Search: “dfir”

50 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 50 Vulnerability 28 Malware 18 Data breach 17 Industry 17 Exploit / PoC 14 Threat actor 11 Policy & legal 8 Phishing & fraud 2 AI safety & security 2 Research 1 Advisory 1 AI policy 1

SeverityAll critical 70 high 53 medium 21 low 17 info 9

Palo Alto Networks Unit 42 expands its DFIR service globally

Help Net SecurityApr 25, 00:00 UTC · Apr 25, 2023Ransomware

60

Hackers Turn Velociraptor DFIR Tool Into Weapon in LockBit Ransomware Attacks

The Hacker NewsOct 11, 13:04 UTC · Oct 11, 2025Ransomware CVE-2025-6264

60

The importance of ramping up digital forensics and incident response tech investments

Help Net SecurityMar 24, 00:00 UTC · Mar 24, 2022Ransomware

57

Group-IB: ransomware empire prospers in pandemic

Security AffairsMar 4, 11:52 UTC · Mar 4, 2021Ransomware in the wild

60

Closing security gaps in multi-cloud and SaaS environments

Help Net SecurityMay 20, 00:00 UTC · May 20, 2025Ransomware

60

IR Trends Q3 2025: ToolShell attacks dominate, highlighting criticality of segmentation and rapid response

Cisco TalosOct 23, 10:00 UTC · Oct 23, 2025Ransomware in the wildCVE-2025-53770 CVE-2025-53771 CVE-2025-49704+1 CVEs1

60

QakBot Big Game Hunting continues: the operators drop ProLock ransomware for Egregor

Security AffairsNov 20, 11:51 UTC · Nov 20, 2020Ransomware

57

⚡ Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & More

The Hacker NewsOct 6, 11:38 UTC · Oct 6, 2025Ransomware CVE-2025-61882 CVE-2025-27915 CVE-2025-4008+16 CVEs

60

AmCache artifact: forensic value and a tool for data extraction

Kaspersky SecurelistOct 1, 10:00 UTC · Oct 1, 2025Ransomware

57

SonicWall Investigating Potential SSL VPN Zero

The Hacker NewsAug 7, 05:27 UTC · Aug 7, 2025Ransomware in the wild

60

Interlock ransomware group deploys new PHP

Security AffairsJul 14, 17:41 UTC · Jul 14, 2025Ransomware

57

Interlock Ransomware Unleashes New RAT in Widespread Campaign

Infosecurity MagazineJul 14, 11:15 UTC · Jul 14, 2025Ransomware

57

BlackCat Ransomware Group Reports Victim to SEC

Infosecurity MagazineNov 16, 10:10 UTC · Nov 16, 2023Ransomware

57

SecurityScorecard provides a combination of services and platform to help CISOs manage cybersecurity risks

Help Net SecurityAug 10, 00:00 UTC · Aug 10, 2022Ransomware

57

Ransomware still winning: Average ransom demand jumped by 45%

Help Net SecurityMay 23, 00:00 UTC · May 23, 2022Ransomware

60

QakBot operators abandon ProLock for Egregor ransomware

Help Net SecurityNov 23, 00:00 UTC · Nov 23, 2020Ransomware

57

Cybercriminal greeners from Iran attack companies for financial gain

Security AffairsAug 24, 14:29 UTC · Aug 24, 2020Ransomware CVE-2017-0213

60

Incident response statistics and cases at educational institutions in Brazil

Kaspersky SecurelistAug 3, 13:00 UTC · Aug 3, 2026Ransomware

57

FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2026Ransomware CVE-2025-59718 CVE-2025-59719 CVE-2026-24858

60

ThreatsDay Bulletin: Kali Linux + Claude, Chrome Crash Traps, WinRAR Flaws, LockBit & 15+ Stories

The Hacker NewsFeb 27, 07:41 UTC · Feb 27, 2026Ransomware CVE-2023-46604

60

Cybersecurity jobs available right now: April 23, 2025

Help Net SecurityJan 30, 10:27 UTC · Jan 30, 2026Ransomware

57

New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD Attack

The Hacker NewsJan 24, 08:57 UTC · Jan 24, 2026Ransomware CVE-2019-11580

60

Matrix Push C2 Uses Browser Notifications for Fileless, Cross

The Hacker NewsDec 9, 08:03 UTC · Dec 9, 2025Ransomware CVE-2025-59287

60

Why don’t we sit around this computer console and have a sing

Cisco TalosOct 9, 18:00 UTC · Oct 9, 2025Ransomware

57

Velociraptor leveraged in ransomware attacks

Cisco TalosOct 9, 10:00 UTC · Oct 9, 2025Ransomware CVE-2025-62641

60

Bidirectional communication via polyrhythms and shuffles: Without Jon the beat must go on

Cisco TalosNov 21, 19:02 UTC · Nov 21, 2024Ransomware

60

What I’ve learned in my first 7

Cisco TalosOct 17, 18:00 UTC · Oct 17, 2024Ransomware in the wildCVE-2024-43047

60

Cybersecurity jobs available right now: March 27, 2024

Help Net SecurityOct 9, 06:24 UTC · Oct 9, 2024Ransomware

60

CISA is warning us (again) about the threat to critical infrastructure networks

Cisco TalosOct 3, 18:00 UTC · Oct 3, 2024Ransomware

60

Are hardware supply chain attacks “cyber attacks?”

Cisco TalosSep 26, 18:01 UTC · Sep 26, 2024Ransomware

60

Talk of election security is good, but we still need more money to solve the problem

Cisco TalosSep 19, 18:00 UTC · Sep 19, 2024Ransomware CVE-2024-38257

60

#RSAC: Experts Highlight Novel Cyber Threats and Tactics

Infosecurity MagazineMay 10, 12:10 UTC · May 10, 2024Ransomware

57

Product showcase: Is Crystal Eye XDR the most comprehensive security platform on the market?

Help Net SecurityMar 15, 11:29 UTC · Mar 15, 2024Ransomware

57

Hacked WordPress Sites Abusing Visitors' Browsers for Distributed Brute

The Hacker NewsMar 7, 13:45 UTC · Mar 7, 2024Ransomware CVE-2021-4436

60

BianLian, White Rabbit, and Mario Ransomware Gangs Spotted in a Joint Campaign

Security AffairsDec 15, 09:23 UTC · Dec 15, 2023Ransomware

60

Extended Threat Intelligence: A new approach to old school threat intelligence

Help Net SecurityNov 14, 07:52 UTC · Nov 14, 2023Ransomware

60

#RSAC: Organizations Warned About the Latest Attack Techniques

Infosecurity MagazineApr 27, 21:40 UTC · Apr 27, 2023Ransomware

57

Medical debt collection firm says ransomware attack exposed info on 650+ healthcare orgs

The RecordJan 20, 00:00 UTC · Jan 20, 2023Ransomware

57

Threats to corporations: predictions for the year 2023

Kaspersky SecurelistJan 18, 08:00 UTC · Jan 18, 2023Ransomware

60

FBI: Conti ransomware gang attacked more than 400 orgs, including 911 centers

The RecordJan 11, 00:00 UTC · Jan 11, 2023Ransomware

57