Search: “exploitability”

2 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 11383 Exploit / PoC 7876 Ransomware 5757 Malware 4599 Data breach 2530 Threat actor 2007 Policy & legal 1473 Phishing & fraud 1322 Industry 456 Advisory 373 AI safety & security 300 Research 196 Tools 74 AI tools & infra 63

SeverityAll critical 21529 high 9005 medium 5894 low 1579 info 513

Ransomware attackers are zeroing in on mid-market companies

Black Kite found mid-market firms were 73% of disclosed ransomware victims in North America and Europe from January 2023 to June 2026.

Black Kite analyzed 13,336 publicly disclosed ransomware and data-extortion incidents with known revenue between January 2023 and June 2026, finding mid-market companies (annual revenue $10M-$1B) accounted for 73% of victims in North America and Europe, consistently between 72% and 75%. Manufacturing was the most affected sector, followed by professional, scientific, and technical services and construction. Of more than 120,000 assessed mid-market organizations, 54.7% had at least one significant patch-management issue on a public-facing system, over a quarter had a known-exploited vulnerability, and nearly one-third had stealer-log credential findings.

Help Net SecurityAug 24, 00:00 UTC · 23d agoRansomware

How Ransomware Gangs Use Automation, and How You Can Beat It

Recorded Future outlines ten automation strategies ransomware gangs use, from credential marketplaces to bulletproof hosting, urging intelligence-led defense.

A Recorded Future blog post promoting an Insikt Group report and webinar describes how ransomware gangs leverage automation across their attack cycles. The Insikt Group identified ten key strategies, including selling breached credential databases on underground forums, checkers and brute-forcers for validating stolen credentials, loaders and crypters for evading antivirus, banking injects, exploit kits, spam and phishing services, bulletproof hosting services, sniffers, and automated marketplaces for selling stolen credentials and digital fingerprints. The post argues defenders should adopt intelligence-led automation to counter the speed and scale of automated criminal tooling.

Recorded FutureAug 18, 00:00 UTC · 29d agoRansomware