Desktop and IoT threat statistics for Q2 2026Kaspersky Securelist·Aug 10, 09:52 UTC · Aug 10, 2026Ransomware in the wildCVE-2026-33825CVE-2026-50751CVE-2026-5075260
Desktop and IoT threat statistics for Q1 2026Kaspersky Securelist·May 18, 12:00 UTC · May 18, 2026Ransomware in the wildCVE-2026-2013160
Unexplained cyberattacks sow chaos among dark web marketsCyberScoop·Oct 30, 19:36 UTC · Oct 30, 2017Ransomware in the wild60
'China Chopper' web shell makes a comeback in Lebanon, other Asian countriesCyberScoop·Aug 28, 13:36 UTC · Aug 28, 2019Ransomware in the wild60
Hacker puts more than 9M health care records up for sale on the dark webCyberScoop·Jun 30, 09:27 UTC · Jun 30, 2016Ransomware in the wild60
Desktop and IoT threat report for Q2 2025Kaspersky Securelist·Sep 5, 09:00 UTC · Sep 5, 2025Ransomware in the wildCVE-2025-31324CVE-2024-57727CVE-2024-57728+4 CVEs60
Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell AttacksThe Hacker News·Jan 22, 03:40 UTC · Jan 22, 2024Ransomware in the wildCVE-2023-4660460
Dark web markets continue to evolve after big takedowns, Europol saysCyberScoop·Oct 6, 13:05 UTC · Oct 6, 2020Ransomware in the wild60
FBI Removes Web Shells from Infected Exchange ServersInfosecurity Magazine·Apr 14, 09:30 UTC · Apr 14, 2021Ransomware in the wild60
Dark web marketplaces aren't the hacker hotbeds they used to beCyberScoop·Oct 15, 14:00 UTC · Oct 15, 2019Ransomware in the wild60
Running for Office: Russian APT Toolkits RevealedRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Ransomware in the wildCVE-2014-3897CVE-2013-3897260
Cybercrime groups offer six-figure salaries, bonuses, paid time off to attract talent on dark webCyberScoop·Jan 30, 18:34 UTC · Jan 30, 2023Ransomware in the wild60
Hydra market's servers, $25M in bitcoin seized by German police in dark web stingCyberScoop·Apr 5, 20:29 UTC · Apr 5, 2022Ransomware in the wild60
Four years after FBI shut it down, AlphaBay dark web marketplace claims it's back in businessCyberScoop·Aug 11, 20:50 UTC · Aug 11, 2021Ransomware in the wild60
Go Beyond the Headlines for Deeper Dives into the Cybercriminal UndergroundThe Hacker News·Jul 30, 09:59 UTC · Jul 30, 2024Ransomware in the wildCVE-2023-20877CVE-2023-2088760
Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New ExploitsThe Hacker News·Sep 6, 07:46 UTC · Sep 6, 2023Ransomware in the wildCVE-2023-36844CVE-2023-36845CVE-2023-36846+3 CVEs60
Threat Source newsletter (April 13, 2023) — Dark web forum whac-aCisco Talos·Apr 13, 18:00 UTC · Apr 13, 2023Ransomware in the wildCVE-2023-28252CVE-2022-37969CVE-2023-28206+1 CVEs60
Magnitude exploit kitKaspersky Securelist·Jun 24, 10:00 UTC · Jun 24, 2020Ransomware in the wildCVE-2018-8174CVE-2018-8653CVE-2019-1367+3 CVEs60
IT threat evolution Q1 2018. StatisticsKaspersky Securelist·May 14, 10:00 UTC · May 14, 2018Ransomware in the wild160
THN Weekly Roundup — 10 Most Important Stories You Shouldn't MissThe Hacker News·Jul 22, 18:40 UTC · Jul 22, 2017Ransomware in the wildCVE-2017-11421CVE-2017-7494CVE-2017-976560
ThreatsDay Bulletin: New RCEs, Darknet Busts, Kernel Bugs & 25+ More StoriesThe Hacker News·Jan 30, 08:37 UTC · Jan 30, 2026Ransomware in the wildCVE-2025-59090CVE-2025-5910960
⚡ Weekly Recap: BadCam Attack, WinRAR 0-Day, EDR Killer, NVIDIA Flaws, Ransomware Attacks & MoreThe Hacker News·Aug 12, 04:40 UTC · Aug 12, 2025Ransomware in the wildCVE-2025-54948CVE-2025-54987CVE-2025-8088+30 CVEs60
Notorious hacker know as 'Spdrman' arraigned for role in Real Deal dark web marketplaceCyberScoop·Oct 26, 23:36 UTC · Oct 26, 2022Ransomware in the wild60
ProxyShell vulnerabilities actively exploited to deliver web shells and ransomwareHelp Net Security·Aug 23, 00:00 UTC · Aug 23, 2021Ransomware in the wildCVE-2021-34473CVE-2021-34523CVE-2021-3120760
How companies – and the hackers themselvesCyberScoop·Apr 18, 23:56 UTC · Apr 18, 2019Ransomware in the wild60
Can’t hack? You can buy the tools on the dark web insteadCyberScoop·Dec 14, 13:00 UTC · Dec 14, 2018Ransomware in the wild60
Adios 2025, you won’t be missedCisco Talos·Dec 18, 19:00 UTC · Dec 18, 2025Ransomware in the wildCVE-2025-59718CVE-2025-5971960
IR Trends Q3 2025: ToolShell attacks dominate, highlighting criticality of segmentation and rapid responseCisco Talos·Oct 23, 10:00 UTC · Oct 23, 2025Ransomware in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49704+1 CVEs160
⚡ Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0The Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Ransomware in the wildCVE-2025-61882CVE-2025-61884CVE-2025-10035+12 CVEs160
Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched SystemsThe Hacker News·Jul 28, 15:57 UTC · Jul 28, 2025Ransomware in the wildCVE-2025-49706CVE-2025-4970460
Chinese Hackers Exploit Cityworks Flaw to Target US Local GovernmentsInfosecurity Magazine·May 26, 12:00 UTC · May 26, 2025Ransomware in the wildCVE-2025-0994160
Attacks on Exchange servers expand from nationThe Record·Nov 17, 06:58 UTC · Nov 17, 2022Ransomware in the wild60
How Hydra, a Russian dark net market, made more than $1 billion in 2020CyberScoop·May 25, 10:00 UTC · May 25, 2021Ransomware in the wild60
ProxyLogon Microsoft Exchange exploit is completely out of the bagSecurity Affairs·Mar 15, 12:56 UTC · Mar 15, 2021Ransomware in the wildCVE-2021-2685560
Week in review: Keeping up with ransomware, critical PHP RCE exploited, DevOps firewallHelp Net Security·Nov 3, 00:00 UTC · Nov 3, 2019Ransomware in the wildCVE-2019-11043160
Why you should be fed up with the cycle of FUDCyberScoop·Sep 6, 13:00 UTC · Sep 6, 2018Ransomware in the wild60
Here's another sign that criminals are breaking away from bitcoinCyberScoop·Jan 24, 19:50 UTC · Jan 24, 2018Ransomware in the wild60
Monero cryptocurrency doubled in price in March and is being used more widely on dark web marketsCyberScoop·Mar 21, 15:59 UTC · Mar 21, 2017Ransomware in the wild60