Talos "In the Headlines"Cisco Talos·Dec 19, 16:48 UTC · Dec 19, 2025RansomwareCVE-2021-1675CVE-2021-3452760
ThreatsCisco Talos·Sep 9, 18:46 UTC · Sep 9, 2022Ransomware in the wildCVE-2025-20333CVE-2025-20362CVE-2024-457760
Vice Society leverages PrintNightmare in ransomware attacksCisco Talos·Aug 12, 22:33 UTC · Aug 12, 2021RansomwareCVE-2021-1675CVE-2021-3452760
Novel News on Cuba Ransomware: Greetings From Tropical ScorpiusPalo Alto Unit 42·Jun 5, 20:16 UTC · Jun 5, 2024Ransomware57
Quarterly Report: Incident Response Trends in Q3 2022Cisco Talos·Oct 25, 12:00 UTC · Oct 25, 2022RansomwareCVE-2020-147260
Observing Attacks Against Hundreds of Exposed Services in Public CloudsPalo Alto Unit 42·Jun 6, 01:09 UTC · Jun 6, 2024Ransomware57
Quarterly Report: Incident Response Trends in Q1 2023Cisco Talos·Apr 26, 12:00 UTC · Apr 26, 2023Ransomware57
Talos IR trends Q4 2024: Web shell usage and exploitation of publicCisco Talos·Jan 30, 11:00 UTC · Jan 30, 2025Ransomware57
Ransom Cartel Ransomware: A Possible Connection With REvilPalo Alto Unit 42·Jun 5, 17:50 UTC · Jun 5, 2024Ransomware57
Q3 Malware Trends: Ransomware Extorts Education, Emotet and Crypto Mining Malware Evolve, and Android Malware PersistsRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware57
Sowing Discord: Reaping the benefits of collaboration app abuseCisco Talos·Apr 7, 12:06 UTC · Apr 7, 2021Ransomware157
Quarterly Report: Incident Response trends from Fall 2020Cisco Talos·Dec 9, 14:32 UTC · Dec 9, 2020RansomwareCVE-2020-0688CVE-2020-116511CVE-2020-11652+1 CVEs60
Unwrapping the emerging Interlock ransomware attackCisco Talos·Nov 7, 11:00 UTC · Nov 7, 2024Ransomware57
Quarterly Report: Incident Response trends from Winter 2020Cisco Talos·Mar 24, 12:26 UTC · Mar 24, 2021RansomwareCVE-2021-26855CVE-2020-5902CVE-2019-1893560
Threat landscape for industrial automation systems. Q1 2026Kaspersky Securelist·Jul 7, 10:00 UTC · Jul 7, 2026Ransomware57
Stopping ransomware before it starts: Lessons from Cisco Talos Incident ResponseCisco Talos·Sep 8, 10:00 UTC · Sep 8, 2025Ransomware57
Talos Threat SpotlightsCisco Talos·Apr 14, 00:00 UTC · Apr 14, 2022Ransomware in the wildCVE-2024-4577160
Back from vacation: Analyzing Emotet’s activity in 2020Cisco Talos·Nov 18, 16:00 UTC · Nov 18, 2020Ransomware57
RaaS proliferation: 14 new ransomware groups target organizations worldwideHelp Net Security·Jul 25, 00:00 UTC · Jul 25, 2023Ransomware57
Quarterly Report: Incident Response Trends in Q2 2022Cisco Talos·Jul 26, 14:03 UTC · Jul 26, 2022RansomwareCVE-2021-44228CVE-2021-4504660
Back from the dead: Emotet re-emerges, begins rebuilding to wrap up 2021Cisco Talos·Nov 22, 13:00 UTC · Nov 22, 2021Ransomware57
Uncovering Qilin attack methods exposed through multiple casesCisco Talos·Oct 27, 02:00 UTC · Oct 27, 2025Ransomware57
A Multi-Method Approach to Identifying Rogue Cobalt Strike ServersRecorded Future·Aug 21, 00:00 UTC · Aug 21, 2025Ransomware57
Iranian linked conglomerate MuddyWater comprised of regionally focused subgroupsCisco Talos·Mar 10, 13:02 UTC · Mar 10, 2022Ransomware57
Quarterly Report: Incident Response trends in Summer 2020Cisco Talos·Sep 1, 15:00 UTC · Sep 1, 2020RansomwareCVE-2019-1893560
A closer look at the global threat landscapeHelp Net Security·Feb 13, 00:00 UTC · Feb 13, 2020Ransomware57
Quarterly Report: Incident Response trends in fall 2019Cisco Talos·Feb 5, 18:12 UTC · Feb 5, 2020Ransomware57
Everyday tools, extraordinary crimes: the ransomware exfiltration playbookCisco Talos·Mar 19, 10:00 UTC · Mar 19, 2026Ransomware57
LockBit 2.0: How This RaaS Operates and How to Protect Against ItPalo Alto Unit 42·Jun 5, 20:38 UTC · Jun 5, 2024Ransomware57
Understanding the Phobos affiliate structure and activityCisco Talos·Nov 17, 13:01 UTC · Nov 17, 2023Ransomware57
Ransom Where? Malicious Cryptocurrency Miners Takeover, Generating MillionsCisco Talos·Jan 31, 15:58 UTC · Jan 31, 2018Ransomware57
New Ransomware-as-a-Service Tool ‘Thanos’ Shows Connections to ‘Hakbit’Recorded Future·Jun 29, 00:00 UTC · Jun 29, 2026Ransomware57
New MortalKombat ransomware and Laplas Clipper malware threats deployed in financially motivated campaignCisco Talos·Feb 14, 13:00 UTC · Feb 14, 2023Ransomware57