Reverse RDP Attack - Rogue RDP Server can be used to hack RDP clientsSecurity Affairs·Feb 6, 08:40 UTC · Feb 6, 2019Ransomware60
Rapid7 warns of RDP exposure for millions of endpointsSecurity Affairs·Aug 14, 21:54 UTC · Aug 14, 2017RansomwareCVE-2017-017660
Quarterly Report: Incident Response Trends in Q1 2023Cisco Talos·Apr 26, 12:00 UTC · Apr 26, 2023Ransomware57
Quarterly Report: Incident Response trends from Spring 2021Cisco Talos·Jun 10, 12:00 UTC · Jun 10, 2021RansomwareCVE-2021-26855CVE-2021-26857CVE-2021-26858+4 CVEs60
Attacks on web applications spike in third quarter, new Talos IR data showsCisco Talos·Oct 24, 12:00 UTC · Oct 24, 2023Ransomware60
Quarterly Report: Incident Response Trends in Q4 2022Cisco Talos·Jan 26, 09:00 UTC · Jan 26, 2023Ransomware60
BlackCat Ransomware affiliates target unpatched Microsoft Exchange serversSecurity Affairs·Jun 16, 21:53 UTC · Jun 16, 2022Ransomware57
Access to airport's security system sold on dark webHelp Net Security·Jul 11, 00:00 UTC · Jul 11, 2018Ransomware60
Quarterly Report: Incident Response Trends in Q3 2022Cisco Talos·Oct 25, 12:00 UTC · Oct 25, 2022RansomwareCVE-2020-147260
Quarterly Report: Incident Response trends from Q3 2021Cisco Talos·Oct 28, 12:00 UTC · Oct 28, 2021RansomwareCVE-2021-3011660
Quarterly Report: Incident Response Trends in Q2 2022Cisco Talos·Jul 26, 14:03 UTC · Jul 26, 2022RansomwareCVE-2021-44228CVE-2021-4504660
Scattered Spider Now Affiliated with RansomHub Following BlackCat ExitInfosecurity Magazine·Jun 12, 15:30 UTC · Jun 12, 2024Ransomware57
Quarterly Report: Incident Response trends in Q1 2022Cisco Talos·Apr 26, 13:11 UTC · Apr 26, 2022Ransomware in the wildCVE-2021-44228CVE-2021-45046CVE-2021-22204+1 CVEs60
LockBit 2.0: How This RaaS Operates and How to Protect Against ItPalo Alto Unit 42·Jun 5, 20:38 UTC · Jun 5, 2024Ransomware57
Criminals Exploit Pandemic with BruteInfosecurity Magazine·Jun 29, 20:33 UTC · Jun 29, 2020Ransomware57
Quarterly Report: Incident Response trends in Summer 2020Cisco Talos·Sep 1, 15:00 UTC · Sep 1, 2020RansomwareCVE-2019-1893560
Incident Response trends Q2 2023: Data theft extortion rises, while healthcare is still mostCisco Talos·Jul 26, 12:00 UTC · Jul 26, 2023Ransomware in the wildCVE-2023-0669CVE-2021-27101CVE-2021-27102+3 CVEs60
FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware AttacksThe Hacker News·Feb 29, 03:28 UTC · Feb 29, 2024Ransomware in the wild60
Threat Roundup for December 13 to December 20Cisco Talos·Dec 20, 18:07 UTC · Dec 20, 2019Ransomware57
How offense and defense came together to plug a hole in a popular Microsoft programCyberScoop·Aug 2, 19:48 UTC · Aug 2, 2019Ransomware in the wild60
Lighting the Exfiltration Infrastructure of a LockBit AffiliateSecurity Affairs·Oct 3, 09:01 UTC · Oct 3, 2023Ransomware57
RDP: a Double-Edged Sword for IT TeamsThe Hacker News·Feb 28, 14:23 UTC · Feb 28, 2025RansomwareCVE-2025-21309CVE-2025-2129760
Most interesting IR cases in 2023: insider threats and moreKaspersky Securelist·Sep 3, 11:01 UTC · Sep 3, 2024Ransomware60
New Ransom Payment Schemes Target Executives, TelemedicineKrebs on Security·Dec 8, 19:21 UTC · Dec 8, 2022Ransomware60
Surge in unique clients reporting brute-force attack attemptsHelp Net Security·Jul 1, 00:00 UTC · Jul 1, 2020Ransomware57
A Dissection of the “EsteemAudit” Windows Remote Desktop ExploitPalo Alto Unit 42·May 31, 12:00 UTC · May 31, 2017RansomwareCVE-2017-907360
FBI warns of PYSA Ransomware attacks against Education Institutions in US and UKSecurity Affairs·Mar 17, 12:01 UTC · Mar 17, 2021Ransomware60
Spirals ransomware locks down victim systems in under 24 hoursHelp Net Security·Jul 17, 00:00 UTC · Jul 17, 2026Ransomware57
Iranian APT UNC1860 Linked to MOIS Facilitates Cyber Intrusions in Middle EastThe Hacker News·Sep 20, 12:44 UTC · Sep 20, 2024RansomwareCVE-2019-060460
Microsoft Fixes 71 CVEs Including Actively Exploited ZeroInfosecurity Magazine·Dec 11, 10:15 UTC · Dec 11, 2024Ransomware in the wildCVE-2024-49138CVE-2022-24521CVE-2023-23376+3 CVEs160
⚡ THN Weekly Recap: New Attacks, Old Tricks, Bigger ImpactThe Hacker News·May 6, 07:05 UTC · May 6, 2025RansomwareCVE-2025-25015CVE-2025-22224CVE-2025-22225+18 CVEs60
Product Walkthrough: How Datto BCDR Delivers Unstoppable Business ContinuityThe Hacker News·Mar 28, 10:15 UTC · Mar 28, 2025Ransomware60
Rare Werewolf APT Uses Legitimate Software in Attacks on Hundreds of Russian EnterprisesThe Hacker News·Jun 25, 13:37 UTC · Jun 25, 2025Ransomware57
Clop: Behind MOVEit Lies a Loud, Adaptable and Persistent Threat GroupInfosecurity Magazine·Jul 11, 17:15 UTC · Jul 11, 2023RansomwareCVE-2023-3436260
Ransom Cartel Ransomware: A Possible Connection With REvilPalo Alto Unit 42·Jun 5, 17:50 UTC · Jun 5, 2024Ransomware57
Threat Source newsletter (Sept. 16, 2021)Cisco Talos·Sep 16, 18:00 UTC · Sep 16, 2021Ransomware in the wildCVE-2021-40444CVE-2021-36965CVE-2021-2643560
Payroll Provider Gives Extortionists a PaydayKrebs on Security·Feb 26, 18:56 UTC · Feb 26, 2019Ransomware60