Feb 15, 00:00 UTC · Feb 15, 2022RansomwareCVE-2021-4053960
'Valak' gives crooks flexibility in multiCyberScoop·May 28, 11:49 UTC · May 28, 2020Ransomware in the wild60
Emotet remains the dark market leader for delivery-as-a-serviceHelp Net Security·Jan 16, 00:00 UTC · Jan 16, 2020Ransomware60
DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate PayoutsThe Hacker News·Jul 28, 05:25 UTC · Jul 28, 2026Ransomware60
Critical Flaw Turns Vect Ransomware into Data Destroying WiperInfosecurity Magazine·Apr 29, 10:45 UTC · Apr 29, 2026Ransomware60
Buggy Vect ransomware is effectively a data wiper, researchers findHelp Net Security·Apr 29, 00:00 UTC · Apr 29, 2026Ransomware60
Key MITRE ATT&CK techniques used by cyber attackersHelp Net Security·Apr 23, 13:45 UTC · Apr 23, 2026Ransomware260
ShinyHunters claim the hack of Rockstar Games breach and started leaking dataSecurity Affairs·Apr 14, 11:02 UTC · Apr 14, 2026Ransomware60
Latin America and the Caribbean Cybercrime LandscapeRecorded Future·Apr 1, 00:00 UTC · Apr 1, 2026Ransomware60
ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & MoreThe Hacker News·Mar 19, 14:25 UTC · Mar 19, 2026Ransomware in the wildCVE-2024-55591CVE-2025-71257CVE-2025-71258+4 CVEs60
Sprawling FBI, European operation takes down Leakbase cybercriminal forumThe Record·Mar 4, 16:28 UTC · Mar 4, 2026Ransomware60
The thin line between saving a company and funding a crimeCyberScoop·Jan 21, 15:23 UTC · Jan 21, 2026Ransomware60
New BYOVD loader behind DeadLock ransomware attackCisco Talos·Dec 9, 11:00 UTC · Dec 9, 2025RansomwareCVE-2024-5132460
Week in review: React, Node.js flaw patched, ransomware intrusion exposes espionage footholdHelp Net Security·Dec 7, 00:00 UTC · Dec 7, 2025RansomwareCVE-2025-48633CVE-2025-48572CVE-2025-5518260
Maryland man faces federal charges for crimes allegedly linked to 764CyberScoop·Nov 12, 16:37 UTC · Nov 12, 2025Ransomware in the wild60
⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach WidensThe Hacker News·Oct 27, 14:16 UTC · Oct 27, 2025Ransomware in the wildCVE-2025-59287CVE-2025-54957CVE-2025-6950+21 CVEs60
Shifting from reactive to proactive: Cyber resilience amid nationCyberScoop·Oct 24, 12:00 UTC · Oct 24, 2025Ransomware in the wild60
⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 BitThe Hacker News·Sep 22, 15:16 UTC · Sep 22, 2025Ransomware in the wildCVE-2025-10585CVE-2025-55241CVE-2025-10035+14 CVEs160
Email Security Is Stuck in the Antivirus Era: Why It Needs a Modern ApproachThe Hacker News·Jul 28, 11:25 UTC · Jul 28, 2025Ransomware260
Charting New Terrain: The Shift to Resilience and Proximity in Cyber RiskRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Ransomware60
Inside DragonForce, the Group Tied to M&S, CoInfosecurity Magazine·May 6, 13:25 UTC · May 6, 2025Ransomware60
EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and PhishingThe Hacker News·Mar 7, 05:32 UTC · Mar 7, 2025Ransomware60
Becoming Ransomware Ready: Why Continuous Validation Is Your Best DefenseThe Hacker News·Feb 26, 11:51 UTC · Feb 26, 2025Ransomware60
Inside Operation Destabilise: How a ransomware investigation linked Russian money laundering and streetThe Record·Dec 23, 00:44 UTC · Dec 23, 2024Ransomware60
CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHubThe Hacker News·Sep 11, 06:02 UTC · Sep 11, 2024RansomwareCVE-2017-0144CVE-2020-1472CVE-2021-42278+3 CVEs160
Global attacker median dwell time continues to fallHelp Net Security·Apr 24, 00:00 UTC · Apr 24, 2024Ransomware60
Product showcase: Specops Password AuditorHelp Net Security·Mar 18, 08:24 UTC · Mar 18, 2024Ransomware60
Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll AffiliatesKrebs on Security·Feb 20, 20:21 UTC · Feb 20, 2024Ransomware60