Magnitude exploit kitKaspersky Securelist·Jun 24, 10:00 UTC · Jun 24, 2020Ransomware in the wildCVE-2018-8174CVE-2018-8653CVE-2019-1367+3 CVEs60
Windows CLFS and five exploits used by ransomware operators (Exploit #1 – CVE-2022Kaspersky Securelist·Dec 21, 10:28 UTC · Dec 21, 2023Ransomware in the wildCVE-2022-24521CVE-2023-23376CVE-2023-28252+2 CVEs60
Windows CLFS and five exploits used by ransomware operators (Exploit #4 – CVE-2023Kaspersky Securelist·Dec 21, 10:30 UTC · Dec 21, 2023RansomwareCVE-2022-24521CVE-2023-23376CVE-2023-28252+3 CVEs60
Welcome Spelevo: New exploit kit full of old tricksCisco Talos·Jun 27, 19:10 UTC · Jun 27, 2019RansomwareCVE-2018-15982CVE-2018-817460
Windows CLFS and five exploits used by ransomware operators (Exploit #5 – CVE-2023Kaspersky Securelist·Dec 21, 10:30 UTC · Dec 21, 2023Ransomware in the wildCVE-2022-24521CVE-2023-23376CVE-2023-2825260
Windows CLFS and five exploits used by ransomware operators (Exploit #2Kaspersky Securelist·Dec 21, 10:29 UTC · Dec 21, 2023Ransomware in the wildCVE-2022-24521CVE-2023-23376CVE-2023-28252+2 CVEs60
Patterns and Targets for Ransomware Exploitation of Vulnerabilities: 2017Recorded Future·Jun 26, 00:00 UTC · Jun 26, 2026RansomwareCVE-2021-34527CVE-2019-1978160
Nokoyawa ransomware attacks with Windows zeroKaspersky Securelist·Apr 11, 17:36 UTC · Apr 11, 2023RansomwareCVE-2023-28252CVE-2022-24521CVE-2022-37969+1 CVEs60
Analysis of the evolution of exploit kits in the threat landscapeSecurity Affairs·Jun 14, 07:06 UTC · Jun 14, 2018RansomwareCVE-2018-8174CVE-2016-0189CVE-2018-4878+1 CVEs60
March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC ZeroRecorded Future·Jun 3, 00:00 UTC · Jun 3, 2026Ransomware in the wildCVE-2017-7921CVE-2026-27483CVE-2026-27944+10 CVEs260
Windows CLFS and five exploits used by ransomware operatorsKaspersky Securelist·Dec 21, 09:53 UTC · Dec 21, 2023RansomwareCVE-2023-28252CVE-2022-24521CVE-2022-37969+1 CVEs60
Google: China dominates government exploitation of zeroSecurity Affairs·Mar 28, 12:16 UTC · Mar 28, 2024Ransomware in the wild60
React2Shell fallout spreads to sensitive targets as public exploits hit allCyberScoop·Dec 18, 16:12 UTC · Dec 18, 2025Ransomware in the wildCVE-2025-55182CVE-2025-55183CVE-2025-67779+1 CVEs60
Storm-2603 spotted deploying ransomware on exploited SharePoint serversHelp Net Security·Aug 4, 12:44 UTC · Aug 4, 2025Ransomware in the wildCVE-2025-53770CVE-2025-49706CVE-2025-49704+2 CVEs60
Over 60% of Network Security Appliance Flaws Exploited as Zero DaysInfosecurity Magazine·May 21, 12:30 UTC · May 21, 2024Ransomware60
Adobe Flash Player flaws remain the most used by Exploit KitsSecurity Affairs·Dec 7, 07:01 UTC · Dec 7, 2016RansomwareCVE-2016-0189CVE-2016-1019CVE-2016-4117+5 CVEs60
April 2026 CVE LandscapeRecorded Future·Jun 3, 00:00 UTC · Jun 3, 2026Ransomware in the wildCVE-2026-33032CVE-2026-39987CVE-2009-0238+30 CVEs60
Attackers hit security device defects hard in 2024CyberScoop·Apr 24, 14:36 UTC · Apr 24, 2025RansomwareCVE-2024-3400CVE-2023-46805CVE-2024-21887+2 CVEs60
How did Clop get its hands on the MOVEit zero day?The Record·Aug 30, 12:50 UTC · Aug 30, 2023Ransomware60
Endpoint breach prevention by reducing attack surfacesHelp Net Security·Jan 17, 09:30 UTC · Jan 17, 2023Ransomware60
Experts warn of a surge in zeroSecurity Affairs·Apr 25, 08:09 UTC · Apr 25, 2022Ransomware in the wild160
IT threat evolution Q2 2021Kaspersky Securelist·Aug 12, 10:12 UTC · Aug 12, 2021RansomwareCVE-2018-0802CVE-2021-1732CVE-2021-28310+2 CVEs60
⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AIThe Hacker News·Jun 2, 03:39 UTC · Jun 2, 2026Ransomware in the wildCVE-2026-0257CVE-2026-8732CVE-2026-27771+31 CVEs60
Google says 90 zero-days exploited in 2025 as commercial vendor activity growsThe Record·Mar 5, 15:01 UTC · Mar 5, 2026Ransomware in the wildCVE-2025-21590CVE-2025-0282CVE-2025-61882+2 CVEs60
October 2025 CVE LandscapeRecorded Future·Dec 9, 00:00 UTC · Dec 9, 2025Ransomware in the wildCVE-2025-59287CVE-2025-61882CVE-2025-41244+29 CVEs60
ProxyLogon Microsoft Exchange exploit is completely out of the bagSecurity Affairs·Mar 15, 12:56 UTC · Mar 15, 2021Ransomware in the wildCVE-2021-2685560
Zyxel Fixes 0day in Network Storage DevicesKrebs on Security·Feb 24, 18:06 UTC · Feb 24, 2020Ransomware in the wildCVE-2020-905460
From exploits to honeypots: How the security community is preparing for BlueKeep’s moment of truthCyberScoop·Jul 9, 19:01 UTC · Jul 9, 2019Ransomware in the wild60
Magnitude exploit kit now include also the CVE-2015Security Affairs·Dec 1, 08:47 UTC · Dec 1, 2018Ransomware in the wildCVE-2015-3113CVE-2015-03113CVE-2015-310560
Hackers Exploit Critical Langflow Bug in Just 20 HoursInfosecurity Magazine·Mar 20, 10:20 UTC · Mar 20, 2026Ransomware in the wildCVE-2026-33017160
U.S. CISA adds Google Chromium CSS, Microsoft Windows, TeamT5 ThreatSonar Anti-Ransomware, and Zimbra flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Feb 18, 10:55 UTC · Feb 18, 2026Ransomware in the wildCVE-2008-0015CVE-2020-7796CVE-2024-7694+1 CVEs60
Cyber experts and officials raise alarms about exploits against Citrix and Apache productsThe Record·Nov 3, 18:13 UTC · Nov 3, 2023Ransomware in the wildCVE-2023-46604CVE-2023-496660
Angler Exploit Kit is able to bypass Microsoft EMET defenseSecurity Affairs·Apr 14, 16:31 UTC · Apr 14, 2018Ransomware60
⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and MoreThe Hacker News·May 19, 04:33 UTC · May 19, 2026Ransomware in the wildCVE-2026-42897CVE-2026-20182CVE-2026-2012760
Oracle EBS Under Fire as Cl0p Exploits CVE-2025-61882 in RealThe Hacker News·Oct 8, 04:30 UTC · Oct 8, 2025Ransomware in the wildCVE-2025-6188260
Oracle patches critical E-Business Suite flaw exploited by Cl0p hackersSecurity Affairs·Oct 6, 19:51 UTC · Oct 6, 2025Ransomware in the wildCVE-2025-6188260
⚡ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025RansomwareCVE-2025-29824CVE-2024-11859CVE-2025-3102+17 CVEs60
Cybercrime group exploits Windows zeroSecurity Affairs·Apr 12, 05:10 UTC · Apr 12, 2023Ransomware in the wildCVE-2023-2825260
Quarterly Report: Incident Response trends from Spring 2021Cisco Talos·Jun 10, 12:00 UTC · Jun 10, 2021RansomwareCVE-2021-26855CVE-2021-26857CVE-2021-26858+4 CVEs60