Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD WorkflowsThe Hacker News·May 26, 11:56 UTC · May 26, 2026Ransomware57
Twelve: from initial compromise to ransomware and wipersKaspersky Securelist·Sep 20, 13:33 UTC · Sep 20, 2024RansomwareCVE-2021-21972CVE-2021-2200560
Bucbi Ransomware Is Back With a Ukrainian MakeoverPalo Alto Unit 42·Jan 28, 21:59 UTC · Jan 28, 2022Ransomware57
Attackers are bypassing MFA on SonicWall VPNs because something was wrong with previous fixSecurity Affairs·May 21, 14:29 UTC · May 21, 2026Ransomware in the wildCVE-2024-1280260
OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain IncidentThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026RansomwareCVE-2026-3363460
Everyday tools, extraordinary crimes: the ransomware exfiltration playbookCisco Talos·Mar 19, 10:00 UTC · Mar 19, 2026Ransomware57
A Microsoft 365 feature can ransom files on SharePoint and OneDriveCouldSecurity Affairs·Jun 17, 06:34 UTC · Jun 17, 2022Ransomware157
TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS UpdatesThe Hacker News·May 15, 00:00 UTC · May 15, 2026Ransomware57
Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 AttackThe Hacker News·Apr 27, 14:19 UTC · Apr 27, 2026Ransomware57
Product showcase: Cross-platform and third-party endpoint patching with Action1Help Net Security·Mar 24, 00:00 UTC · Mar 24, 2026Ransomware in the wild60
CL0P-Linked Hackers Breach Dozens of Organizations Through Oracle Software FlawThe Hacker News·Oct 10, 06:41 UTC · Oct 10, 2025Ransomware in the wildCVE-2025-61882160
⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & MoreThe Hacker News·Oct 6, 11:28 UTC · Oct 6, 2025RansomwareCVE-2025-20362CVE-2025-20333CVE-2025-20363+15 CVEs60
Ransomware Actor Deletes Data and Backups PostInfosecurity Magazine·Aug 28, 09:05 UTC · Aug 28, 2025Ransomware60
Majority of Compromises Caused by Stolen Credentials, No MFAInfosecurity Magazine·Jun 4, 09:00 UTC · Jun 4, 2025Ransomware in the wildCVE-2024-5559160
Hunted Labs Entercept combats software supply chain attacksHelp Net Security·May 12, 00:00 UTC · May 12, 2025Ransomware60
THN Recap: Top Cybersecurity Threats, Tools, and Practices (Oct 28The Hacker News·Nov 5, 03:08 UTC · Nov 5, 2024RansomwareCVE-2024-50550CVE-2024-7474CVE-2024-7475+9 CVEs60
Head Mare hacktivists: attacks on companies in Russia and BelarusKaspersky Securelist·Sep 2, 10:00 UTC · Sep 2, 2024RansomwareCVE-2023-3883160
Security Affairs newsletter Round 486 by Pierluigi PaganiniSecurity Affairs·Aug 25, 07:19 UTC · Aug 25, 2024Ransomware in the wild60
CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware AttacksThe Hacker News·Aug 20, 07:24 UTC · Aug 20, 2024Ransomware in the wildCVE-2024-2389760
HardBit ransomware version 4.0 supports new obfuscation techniquesSecurity Affairs·Jul 15, 11:14 UTC · Jul 15, 2024Ransomware57
20 Essential Open-Source Cybersecurity Tools That Save You TimeHelp Net Security·Mar 25, 00:00 UTC · Mar 25, 2024Ransomware45
New Redis miner Migo uses novel system weakening techniquesSecurity Affairs·Feb 21, 14:55 UTC · Feb 21, 2024Ransomware57
Security firm warns of ransomware attacks targeting Microsoft cloud \'versioning\' featureThe Record·Jan 13, 00:00 UTC · Jan 13, 2023Ransomware57
Hammerspace announces metadata driven workflow enhancements to simplify access to global dataHelp Net Security·Oct 7, 00:00 UTC · Oct 7, 2022Ransomware60
Week in review: MS Exchange zero-days exploited, AD attack paths, developing secure APIsHelp Net Security·Oct 2, 00:00 UTC · Oct 2, 2022Ransomware in the wildCVE-2022-41040CVE-2022-41082CVE-2022-3236160
Uptycs releases new CDR functionality to help organizations detect malicious behaviorsHelp Net Security·Jul 28, 00:00 UTC · Jul 28, 2022Ransomware60
A Microsoft Office 365 Feature Could Help Ransomware Hackers Hold Cloud Files HostageThe Hacker News·Jun 21, 06:18 UTC · Jun 21, 2022Ransomware157
Threat Source newsletter (June 2, 2022) — An RSA Conference primerCisco Talos·Jun 2, 18:00 UTC · Jun 2, 2022RansomwareCVE-2022-3019060
Wormable bash DarkRadiation Ransomware targets Linux distrosSecurity Affairs·Jun 22, 20:59 UTC · Jun 22, 2021Ransomware60
Threat Source newsletter (March 26, 2020)Cisco Talos·Mar 26, 18:00 UTC · Mar 26, 2020RansomwareCVE-2020-326660