Here’s all the ways an abandoned cloud instance can cause security issuesCyberScoop·Feb 4, 15:42 UTC · Feb 4, 2025Ransomware57
Researchers warn of risks tied to abandoned cloud storage bucketsThe Record·Feb 5, 02:28 UTC · Feb 5, 2025Ransomware57
Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over DevicesThe Hacker News·Oct 22, 04:20 UTC · Oct 22, 2025RansomwareCVE-2025-9242CVE-2025-3600CVE-2025-3660460
FreePBX Servers Targeted by ZeroThe Hacker News·Sep 12, 12:01 UTC · Sep 12, 2025Ransomware in the wildCVE-2025-5781960
Attackers exploit cPanel CVE-2026Security Affairs·May 12, 11:41 UTC · May 12, 2026Ransomware in the wildCVE-2026-41940160
Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail ServerThe Hacker News·Feb 12, 05:15 UTC · Feb 12, 2026Ransomware in the wildCVE-2025-52691CVE-2026-23760CVE-2026-2442360
A critical WatchGuard Fireware flaw could allow unauthenticated code executionSecurity Affairs·Oct 17, 14:09 UTC · Oct 17, 2025RansomwareCVE-2025-924260
Fortra cops to exploitation of GoAnywhere fileCyberScoop·Oct 13, 21:22 UTC · Oct 13, 2025Ransomware in the wildCVE-2025-1003560
Worries mount over maxCyberScoop·Sep 26, 14:30 UTC · Sep 26, 2025Ransomware in the wildCVE-2025-10035CVE-2023-0669160
Questions mount as Ivanti tackles another round of zeroCyberScoop·May 28, 21:39 UTC · May 28, 2025Ransomware in the wildCVE-2025-4427CVE-2025-442860
Veeam fixed critical Backup & Replication flaw CVE-2025Security Affairs·Mar 20, 19:28 UTC · Mar 20, 2025RansomwareCVE-2025-2312060
Veeam Backup & Replication RCE flaw may soon be leveraged by ransomware gangs (CVE-2024-40711)Help Net Security·Oct 11, 14:15 UTC · Oct 11, 2024RansomwareCVE-2024-40711CVE-2023-2753260
Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands PreThe Hacker News·Jun 30, 08:03 UTC · Jun 30, 2026Ransomware in the wildCVE-2026-8037CVE-2026-33691CVE-2024-121260
Ransomware attackers are exploiting critical SmarterMail vulnerability (CVE-2026-24423)Help Net Security·Feb 12, 09:45 UTC · Feb 12, 2026Ransomware in the wildCVE-2026-24423CVE-2025-52691CVE-2026-2376060
Attackers hit React defect as researchers quibble over proofCyberScoop·Dec 6, 17:14 UTC · Dec 6, 2025Ransomware in the wildCVE-2025-55182CVE-2025-6647860
August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
Microsoft Links Storm-1175 to GoAnywhere Exploit Deploying Medusa RansomwareThe Hacker News·Oct 10, 11:26 UTC · Oct 10, 2025Ransomware in the wildCVE-2025-1003560
Dozens of Oracle customers impacted by Clop data theft for extortion campaignCyberScoop·Oct 9, 16:02 UTC · Oct 9, 2025Ransomware in the wildCVE-2025-6188260
Oracle EBS Under Fire as Cl0p Exploits CVE-2025-61882 in RealThe Hacker News·Oct 8, 04:30 UTC · Oct 8, 2025Ransomware in the wildCVE-2025-6188260
Microsoft pins GoAnywhere zero-day attacks to ransomware affiliate StormCyberScoop·Oct 7, 20:44 UTC · Oct 7, 2025Ransomware in the wildCVE-2025-1003560
Oracle zero-day defect amplifies panic over Clop’s data theft attack spreeCyberScoop·Oct 6, 21:34 UTC · Oct 6, 2025Ransomware in the wildCVE-2025-6188260
Citrix Bleed 2 Flaw Enables Token Theft; SAP GUI Flaws Risk Sensitive Data ExposureThe Hacker News·Jun 27, 10:45 UTC · Jun 27, 2025Ransomware in the wildCVE-2025-0055CVE-2025-0056CVE-2025-0059+2 CVEs60
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [10 February]The Hacker News·May 6, 07:05 UTC · May 6, 2025Ransomware in the wildCVE-2024-57726CVE-2024-57727CVE-2024-57728+18 CVEs60
SonicWall customers under threat as attackers exploit 2 zeroCyberScoop·Jul 15, 18:52 UTC · Jul 15, 2026Ransomware in the wildCVE-2026-15409CVE-2026-15410160
URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security ThreatThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Ransomware in the wildCVE-2023-2448960
Oracle E-Business Suite Flaw CVE-2026The Hacker News·Jun 30, 11:37 UTC · Jun 30, 2026Ransomware in the wildCVE-2026-46817CVE-2025-61882CVE-2026-3527360
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 SetupsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Ransomware in the wildCVE-2026-50751CVE-2026-5075260
SonicWall pins attack on customer portal to undisclosed nationCyberScoop·Nov 6, 16:33 UTC · Nov 6, 2025Ransomware in the wild60
Five New Exploited Bugs Land in CISA's Catalog — Oracle and Microsoft Among TargetsThe Hacker News·Oct 21, 14:55 UTC · Oct 21, 2025Ransomware in the wildCVE-2025-61884CVE-2025-61882CVE-2025-33073+3 CVEs60
Week in review: Hackers extorting Salesforce, CentreStack 0-day exploitedHelp Net Security·Oct 12, 00:00 UTC · Oct 12, 2025RansomwareCVE-2025-61882CVE-2025-49844CVE-2025-1137160
SonicWall admits attacker accessed all customer firewall configurations stored on cloud portalCyberScoop·Oct 9, 20:26 UTC · Oct 9, 2025Ransomware in the wild60
Medusa ransomware used during exploitation of GoAnywhere file transfer bug, Microsoft saysThe Record·Oct 6, 20:42 UTC · Oct 6, 2025RansomwareCVE-2025-1003560
FBI, UK gov’t urge orgs to patch Oracle E-Business vuln after alleged Clop campaignThe Record·Oct 6, 19:28 UTC · Oct 6, 2025Ransomware in the wildCVE-2025-6188260
Researchers raise alarm over maximum-severity defect in GoAnywhere fileCyberScoop·Sep 19, 20:51 UTC · Sep 19, 2025Ransomware in the wildCVE-2025-10035CVE-2023-0669160
Citrix NetScaler customers hit by third actively exploited zeroCyberScoop·Aug 26, 21:28 UTC · Aug 26, 2025Ransomware in the wildCVE-2025-7775CVE-2025-7776CVE-2025-8424+3 CVEs60
⚡ Weekly Recap: Scattered Spider Arrests, Car Exploits, macOS Malware, Fortinet RCE and MoreThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025RansomwareCVE-2025-25257CVE-2025-25251CVE-2025-31365+36 CVEs160
Citrix users hit by actively exploited zeroCyberScoop·Jun 25, 20:38 UTC · Jun 25, 2025Ransomware in the wildCVE-2025-6543CVE-2025-5777CVE-2025-5349+1 CVEs60
SAP Flaw Exploited by Ransomware Groups and ChineseInfosecurity Magazine·May 15, 15:15 UTC · May 15, 2025Ransomware in the wildCVE-2025-31324CVE-2025-4299960
CISA confirms Veeam vulnerability is being used in ransomware attacksThe Record·Oct 18, 14:19 UTC · Oct 18, 2024Ransomware in the wildCVE-2024-40711CVE-2023-2753260
Critical Linux CUPS Printing System Flaws Could Allow Remote Command ExecutionThe Hacker News·Oct 9, 04:05 UTC · Oct 9, 2024RansomwareCVE-2024-47176CVE-2024-47076CVE-2024-47175+1 CVEs60