Storm-1175 Exploits Flaws in HighInfosecurity Magazine·Apr 7, 10:02 UTC · Apr 7, 2026RansomwareCVE-2025-1003560
China-Linked Storm-1175 Exploits ZeroThe Hacker News·Apr 7, 09:42 UTC · Apr 7, 2026RansomwareCVE-2023-21529CVE-2023-27351CVE-2023-27350+13 CVEs60
⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & MoreThe Hacker News·Mar 26, 15:38 UTC · Mar 26, 2026Malware in the wildCVE-2026-33017CVE-2026-2013160
Kaspersky Global Report by Kaspersky Security Services 2026Kaspersky Securelist·Mar 25, 10:35 UTC · Mar 25, 2026Exploit / PoC in the wild60
Attackers keep finding the same gaps in security programsHelp Net Security·Feb 19, 00:00 UTC · Feb 19, 2026RansomwareCVE-2013-2566CVE-2019-11072CVE-2024-638760
Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 VulnerabilityThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Vulnerability in the wildCVE-2026-1731CVE-2026-20700CVE-2025-15556+4 CVEs60
China-linked APT UAT-8837 targets North American critical infrastructureSecurity Affairs·Jan 17, 15:50 UTC · Jan 17, 2026Exploit / PoCCVE-2025-5369060
How NTLM is being abused in 2025 cyberattacksKaspersky Securelist·Nov 26, 15:53 UTC · Nov 26, 2025Exploit / PoC in the wild160
Storm-2603 spotted deploying ransomware on exploited SharePoint serversHelp Net Security·Aug 4, 12:44 UTC · Aug 4, 2025Ransomware in the wildCVE-2025-53770CVE-2025-49706CVE-2025-49704+2 CVEs160
Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched SystemsThe Hacker News·Jul 28, 15:57 UTC · Jul 28, 2025Ransomware in the wildCVE-2025-49706CVE-2025-4970460
U.S. Agencies Warn of Rising Iranian Cyber Attacks on Defense, OT Networks, and Critical InfrastructureThe Hacker News·Jul 2, 05:03 UTC · Jul 2, 2025Ransomware60
Play ransomware group hit 900 organizations since 2022Security Affairs·Jun 6, 07:22 UTC · Jun 6, 2025RansomwareCVE-2024-5772760
Russia-linked APT28 targets western logistics entities and technology firmsSecurity Affairs·May 22, 06:36 UTC · May 22, 2025Threat actorCVE-2023-23397CVE-2023-38831160
Multi-national warning issued over Russia’s targeting of logistics, tech firmsCyberScoop·May 21, 18:41 UTC · May 21, 2025Exploit / PoC in the wildCVE-2023-23397CVE-2023-3883160
⚡ Weekly Recap: iOS Zero-Days, 4Chan Breach, NTLM Exploits, WhatsApp Spyware & MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025Malware in the wildCVE-2025-24054CVE-2024-43451CVE-2025-31200+7 CVEs160
Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 ServersThe Hacker News·Apr 3, 07:21 UTC · Apr 3, 2025RansomwareCVE-2023-38831CVE-2021-26855160
Medusa Ransomware Hits 40+ Victims in 2025, Demands $100KThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025RansomwareCVE-2024-1709CVE-2023-4878860
Kaspersky Incident Response analyst report for 2024Kaspersky Securelist·Mar 12, 08:32 UTC · Mar 12, 2025RansomwareCVE-2023-4878860
Ransomware Attackers Target Industries with Low Downtime ToleranceInfosecurity Magazine·Dec 20, 09:15 UTC · Dec 20, 2024Ransomware60
Malware linked to Salt Typhoon used to hack telcos around the worldCyberScoop·Nov 26, 02:05 UTC · Nov 26, 2024Malware in the wildCVE-2023-46805CVE-2024-21887CVE-2023-48788+5 CVEs60
Hacktivist Group Twelve Targets Russian Entities with Destructive Cyber AttacksThe Hacker News·Oct 19, 07:30 UTC · Oct 19, 2024RansomwareCVE-2021-21972CVE-2021-2200560
Hacktivist group Twelve is back and targets Russian entitiesSecurity Affairs·Sep 23, 05:18 UTC · Sep 23, 2024RansomwareCVE-2021-21972CVE-2021-2200560
CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHubThe Hacker News·Sep 11, 06:02 UTC · Sep 11, 2024RansomwareCVE-2017-0144CVE-2020-1472CVE-2021-42278+3 CVEs160
RansomHub Ransomware Group Targets 210 Victims Across Critical SectorsThe Hacker News·Sep 3, 12:52 UTC · Sep 3, 2024RansomwareCVE-2023-46604CVE-2023-22515CVE-2023-3519+3 CVEs60
Ransomware and BEC Make Up 60% of Cyber IncidentsInfosecurity Magazine·Jul 25, 15:00 UTC · Jul 25, 2024Ransomware60
IR Trends: Ransomware on the rise, while technology becomes most targeted sectorCisco Talos·Jul 25, 10:00 UTC · Jul 25, 2024Ransomware160
Play Ransomware Expands to Target VMWare ESXi EnvironmentsInfosecurity Magazine·Jul 22, 17:15 UTC · Jul 22, 2024Ransomware60
New Linux Variant of Play Ransomware Targeting VMware ESXi SystemsThe Hacker News·Jul 22, 05:48 UTC · Jul 22, 2024Ransomware60
True Protection or False Promise? The Ultimate ITDR Shortlisting GuideThe Hacker News·Jul 10, 11:07 UTC · Jul 10, 2024Ransomware60
Threat Assessment: Black Basta RansomwarePalo Alto Unit 42·Jun 5, 17:55 UTC · Jun 5, 2024Ransomware60
Black Basta Ransomware Strikes 500+ Entities Across North America, Europe, and AustraliaThe Hacker News·May 15, 00:00 UTC · May 15, 2024RansomwareCVE-2020-1472CVE-2021-42278CVE-2021-42287+2 CVEs160
Black Basta ransomware group is imperiling critical infrastructure, groups warnArs Technica · Security·May 15, 00:00 UTC · May 15, 2024RansomwareCVE-2020-1472CVE-2021-42278CVE-2021-42287+1 CVEs60
Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber RansomwareThe Hacker News·Apr 18, 03:38 UTC · Apr 18, 2024RansomwareCVE-2023-2251860
Why Are Compromised Identities the Nightmare to IR Speed and Efficiency?The Hacker News·Feb 12, 10:00 UTC · Feb 12, 2024Data breach60
Turkish Hackers Exploiting Poorly Secured MS SQL Servers Across the GlobeThe Hacker News·Jan 9, 14:12 UTC · Jan 9, 2024Ransomware60
The biggest problem with ransomware is not encryption, but credentialsHelp Net Security·Jan 8, 11:56 UTC · Jan 8, 2024Ransomware60
Product Walkthrough: Silverfort's Unified Identity Protection PlatformThe Hacker News·Nov 20, 14:50 UTC · Nov 20, 2023Ransomware60
BlueKeep RDP flaw: Nearly a million Internet-facing systems are vulnerableHelp Net Security·Nov 15, 08:03 UTC · Nov 15, 2023Ransomware in the wildCVE-2019-070860
Analysis of Cuba ransomware gang activity and toolingKaspersky Securelist·Sep 11, 10:00 UTC · Sep 11, 2023RansomwareCVE-2021-31207CVE-2021-34473CVE-2021-34523+8 CVEs60