Wing FTP Server flaw actively exploited shortly after technical details were made publicSecurity Affairs·Jul 13, 15:50 UTC · Jul 13, 2025Ransomware in the wildCVE-2025-4781260
China-Linked Hackers Exploit SAP and SQL Server Flaws in Attacks Across Asia and BrazilThe Hacker News·Jun 10, 16:26 UTC · Jun 10, 2025Ransomware in the wildCVE-2025-31324CVE-2017-9805CVE-2021-22205+6 CVEs60
August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
Zyxel addresses ZeroSecurity Affairs·Feb 25, 20:25 UTC · Feb 25, 2020Ransomware in the wildCVE-2020-905460
Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New ExploitsThe Hacker News·Sep 6, 07:46 UTC · Sep 6, 2023Ransomware in the wildCVE-2023-36844CVE-2023-36845CVE-2023-36846+3 CVEs60
Threat Brief: Office Documents Can Be Dangerous (But We’ll Continue to Use Them Anyway)Palo Alto Unit 42·Sep 21, 18:41 UTC · Sep 21, 2020Ransomware in the wildCVE-2018-4878CVE-2017-11882CVE-2018-0802+4 CVEs160
Storm-2603 spotted deploying ransomware on exploited SharePoint serversHelp Net Security·Aug 4, 12:44 UTC · Aug 4, 2025Ransomware in the wildCVE-2025-53770CVE-2025-49706CVE-2025-49704+2 CVEs60
⚡ Weekly Recap: Chrome 0-Day, IngressNightmare, Solar Bugs, DNS Tactics, and MoreThe Hacker News·Aug 19, 13:08 UTC · Aug 19, 2025Ransomware in the wildCVE-2025-2783CVE-2025-2857CVE-2025-1974+11 CVEs60
⚡ Weekly Recap: Chrome 0-Day, IngressNightmare, Solar Bugs, DNS Tactics, and MoreThe Hacker News·May 17, 13:56 UTC · May 17, 2025Ransomware in the wildCVE-2025-2783CVE-2025-2857CVE-2025-1974+11 CVEs60
A new alert system from CISA seems to be effective — now we just need companies to sign upCisco Talos·May 9, 18:00 UTC · May 9, 2024Ransomware in the wildCVE-2023-4960660
FreePBX Servers Targeted by ZeroThe Hacker News·Sep 12, 12:01 UTC · Sep 12, 2025Ransomware in the wildCVE-2025-5781960
Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware ExploitThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2023Ransomware in the wildCVE-2023-28252CVE-2022-24521CVE-2022-37969+6 CVEs60
Threat Source newsletter (March 19, 2020)Cisco Talos·Mar 19, 18:00 UTC · Mar 19, 2020Ransomware in the wildCVE-2020-1018960
March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC ZeroRecorded Future·Jun 3, 00:00 UTC · Jun 3, 2026Ransomware in the wildCVE-2017-7921CVE-2026-27483CVE-2026-27944+10 CVEs260
ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & MoreThe Hacker News·Mar 19, 14:25 UTC · Mar 19, 2026Ransomware in the wildCVE-2024-55591CVE-2025-71257CVE-2025-71258+4 CVEs60
⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AIThe Hacker News·Jun 2, 03:39 UTC · Jun 2, 2026Ransomware in the wildCVE-2026-0257CVE-2026-8732CVE-2026-27771+31 CVEs60
CISA Alerts on Active Exploitation of Flaws in Fortinet, Ivanti, and Nice ProductsThe Hacker News·Mar 28, 04:45 UTC · Mar 28, 2024Ransomware in the wildCVE-2023-48788CVE-2021-44529CVE-2019-7256+1 CVEs60
Researchers Uncover 46 Critical Flaws in Solar Power Systems From Sungrow, Growatt, and SMAThe Hacker News·Apr 1, 10:51 UTC · Apr 1, 2025Ransomware in the wild60
Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail ServerThe Hacker News·Feb 12, 05:15 UTC · Feb 12, 2026Ransomware in the wildCVE-2025-52691CVE-2026-23760CVE-2026-2442360
THN Weekly Roundup — 10 Most Important Stories You Shouldn't MissThe Hacker News·Jul 22, 18:40 UTC · Jul 22, 2017Ransomware in the wildCVE-2017-11421CVE-2017-7494CVE-2017-976560
CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware AttacksThe Hacker News·Aug 20, 07:24 UTC · Aug 20, 2024Ransomware in the wildCVE-2024-2389760
Security Affairs newsletter Round 430 by Pierluigi PaganiniSecurity Affairs·Aug 6, 08:03 UTC · Aug 6, 2023Ransomware in the wildCVE-2023-38750CVE-2023-38606CVE-2023-38408+1 CVEs60
Security Affairs newsletter Round 488 by Pierluigi PaganiniSecurity Affairs·Sep 8, 11:58 UTC · Sep 8, 2024Ransomware in the wildCVE-2024-32896CVE-2024-30078CVE-2024-3640160
Ransomware Hackers Using New Way to Bypass MS Exchange ProxyNotShell MitigationsThe Hacker News·Dec 22, 03:36 UTC · Dec 22, 2022Ransomware in the wildCVE-2022-41040CVE-2022-41080CVE-2022-4108260
Oracle EBS Under Fire as Cl0p Exploits CVE-2025-61882 in RealThe Hacker News·Oct 8, 04:30 UTC · Oct 8, 2025Ransomware in the wildCVE-2025-6188260
Week in review: AWS S3 data encrypted without ransomware, data of 15k Fortinet firewalls leakedHelp Net Security·Jan 19, 00:00 UTC · Jan 19, 2025Ransomware in the wildCVE-2024-55591CVE-2025-0282CVE-2024-734460
Microsoft Fixes 71 CVEs Including Actively Exploited ZeroInfosecurity Magazine·Dec 11, 10:15 UTC · Dec 11, 2024Ransomware in the wildCVE-2024-49138CVE-2022-24521CVE-2023-23376+3 CVEs160
Threat Source Newsletter (Jan. 13, 2022)Cisco Talos·Jan 13, 19:00 UTC · Jan 13, 2022Ransomware in the wildCVE-2022-21840CVE-2022-21841CVE-2022-21837+1 CVEs60
Attackers hit React defect as researchers quibble over proofCyberScoop·Dec 6, 17:14 UTC · Dec 6, 2025Ransomware in the wildCVE-2025-55182CVE-2025-6647860
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [13 January]The Hacker News·Jan 15, 00:00 UTC · Jan 15, 2025Ransomware in the wildCVE-2025-0282CVE-2024-52875CVE-2024-8474+15 CVEs60
Threat Source newsletter (Oct. 14, 2021)Cisco Talos·Oct 14, 18:00 UTC · Oct 14, 2021Ransomware in the wildCVE-2021-40461CVE-2021-38672CVE-2021-41733+1 CVEs60
⚡Top Cybersecurity News Stories This Week — Cybersecurity NewsletterThe Hacker News·Feb 17, 14:10 UTC · Feb 17, 2023Ransomware in the wildCVE-2023-2352960
Threat Source newsletter (Sept. 30, 2021)Cisco Talos·Sep 30, 18:00 UTC · Sep 30, 2021Ransomware in the wildCVE-2021-37973CVE-2021-2200560
Threat Source Newsletter (May 13, 2021)Cisco Talos·May 13, 18:00 UTC · May 13, 2021Ransomware in the wildCVE-2021-31166CVE-2021-146860
Critical Flaws Found in ConnectWise ScreenConnect SoftwareThe Hacker News·Feb 28, 12:55 UTC · Feb 28, 2024Ransomware in the wildCVE-2024-1708CVE-2024-170960
Threat Source newsletter for June 11, 2020Cisco Talos·Jun 11, 18:00 UTC · Jun 11, 2020Ransomware in the wild60
Cisco reveals 2 max-severity defects in firewall management softwareCyberScoop·Mar 5, 15:26 UTC · Mar 5, 2026Ransomware in the wildCVE-2026-20079CVE-2026-2013160
Five New Exploited Bugs Land in CISA's Catalog — Oracle and Microsoft Among TargetsThe Hacker News·Oct 21, 14:55 UTC · Oct 21, 2025Ransomware in the wildCVE-2025-61884CVE-2025-61882CVE-2025-33073+3 CVEs60
Threat Source newsletter (Jan. 28, 2021)Cisco Talos·Jan 28, 19:00 UTC · Jan 28, 2021Ransomware in the wild60
WARNING: Microsoft Exchange Under Attack With ProxyShell FlawsThe Hacker News·Aug 23, 13:28 UTC · Aug 23, 2021Ransomware in the wildCVE-2021-34473CVE-2021-34523CVE-2021-3120760