Magnitude exploit kitKaspersky Securelist·Jun 24, 10:00 UTC · Jun 24, 2020Ransomware in the wildCVE-2018-8174CVE-2018-8653CVE-2019-1367+3 CVEs60
Windows CLFS and five exploits used by ransomware operators (Exploit #1 – CVE-2022Kaspersky Securelist·Dec 21, 10:28 UTC · Dec 21, 2023Ransomware in the wildCVE-2022-24521CVE-2023-23376CVE-2023-28252+2 CVEs60
Windows CLFS and five exploits used by ransomware operators (Exploit #4 – CVE-2023Kaspersky Securelist·Dec 21, 10:30 UTC · Dec 21, 2023RansomwareCVE-2022-24521CVE-2023-23376CVE-2023-28252+3 CVEs60
Welcome Spelevo: New exploit kit full of old tricksCisco Talos·Jun 27, 19:10 UTC · Jun 27, 2019RansomwareCVE-2018-15982CVE-2018-817460
Windows CLFS and five exploits used by ransomware operators (Exploit #5 – CVE-2023Kaspersky Securelist·Dec 21, 10:30 UTC · Dec 21, 2023Ransomware in the wildCVE-2022-24521CVE-2023-23376CVE-2023-2825260
Running for Office: Russian APT Toolkits RevealedRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Ransomware in the wildCVE-2014-3897CVE-2013-3897260
A Dissection of the “EsteemAudit” Windows Remote Desktop ExploitPalo Alto Unit 42·May 31, 12:00 UTC · May 31, 2017RansomwareCVE-2017-907360
Windows CLFS and five exploits used by ransomware operators (Exploit #2Kaspersky Securelist·Dec 21, 10:29 UTC · Dec 21, 2023Ransomware in the wildCVE-2022-24521CVE-2023-23376CVE-2023-28252+2 CVEs60
2025 Cloud Threat Hunting and Defense LandscapeRecorded Future·Nov 6, 00:00 UTC · Nov 6, 2025Ransomware57
Patterns and Targets for Ransomware Exploitation of Vulnerabilities: 2017Recorded Future·Jun 26, 00:00 UTC · Jun 26, 2026RansomwareCVE-2021-34527CVE-2019-1978160
Nokoyawa ransomware attacks with Windows zeroKaspersky Securelist·Apr 11, 17:36 UTC · Apr 11, 2023RansomwareCVE-2023-28252CVE-2022-24521CVE-2022-37969+1 CVEs60
Analysis of the evolution of exploit kits in the threat landscapeSecurity Affairs·Jun 14, 07:06 UTC · Jun 14, 2018RansomwareCVE-2018-8174CVE-2016-0189CVE-2018-4878+1 CVEs60
March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC ZeroRecorded Future·Jun 3, 00:00 UTC · Jun 3, 2026Ransomware in the wildCVE-2017-7921CVE-2026-27483CVE-2026-27944+10 CVEs260
Windows CLFS and five exploits used by ransomware operatorsKaspersky Securelist·Dec 21, 09:53 UTC · Dec 21, 2023RansomwareCVE-2023-28252CVE-2022-24521CVE-2022-37969+1 CVEs60
Google: China dominates government exploitation of zeroSecurity Affairs·Mar 28, 12:16 UTC · Mar 28, 2024Ransomware in the wild60
React2Shell fallout spreads to sensitive targets as public exploits hit allCyberScoop·Dec 18, 16:12 UTC · Dec 18, 2025Ransomware in the wildCVE-2025-55182CVE-2025-55183CVE-2025-67779+1 CVEs60
Exploit Kits, Once a Favorite of Cybercriminals, Move To Private MarketplacesThe Record·Nov 17, 04:36 UTC · Nov 17, 2022Ransomware57
Storm-2603 spotted deploying ransomware on exploited SharePoint serversHelp Net Security·Aug 4, 12:44 UTC · Aug 4, 2025Ransomware in the wildCVE-2025-53770CVE-2025-49706CVE-2025-49704+2 CVEs60
Over 60% of Network Security Appliance Flaws Exploited as Zero DaysInfosecurity Magazine·May 21, 12:30 UTC · May 21, 2024Ransomware60
Adobe Flash Player flaws remain the most used by Exploit KitsSecurity Affairs·Dec 7, 07:01 UTC · Dec 7, 2016RansomwareCVE-2016-0189CVE-2016-1019CVE-2016-4117+5 CVEs60
Angler EK: More Obfuscation, Fake Extensions, and Other NonsenseCisco Talos·Jun 5, 05:05 UTC · Jun 5, 2015Ransomware57
April 2026 CVE LandscapeRecorded Future·Jun 3, 00:00 UTC · Jun 3, 2026Ransomware in the wildCVE-2026-33032CVE-2026-39987CVE-2009-0238+30 CVEs60
Attackers hit security device defects hard in 2024CyberScoop·Apr 24, 14:36 UTC · Apr 24, 2025RansomwareCVE-2024-3400CVE-2023-46805CVE-2024-21887+2 CVEs60
How did Clop get its hands on the MOVEit zero day?The Record·Aug 30, 12:50 UTC · Aug 30, 2023Ransomware60
Endpoint breach prevention by reducing attack surfacesHelp Net Security·Jan 17, 09:30 UTC · Jan 17, 2023Ransomware60
Experts warn of a surge in zeroSecurity Affairs·Apr 25, 08:09 UTC · Apr 25, 2022Ransomware in the wild160
IT threat evolution Q2 2021Kaspersky Securelist·Aug 12, 10:12 UTC · Aug 12, 2021RansomwareCVE-2018-0802CVE-2021-1732CVE-2021-28310+2 CVEs60
⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AIThe Hacker News·Jun 2, 03:39 UTC · Jun 2, 2026Ransomware in the wildCVE-2026-0257CVE-2026-8732CVE-2026-27771+31 CVEs60
Google says 90 zero-days exploited in 2025 as commercial vendor activity growsThe Record·Mar 5, 15:01 UTC · Mar 5, 2026Ransomware in the wildCVE-2025-21590CVE-2025-0282CVE-2025-61882+2 CVEs60
October 2025 CVE LandscapeRecorded Future·Dec 9, 00:00 UTC · Dec 9, 2025Ransomware in the wildCVE-2025-59287CVE-2025-61882CVE-2025-41244+29 CVEs60
UNRAVELING EternalBlue: inside the WannaCry’s enablerSecurity Affairs·Sep 1, 14:43 UTC · Sep 1, 2023Ransomware57
ProxyLogon Microsoft Exchange exploit is completely out of the bagSecurity Affairs·Mar 15, 12:56 UTC · Mar 15, 2021Ransomware in the wildCVE-2021-2685560
Zyxel Fixes 0day in Network Storage DevicesKrebs on Security·Feb 24, 18:06 UTC · Feb 24, 2020Ransomware in the wildCVE-2020-905460
From exploits to honeypots: How the security community is preparing for BlueKeep’s moment of truthCyberScoop·Jul 9, 19:01 UTC · Jul 9, 2019Ransomware in the wild60
Magnitude exploit kit now include also the CVE-2015Security Affairs·Dec 1, 08:47 UTC · Dec 1, 2018Ransomware in the wildCVE-2015-3113CVE-2015-03113CVE-2015-310560
Tracking Ransomware Exploit Kits With Threat IntelligenceRecorded Future·Jun 29, 00:00 UTC · Jun 29, 2026Ransomware57
Hackers Exploit Critical Langflow Bug in Just 20 HoursInfosecurity Magazine·Mar 20, 10:20 UTC · Mar 20, 2026Ransomware in the wildCVE-2026-33017160