PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577)Help Net Security·Jun 13, 00:00 UTC · Jun 13, 2024Ransomware in the wildCVE-2024-4577CVE-2012-1823CVE-2024-357760
August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
Zyxel addresses ZeroSecurity Affairs·Feb 25, 20:25 UTC · Feb 25, 2020Ransomware in the wildCVE-2020-905460
Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands PreThe Hacker News·Jun 30, 08:03 UTC · Jun 30, 2026Ransomware in the wildCVE-2026-8037CVE-2026-33691CVE-2024-121260
Over 90,000 DInfosecurity Magazine·Apr 9, 10:05 UTC · Apr 9, 2024Ransomware in the wildCVE-2024-327360
October 2025 CVE LandscapeRecorded Future·Dec 9, 00:00 UTC · Dec 9, 2025Ransomware in the wildCVE-2025-59287CVE-2025-61882CVE-2025-41244+29 CVEs60
Microsoft Links Storm-1175 to GoAnywhere Exploit Deploying Medusa RansomwareThe Hacker News·Oct 10, 11:26 UTC · Oct 10, 2025Ransomware in the wildCVE-2025-1003560
Week in review: FireEye breach, vulnerable TCP/IP stacks, Kali Linux and the future of pentestingHelp Net Security·Dec 13, 00:00 UTC · Dec 13, 2020Ransomware in the wild160
Multiple Flaws in CyberPower and Dataprobe Products Put Data Centers at RiskThe Hacker News·Aug 15, 00:00 UTC · Aug 15, 2023Ransomware in the wildCVE-2023-3259CVE-2023-3267CVE-2023-3260+6 CVEs60
Leaked Black Basta Ransomware Chat Logs Reveal Inner Workings and Internal ConflictsThe Hacker News·Feb 27, 05:08 UTC · Feb 27, 2025Ransomware in the wildCVE-2024-50623CVE-2009-3960CVE-2010-2861+8 CVEs60
Several Flaws Found in CyberPower and Dataprobe ProductsInfosecurity Magazine·Aug 14, 16:00 UTC · Aug 14, 2023Ransomware in the wildCVE-2023-3259CVE-2023-3260CVE-2023-3261+6 CVEs160
Go Beyond the Headlines for Deeper Dives into the Cybercriminal UndergroundThe Hacker News·Jul 30, 09:59 UTC · Jul 30, 2024Ransomware in the wildCVE-2023-20877CVE-2023-2088760
CISA Alerts on Active Exploitation of Flaws in Fortinet, Ivanti, and Nice ProductsThe Hacker News·Mar 28, 04:45 UTC · Mar 28, 2024Ransomware in the wildCVE-2023-48788CVE-2021-44529CVE-2019-7256+1 CVEs60
⚡ Weekly Recap: BadCam Attack, WinRAR 0-Day, EDR Killer, NVIDIA Flaws, Ransomware Attacks & MoreThe Hacker News·Aug 12, 04:40 UTC · Aug 12, 2025Ransomware in the wildCVE-2025-54948CVE-2025-54987CVE-2025-8088+30 CVEs60
April 2026 CVE LandscapeRecorded Future·Jun 3, 00:00 UTC · Jun 3, 2026Ransomware in the wildCVE-2026-33032CVE-2026-39987CVE-2009-0238+30 CVEs160
What to do with that fancy new internet-connected device you got as a holiday giftCisco Talos·Jan 18, 19:00 UTC · Jan 18, 2024Ransomware in the wildCVE-2023-46805CVE-2024-2188760
Warning: VMware vCenter and Kemp LoadMaster Flaws Under Active ExploitationThe Hacker News·Nov 21, 03:53 UTC · Nov 21, 2024Ransomware in the wildCVE-2024-1212CVE-2024-38812CVE-2024-38813+1 CVEs60
Fortinet SIEM issue coincides with spike in bruteCyberScoop·Aug 13, 19:21 UTC · Aug 13, 2025Ransomware in the wildCVE-2025-25256CVE-2023-48788CVE-2024-4757560
Threat Source newsletter for June 11, 2020Cisco Talos·Jun 11, 18:00 UTC · Jun 11, 2020Ransomware in the wild60
Microsoft: Critical GoAnywhere Bug Exploited in Medusa Ransomware CampInfosecurity Magazine·Oct 7, 09:45 UTC · Oct 7, 2025Ransomware in the wildCVE-2025-10035CVE-2024-1709CVE-2023-4878860
U.S. Charges Chinese Hacker for Exploiting ZeroThe Hacker News·Jan 7, 09:22 UTC · Jan 7, 2025Ransomware in the wildCVE-2020-12271CVE-2022-1040CVE-2022-129260
March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC ZeroRecorded Future·Jun 3, 00:00 UTC · Jun 3, 2026Ransomware in the wildCVE-2017-7921CVE-2026-27483CVE-2026-27944+10 CVEs260
THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 11The Hacker News·Nov 18, 11:36 UTC · Nov 18, 2024Ransomware in the wildCVE-2024-5910CVE-2024-9463CVE-2024-9465+29 CVEs60
July 2026 CVE LandscapeRecorded Future·Aug 7, 00:00 UTC · Aug 7, 2026Ransomware in the wildCVE-2025-3248CVE-2008-4128CVE-2017-17215+78 CVEs160
June 2026 CVE LandscapeRecorded Future·Jul 17, 00:00 UTC · Jul 17, 2026Ransomware in the wildCVE-2026-35616CVE-2026-25939CVE-2020-17103+53 CVEs60
SonicWall customers under threat as attackers exploit 2 zeroCyberScoop·Jul 15, 18:52 UTC · Jul 15, 2026Ransomware in the wildCVE-2026-15409CVE-2026-1541060
ThreatsDay Bulletin: New RCEs, Darknet Busts, Kernel Bugs & 25+ More StoriesThe Hacker News·Jan 30, 08:37 UTC · Jan 30, 2026Ransomware in the wildCVE-2025-59090CVE-2025-5910960
Researchers raise alarm over maximum-severity defect in GoAnywhere fileCyberScoop·Sep 19, 20:51 UTC · Sep 19, 2025Ransomware in the wildCVE-2025-10035CVE-2023-0669160
Critical SAP S/4HANA flaw CVE-2025Security Affairs·Sep 5, 20:09 UTC · Sep 5, 2025Ransomware in the wildCVE-2025-4295760
AI gives ransomware gangs a deadly upgradeHelp Net Security·Aug 22, 00:00 UTC · Aug 22, 2025Ransomware in the wildCVE-2024-50623CVE-2024-5595660
14 New DrayTek routers' flaws impacts over 700,000 devices in 168 countriesSecurity Affairs·Oct 2, 18:11 UTC · Oct 2, 2024Ransomware in the wildCVE-2024-41592CVE-2024-4158560
Security Affairs newsletter Round 488 by Pierluigi PaganiniSecurity Affairs·Sep 8, 11:58 UTC · Sep 8, 2024Ransomware in the wildCVE-2024-32896CVE-2024-30078CVE-2024-3640160
Security Affairs newsletter Round 437 by Pierluigi PaganiniSecurity Affairs·Sep 17, 08:08 UTC · Sep 17, 2023Ransomware in the wild60
Week in review: Microsoft confirms DDoS attacks on M365 and Azure Portal, Infosecurity Europe 2023Help Net Security·Jun 25, 00:00 UTC · Jun 25, 2023Ransomware in the wildCVE-2023-32435CVE-2023-32434CVE-2023-32439+3 CVEs60
Fortra Sheds Light on GoAnywhere MFT ZeroThe Hacker News·Apr 21, 04:57 UTC · Apr 21, 2023Ransomware in the wildCVE-2023-066960
Security Affairs newsletter Round 91Security Affairs·Dec 18, 15:09 UTC · Dec 18, 2016Ransomware in the wild60
Wing FTP Server flaw actively exploited shortly after technical details were made publicSecurity Affairs·Jul 13, 15:50 UTC · Jul 13, 2025Ransomware in the wildCVE-2025-4781260
Hackers Exploited Popular BillQuick Billing Software to Deploy RansomwareThe Hacker News·Oct 26, 06:54 UTC · Oct 26, 2021Ransomware in the wildCVE-2021-4225860
ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-YearThe Hacker News·Apr 17, 14:47 UTC · Apr 17, 2026Ransomware in the wildCVE-2026-33825CVE-2009-0238160
Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p RansomwareThe Hacker News·Apr 29, 04:05 UTC · Apr 29, 2023Ransomware in the wildCVE-2023-27351CVE-2023-27532CVE-2023-138960