LockBit is back and threatens to target more government organizationsSecurity Affairs·Feb 27, 07:44 UTC · Feb 27, 2024RansomwareCVE-2023-382460
Twelve: from initial compromise to ransomware and wipersKaspersky Securelist·Sep 20, 13:33 UTC · Sep 20, 2024RansomwareCVE-2021-21972CVE-2021-2200560
Week in review: PHP supply chain attack, common zero trust traps, hardening CI/CD pipelinesHelp Net Security·Apr 4, 00:00 UTC · Apr 4, 2021RansomwareCVE-2021-21975CVE-2021-2198360
Week in review: Keeping up with ransomware, critical PHP RCE exploited, DevOps firewallHelp Net Security·Nov 3, 00:00 UTC · Nov 3, 2019Ransomware in the wildCVE-2019-11043160
LockBit Ransomware Group Resurfaces After Law Enforcement TakedownThe Hacker News·Mar 1, 03:23 UTC · Mar 1, 2024RansomwareCVE-2023-382460
Attackers exploit cPanel CVE-2026Security Affairs·May 12, 11:41 UTC · May 12, 2026Ransomware in the wildCVE-2026-41940160
FreePBX Servers Targeted by ZeroThe Hacker News·Sep 12, 12:01 UTC · Sep 12, 2025Ransomware in the wildCVE-2025-5781960
DepositFiles exposed config file, jeopardizing user securitySecurity Affairs·Jul 27, 20:39 UTC · Jul 27, 2023Ransomware60
LockBit Ransomware's Darknet Domains Seized in Global Law Enforcement RaidThe Hacker News·Feb 26, 07:26 UTC · Feb 26, 2024RansomwareCVE-2023-382460
14,971 WordPress Sites Cleaned in Global SocGholish TakedownSecurity Affairs·Jun 19, 13:41 UTC · Jun 19, 2026Ransomware60
⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and MoreThe Hacker News·May 19, 04:33 UTC · May 19, 2026Ransomware in the wildCVE-2026-42897CVE-2026-20182CVE-2026-2012760
Palo Alto Networks and SonicWall Firewalls Under AttackInfosecurity Magazine·Feb 17, 09:30 UTC · Feb 17, 2025RansomwareCVE-2024-53704CVE-2025-010860
U.S. Offers $15 Million Bounty to Hunt Down LockBit Ransomware LeadersThe Hacker News·Feb 26, 07:25 UTC · Feb 26, 2024Ransomware60
Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll AffiliatesKrebs on Security·Feb 20, 20:21 UTC · Feb 20, 2024Ransomware60
FIN8-linked actor targets Citrix NetScaler systemsSecurity Affairs·Aug 29, 15:14 UTC · Aug 29, 2023RansomwareCVE-2023-351960
Security Affairs newsletter Round 416 by Pierluigi PaganiniSecurity Affairs·Apr 23, 07:51 UTC · Apr 23, 2023Ransomware in the wild60
Cyberthreats to financial organizations in 2022Kaspersky Securelist·Nov 23, 10:00 UTC · Nov 23, 2021RansomwareCVE-2019-5544CVE-2020-3992CVE-2018-13379+2 CVEs60
⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and MoreThe Hacker News·Aug 4, 12:16 UTC · Aug 4, 2026RansomwareCVE-2026-50746CVE-2026-50747CVE-2026-50748+45 CVEs60
Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UACThe Hacker News·Jul 24, 06:50 UTC · Jul 24, 2026RansomwareCVE-2025-66376CVE-2026-8496CVE-2025-4911360
Five defender priorities from the Talos Year in ReviewCisco Talos·Apr 28, 13:23 UTC · Apr 28, 2026Ransomware60
Cybercriminals scale up, government sector hit hardestHelp Net Security·Apr 23, 13:50 UTC · Apr 23, 2026RansomwareCVE-2017-17215CVE-2023-1389CVE-2014-8361+2 CVEs60
ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-YearThe Hacker News·Apr 17, 14:47 UTC · Apr 17, 2026Ransomware in the wildCVE-2026-33825CVE-2009-0238160
AI-assisted Slopoly malware powers Hive0163’s ransomware campaignsSecurity Affairs·Mar 13, 11:36 UTC · Mar 13, 2026Ransomware60
ThreatsDay Bulletin: New RCEs, Darknet Busts, Kernel Bugs & 25+ More StoriesThe Hacker News·Jan 30, 08:37 UTC · Jan 30, 2026Ransomware in the wildCVE-2025-59090CVE-2025-5910960
⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & MoreThe Hacker News·Oct 6, 11:28 UTC · Oct 6, 2025RansomwareCVE-2025-20362CVE-2025-20333CVE-2025-20363+15 CVEs60
Security Affairs newsletter Round 527 by Pierluigi PaganiniSecurity Affairs·Jun 8, 11:20 UTC · Jun 8, 2025Ransomware in the wildCVE-2025-2018860
⚡ THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025RansomwareCVE-2025-21590CVE-2025-24983CVE-2025-24984+27 CVEs160
Leaked Black Basta Ransomware Chat Logs Reveal Inner Workings and Internal ConflictsThe Hacker News·Feb 27, 05:08 UTC · Feb 27, 2025Ransomware in the wildCVE-2024-50623CVE-2009-3960CVE-2010-2861+8 CVEs60
LockBit claims a comeback less than a week after major disruptionCyberScoop·Feb 27, 16:09 UTC · Feb 27, 2024Ransomware in the wild60
LockBit Ransomware Takedown: What You Need to Know about Operation CroInfosecurity Magazine·Feb 26, 12:00 UTC · Feb 26, 2024RansomwareCVE-2023-382460
LockBit Infrastructure Disrupted by Global Law EnforcersInfosecurity Magazine·Feb 20, 09:30 UTC · Feb 20, 2024RansomwareCVE-2023-382460
Cybercriminals continue targeting open remote access productsHelp Net Security·Dec 11, 00:00 UTC · Dec 11, 2023Ransomware60
Attacks on web applications spike in third quarter, new Talos IR data showsCisco Talos·Oct 24, 12:00 UTC · Oct 24, 2023Ransomware60
Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New ExploitsThe Hacker News·Sep 6, 07:46 UTC · Sep 6, 2023Ransomware in the wildCVE-2023-36844CVE-2023-36845CVE-2023-36846+3 CVEs60
Citrix NetScaler Alert: Ransomware Hackers Exploiting Critical VulnerabilityThe Hacker News·Aug 30, 03:26 UTC · Aug 30, 2023RansomwareCVE-2023-351960
New Ransomware Campaign Targets Citrix NetScaler FlawInfosecurity Magazine·Aug 29, 16:30 UTC · Aug 29, 2023RansomwareCVE-2023-351960
Ransomware group exploits Citrix NetScaler systems for initial accessHelp Net Security·Aug 29, 00:00 UTC · Aug 29, 2023Ransomware in the wildCVE-2023-351960
Critical Bugs in TerraMaster TOS Could Open NAS Devices to Remote HackingThe Hacker News·Feb 11, 05:33 UTC · Feb 11, 2023RansomwareCVE-2022-24990CVE-2022-2498960
Attackers exploited a Mitel VOIP zeroSecurity Affairs·Jun 25, 11:59 UTC · Jun 25, 2022RansomwareCVE-2022-2949960