Ransomware gang uses a Python script to encrypt VMware ESXi serversSecurity Affairs·Oct 5, 16:13 UTC · Oct 5, 2021Ransomware160
Black Kingdom ransomwareKaspersky Securelist·Jun 17, 09:42 UTC · Jun 17, 2021RansomwareCVE-2021-27065CVE-2019-11510CVE-2021-26855+2 CVEs60
GhostSec’s joint ransomware operation and evolution of their arsenalCisco Talos·Mar 5, 13:00 UTC · Mar 5, 2024Ransomware60
Researchers discover ransomware that encrypts virtual machines hosted on an ESXi hypervisorHelp Net Security·Oct 7, 00:00 UTC · Oct 7, 2021Ransomware60
Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over DevicesThe Hacker News·Oct 22, 04:20 UTC · Oct 22, 2025RansomwareCVE-2025-9242CVE-2025-3600CVE-2025-3660460
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [20 January]The Hacker News·Jan 20, 12:04 UTC · Jan 20, 2025RansomwareCVE-2025-21333CVE-2025-21334CVE-2025-21335+36 CVEs60
Don’t swing at everythingCisco Talos·Jul 23, 18:00 UTC · Jul 23, 2026RansomwareCVE-2026-60137CVE-2026-6303060
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More StoriesThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Ransomware in the wildCVE-2026-46817CVE-2023-434660
ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More StoriesThe Hacker News·Jun 25, 12:30 UTC · Jun 25, 2026RansomwareCVE-2026-8932CVE-2026-5016060
⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and MoreThe Hacker News·May 19, 04:33 UTC · May 19, 2026Ransomware in the wildCVE-2026-42897CVE-2026-20182CVE-2026-2012760
Security Affairs newsletter Round 572 by Pierluigi PaganiniSecurity Affairs·Apr 12, 08:34 UTC · Apr 12, 2026Ransomware in the wildCVE-2026-35616CVE-2026-2576960
Hackers Exploit Critical Langflow Bug in Just 20 HoursInfosecurity Magazine·Mar 20, 10:20 UTC · Mar 20, 2026Ransomware in the wildCVE-2026-33017160
⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach WidensThe Hacker News·Oct 27, 14:16 UTC · Oct 27, 2025Ransomware in the wildCVE-2025-59287CVE-2025-54957CVE-2025-6950+21 CVEs60
Cl0p exploits Oracle E-Business Suite zero-day in data theft, extortion campaign (CVE-2025-61882)Help Net Security·Oct 6, 00:00 UTC · Oct 6, 2025RansomwareCVE-2025-6188260
Week in review: Many Cisco ASA firewalls still unsecure, hackers claim Red Hat’s GitLab breachHelp Net Security·Oct 5, 00:00 UTC · Oct 5, 2025RansomwareCVE-2025-30247CVE-2025-20333CVE-2025-2036260
⚡ THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025RansomwareCVE-2025-21590CVE-2025-24983CVE-2025-24984+27 CVEs160
RansomHub Went Dark April 1; Affiliates Fled to Qilin, DragonForce Claimed ControlThe Hacker News·May 1, 10:52 UTC · May 1, 2025Ransomware60
Security Affairs newsletter Round 413 by Pierluigi PaganiniSecurity Affairs·Apr 2, 15:10 UTC · Apr 2, 2023Ransomware in the wildCVE-2023-23529CVE-2023-23397CVE-2023-22809+1 CVEs60
Ransomware Hackers Using New Way to Bypass MS Exchange ProxyNotShell MitigationsThe Hacker News·Dec 22, 03:36 UTC · Dec 22, 2022Ransomware in the wildCVE-2022-41040CVE-2022-41080CVE-2022-4108260
Advanced threat predictions for 2023Kaspersky Securelist·Nov 14, 08:00 UTC · Nov 14, 2022Ransomware in the wild60
IT threat evolution Q2 2021Kaspersky Securelist·Aug 12, 10:12 UTC · Aug 12, 2021RansomwareCVE-2018-0802CVE-2021-1732CVE-2021-28310+2 CVEs60
Wormable bash DarkRadiation Ransomware targets Linux distrosSecurity Affairs·Jun 22, 20:59 UTC · Jun 22, 2021Ransomware60
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP SupplyThe Hacker News·Aug 10, 15:03 UTC · Aug 10, 2026Ransomware in the wildCVE-2026-34348CVE-2026-18497CVE-2026-63508+43 CVEs160
What stops attackers wrecking industrial plants is knowing howHelp Net Security·Aug 5, 00:00 UTC · Aug 5, 2026Ransomware60
INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 FlawsThe Hacker News·Aug 3, 16:15 UTC · Aug 3, 2026RansomwareCVE-2026-15409CVE-2026-1541060
ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More StoriesThe Hacker News·Jul 30, 15:25 UTC · Jul 30, 2026RansomwareCVE-2026-33017CVE-2026-21858CVE-2025-68613+5 CVEs60
SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root AccessThe Hacker News·Jul 20, 16:44 UTC · Jul 20, 2026RansomwareCVE-2026-15409CVE-2026-1541060
JadePuffer Returns With Ransomware Designed to Wipe AI ModelsInfosecurity Magazine·Jul 20, 14:05 UTC · Jul 20, 2026Ransomware in the wildCVE-2025-3248160
AI Agent Exploits Langflow RCE to Automate Database Ransomware AttackThe Hacker News·Jul 2, 09:13 UTC · Jul 2, 2026Ransomware in the wildCVE-2025-3248CVE-2021-2944160
⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AIThe Hacker News·Jun 2, 03:39 UTC · Jun 2, 2026Ransomware in the wildCVE-2026-0257CVE-2026-8732CVE-2026-27771+31 CVEs60
GitHub Confirms Breach of Internal RepositoriesInfosecurity Magazine·May 20, 10:45 UTC · May 20, 2026Ransomware60
Great responsibility, without great powerCisco Talos·Apr 30, 18:00 UTC · Apr 30, 2026Ransomware in the wildCVE-2026-4220860
Storm-1175 Exploits Flaws in HighInfosecurity Magazine·Apr 7, 10:02 UTC · Apr 7, 2026RansomwareCVE-2025-1003560
Cybercrime group Lapsus$ claims the hack of pharma giant AstraZenecaSecurity Affairs·Mar 25, 11:26 UTC · Mar 25, 2026Ransomware60
Henry IV, Hotspur, Hal, and hallucinationsCisco Talos·Feb 26, 19:00 UTC · Feb 26, 2026Ransomware in the wildCVE-2026-2012760
CISO's Expert Guide To AI Supply Chain AttacksThe Hacker News·Nov 11, 11:58 UTC · Nov 11, 2025Ransomware60
A critical WatchGuard Fireware flaw could allow unauthenticated code executionSecurity Affairs·Oct 17, 14:09 UTC · Oct 17, 2025RansomwareCVE-2025-924260
⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 BitThe Hacker News·Sep 22, 15:16 UTC · Sep 22, 2025Ransomware in the wildCVE-2025-10585CVE-2025-55241CVE-2025-10035+14 CVEs160
Security Affairs newsletter Round 541 by Pierluigi PaganiniSecurity Affairs·Sep 14, 12:09 UTC · Sep 14, 2025Ransomware in the wildCVE-2025-5313660