Google says 90 zero-days exploited in 2025 as commercial vendor activity growsThe Record·Mar 5, 15:01 UTC · Mar 5, 2026Ransomware in the wildCVE-2025-21590CVE-2025-0282CVE-2025-61882+2 CVEs60
#mWISE: Why Zero Days Are Set for Highest Year on RecordInfosecurity Magazine·Sep 22, 14:15 UTC · Sep 22, 2023Ransomware in the wild60
Google: China dominates government exploitation of zeroSecurity Affairs·Mar 28, 12:16 UTC · Mar 28, 2024Ransomware in the wild60
Experts warn of a surge in zeroSecurity Affairs·Apr 25, 08:09 UTC · Apr 25, 2022Ransomware in the wild160
Zero‑Day Attacks on Enterprise Software Reach Record HighInfosecurity Magazine·Mar 6, 12:29 UTC · Mar 6, 2026Ransomware in the wild60
Oracle zero-day defect amplifies panic over Clop’s data theft attack spreeCyberScoop·Oct 6, 21:34 UTC · Oct 6, 2025Ransomware in the wildCVE-2025-6188260
SonicWall firewalls targeted in ransomware attacks, possibly via zero-dayHelp Net Security·Aug 6, 09:33 UTC · Aug 6, 2025Ransomware in the wildCVE-2025-4059960
Microsoft pins GoAnywhere zero-day attacks to ransomware affiliate StormCyberScoop·Oct 7, 20:44 UTC · Oct 7, 2025Ransomware in the wildCVE-2025-1003560
Microsoft patches zero-day actively exploited in string of ransomware attacksCyberScoop·Apr 8, 21:22 UTC · Apr 8, 2025Ransomware in the wildCVE-2025-29824CVE-2025-29792CVE-2025-29793+3 CVEs160
Week in review: Patch Tuesday forecast, 9 free ransomware guides, Cybertech Europe 2023Help Net Security·Oct 8, 00:00 UTC · Oct 8, 2023Ransomware in the wildCVE-2023-4211CVE-2023-4911CVE-2023-40044+6 CVEs60
Security Affairs newsletter Round 436 by Pierluigi PaganiniSecurity Affairs·Sep 10, 08:53 UTC · Sep 10, 2023Ransomware in the wildCVE-2023-34039CVE-2023-3324660
Apple addresses three zeroSecurity Affairs·May 25, 12:28 UTC · May 25, 2021Ransomware in the wildCVE-2021-30663CVE-2021-30665CVE-2021-3071360
CISA Order Highlights Persistent Risk at Network EdgeKrebs on Security·Jun 15, 00:00 UTC · Jun 15, 2023Ransomware in the wildCVE-2023-2799760
State Actors Drive Record Number of ZeroInfosecurity Magazine·Apr 22, 09:30 UTC · Apr 22, 2022Ransomware in the wild60
A researcher found zero-days in one city's software. Then he realized the problem could be bigger.CyberScoop·Apr 3, 15:54 UTC · Apr 3, 2020Ransomware in the wild60
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026The Hacker News·Mar 21, 07:03 UTC · Mar 21, 2026Ransomware in the wildCVE-2026-2013160
CLOP targets Gladinet CentreStack servers in largeSecurity Affairs·Dec 19, 11:48 UTC · Dec 19, 2025Ransomware in the wildCVE-2025-11371CVE-2025-30406CVE-2025-61882+2 CVEs160
Citrix users hit by actively exploited zeroCyberScoop·Jun 25, 20:38 UTC · Jun 25, 2025Ransomware in the wildCVE-2025-6543CVE-2025-5777CVE-2025-5349+1 CVEs60
Zero-day in Cisco ASA and FTD is actively exploited in ransomware attacksSecurity Affairs·Sep 8, 17:43 UTC · Sep 8, 2023Ransomware in the wildCVE-2023-2026960
From Ransomware to Cyber Espionage: 55 ZeroThe Hacker News·Mar 22, 04:19 UTC · Mar 22, 2023Ransomware in the wildCVE-2022-24682CVE-2022-1040CVE-2022-30190+7 CVEs160
Cleo patches zero-day exploited by ransomware gangHelp Net Security·Jun 8, 10:32 UTC · Jun 8, 2026Ransomware in the wildCVE-2024-50623CVE-2024-55956160
Chinese-speaking hackers exploited ESXi zeroSecurity Affairs·Jan 9, 00:06 UTC · Jan 9, 2026Ransomware in the wildCVE-2025-22226CVE-2025-22224CVE-2025-2222560
Hitachi subsidiary GlobalLogic impacted by Clop’s attack spree on Oracle customersCyberScoop·Nov 11, 19:26 UTC · Nov 11, 2025Ransomware in the wildCVE-2025-6188260
Microsoft Fixes Seven ZeroInfosecurity Magazine·May 14, 09:20 UTC · May 14, 2025Ransomware in the wildCVE-2025-32701CVE-2025-32709CVE-2025-30397+7 CVEs60
Microsoft: Zero-day bug used in ransomware attacks on US real estate firmsThe Record·Apr 8, 20:41 UTC · Apr 8, 2025Ransomware in the wildCVE-2025-29824CVE-2025-2498360
Security Affairs newsletter Round 487 by Pierluigi PaganiniSecurity Affairs·Sep 1, 08:55 UTC · Sep 1, 2024Ransomware in the wildCVE-2024-37085CVE-2023-2252760
Security Affairs newsletter Round 472 by Pierluigi PaganiniSecurity Affairs·May 19, 12:41 UTC · May 19, 2024Ransomware in the wild60
Week in review: GitLab account takeover flaw, attackers exploiting Ivanti Connect Secure zero-daysHelp Net Security·Jan 14, 00:00 UTC · Jan 14, 2024Ransomware in the wildCVE-2023-7028CVE-2024-20674CVE-2024-20700+4 CVEs160
MS Exchange zero-days: The calm before the storm?Help Net Security·Oct 3, 00:00 UTC · Oct 3, 2022Ransomware in the wildCVE-2022-41040CVE-2022-4108260
Week in review: MS Exchange zero-days exploited, AD attack paths, developing secure APIsHelp Net Security·Oct 2, 00:00 UTC · Oct 2, 2022Ransomware in the wildCVE-2022-41040CVE-2022-41082CVE-2022-3236160
Magnitude exploit kitKaspersky Securelist·Jun 24, 10:00 UTC · Jun 24, 2020Ransomware in the wildCVE-2018-8174CVE-2018-8653CVE-2019-1367+3 CVEs60
MOVEit Transfer zero-day was exploited by Cl0p gang (CVE-2023-34362)Help Net Security·Jun 8, 10:36 UTC · Jun 8, 2026Ransomware in the wildCVE-2023-3436260
October 2025 CVE LandscapeRecorded Future·Dec 9, 00:00 UTC · Dec 9, 2025Ransomware in the wildCVE-2025-59287CVE-2025-61882CVE-2025-41244+29 CVEs60
Play ransomware affiliate leveraged zeroSecurity Affairs·May 7, 18:44 UTC · May 7, 2025Ransomware in the wildCVE-2025-2982460
Week in review: Microsoft fixes many zero-days, malicious droppers on Google Play, IRISSCON 2022Help Net Security·Feb 11, 14:56 UTC · Feb 11, 2025Ransomware in the wildCVE-2022-4109160
VMware ESXi auth bypass zero-day exploited by ransomware operators (CVE-2024-37085)Help Net Security·Jul 30, 00:00 UTC · Jul 30, 2024Ransomware in the wildCVE-2024-3708560
Cybercrime group exploits Windows zeroSecurity Affairs·Apr 12, 05:10 UTC · Apr 12, 2023Ransomware in the wildCVE-2023-2825260
Hacking group exploited SonicWall zeroCyberScoop·Apr 29, 22:03 UTC · Apr 29, 2021Ransomware in the wild60
Zyxel Fixes 0day in Network Storage DevicesKrebs on Security·Feb 24, 18:06 UTC · Feb 24, 2020Ransomware in the wildCVE-2020-905460
Prolific ransomware group behind SonicWall zeroCyberScoop·Aug 4, 15:20 UTC · Aug 4, 2026Ransomware in the wildCVE-2026-15409CVE-2026-1541060