Chaos RaaS Emerges After BlackSuit Takedown, Demanding $300K from U.S. VictimsThe Hacker News·Aug 12, 04:39 UTC · Aug 12, 2025Ransomware60
Attackers exploited critical Fortra GoAnywhere flaw in zero-day attacks (CVE-2025-10035)Help Net Security·Oct 7, 14:53 UTC · Oct 7, 2025Exploit / PoC in the wildCVE-2025-1003560
⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 BitThe Hacker News·Sep 22, 15:16 UTC · Sep 22, 2025Ransomware in the wildCVE-2025-10585CVE-2025-55241CVE-2025-10035+14 CVEs160
Microsoft Links Storm-1175 to GoAnywhere Exploit Deploying Medusa RansomwareThe Hacker News·Oct 10, 11:26 UTC · Oct 10, 2025Ransomware in the wildCVE-2025-1003560
CISA publishes plan for remote monitoring tools after nationThe Record·Aug 16, 19:11 UTC · Aug 16, 2023Ransomware60
Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain CredentialsThe Hacker News·Jul 3, 14:36 UTC · Jul 3, 2026RansomwareCVE-2025-577760
⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and MoreThe Hacker News·May 11, 12:36 UTC · May 11, 2026Malware in the wildCVE-2026-6973CVE-2026-030060
Sandworm APT's initial access subgroup hits organizations accross the globeHelp Net Security·Feb 13, 00:00 UTC · Feb 13, 2025Threat actorCVE-2021-34473CVE-2022-41352CVE-2023-32315+4 CVEs160
Week in review: Firmware-level Android backdoor found on tablets, Dell zero-day exploited since 2024Help Net Security·Feb 22, 00:00 UTC · Feb 22, 2026Exploit / PoC in the wildCVE-2026-2441CVE-2026-22769CVE-2026-2329+1 CVEs60
Akira ransomware: From SonicWall VPN login to encryption in under four hoursHelp Net Security·Sep 29, 00:00 UTC · Sep 29, 2025RansomwareCVE-2024-4076660
Microsoft: Critical GoAnywhere Bug Exploited in Medusa Ransomware CampInfosecurity Magazine·Oct 7, 09:45 UTC · Oct 7, 2025Ransomware in the wildCVE-2025-10035CVE-2024-1709CVE-2023-4878860
Week in review: Cisco fixes critical UCCX flaws, November 2025 Patch Tuesday forecastHelp Net Security·Nov 9, 00:00 UTC · Nov 9, 2025Vulnerability in the wildCVE-2025-48703CVE-2025-11371CVE-2025-20358+1 CVEs60
ThreatsDay Bulletin: AI Voice Cloning Exploit, Wi-Fi Kill Switch, PLC Vulns, and 14 More StoriesThe Hacker News·Jan 19, 06:25 UTC · Jan 19, 2026VulnerabilityCVE-2025-62507CVE-2025-23304CVE-2026-22584160
GoAnywhere MFT zero-day used by StormSecurity Affairs·Oct 7, 19:23 UTC · Oct 7, 2025Exploit / PoC in the wildCVE-2025-1003560
ShadowSyndicate: A New Cybercrime Group Linked to 7 Ransomware FamiliesThe Hacker News·Sep 30, 04:03 UTC · Sep 30, 2023Ransomware in the wild60
ConnectWise Confirms Hack, “Very Small Number” of Customers AffectedInfosecurity Magazine·May 29, 16:20 UTC · May 29, 2025Data breach60
New Phishing Campaign Abuses ConnectWise ScreenConnect to Take Over DeInfosecurity Magazine·Aug 27, 09:25 UTC · Aug 27, 2025Threat actor60
New BitLocker extortion activity: RDP, MSSQL, RMM AbuseKaspersky Securelist·Jul 21, 13:00 UTC · Jul 21, 2026Ransomware60
ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ StoriesThe Hacker News·Feb 5, 17:14 UTC · Feb 5, 2026Vulnerability in the wild160
Storm-1175 Exploits Flaws in HighInfosecurity Magazine·Apr 7, 10:02 UTC · Apr 7, 2026RansomwareCVE-2025-1003560
Inside the ransomware playbook: Analyzing attack chains and mapping common TTPsCisco Talos·Jul 10, 10:00 UTC · Jul 10, 2024Ransomware60
Fast-moving Storm-1175 uses new exploits to breach networks and drop MedusaSecurity Affairs·Apr 7, 13:21 UTC · Apr 7, 2026Ransomware in the wildCVE-2026-1731CVE-2023-21529CVE-2023-27351+13 CVEs60
U.S. Arrests Facilitator in North Korean IT Worker Scheme; Seizes 29 Domains and Raids 21 Laptop FarmsThe Hacker News·Jul 1, 17:49 UTC · Jul 1, 2025Threat actor60
Quarterly Report: Incident Response Trends in Q4 2022Cisco Talos·Jan 26, 09:00 UTC · Jan 26, 2023Ransomware60
⚡ THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025RansomwareCVE-2025-21590CVE-2025-24983CVE-2025-24984+27 CVEs160
China-linked hackers turning popular cybersecurity tool into ransomware launchpad, Microsoft warnsThe Record·Aug 10, 13:20 UTC · Aug 10, 2026RansomwareCVE-2026-18577260
Ransomware Gang Exploits SimpleHelp RMM to Compromise Utility BillingInfosecurity Magazine·Jun 13, 11:00 UTC · Jun 13, 2025Ransomware in the wildCVE-2024-57727CVE-2024-57728CVE-2024-5772660
SolarWinds Web Help Desk Exploited for RCE in MultiThe Hacker News·Mar 7, 07:03 UTC · Mar 7, 2026Vulnerability in the wildCVE-2025-40551CVE-2025-40536CVE-2025-26399+1 CVEs60
MuddyWater Uses Compromised Mailboxes in Global Phishing CampaignInfosecurity Magazine·Oct 22, 16:00 UTC · Oct 22, 2025Threat actor60
Critical SimpleHelp Vulnerability Exploited For Malware DeliveryInfosecurity Magazine·Jun 30, 15:34 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-4855860
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More StoriesThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Ransomware in the wildCVE-2026-46817CVE-2023-434660
Dropzone AI releases autonomous Threat Hunting agent for continuous SOC detectionHelp Net Security·Apr 15, 09:57 UTC · Apr 15, 2026Exploit / PoC60
Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)Help Net Security·Aug 10, 12:26 UTC · Aug 10, 2026Vulnerability in the wildCVE-2026-18577CVE-2026-1855660
ThreatsDay Bulletin: Hybrid P2P Botnet, 13-YearThe Hacker News·Apr 9, 16:23 UTC · Apr 9, 2026MalwareCVE-2024-32114CVE-2026-34197CVE-2022-41678160
‘Scattered Spider’ group launches ransomware attacks while expanding targets in hospitality, retailThe Record·Sep 18, 12:10 UTC · Sep 18, 2023Ransomware60
ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More StoriesThe Hacker News·Jul 9, 15:09 UTC · Jul 9, 2026Phishing & fraudCVE-2026-918160
CISA Adds 3 Actively Exploited Flaws to KEV Catalog, including Critical PaperCut BugThe Hacker News·Apr 24, 04:36 UTC · Apr 24, 2023Exploit / PoC in the wildCVE-2023-28432CVE-2023-27350CVE-2023-213660
Malware-as-a-Service and Ransomware-as-a-Service lower barriers for cybercriminalsHelp Net Security·Aug 9, 00:00 UTC · Aug 9, 2024Ransomware60
What happened in Vegas (that you actually want to know about)Cisco Talos·Aug 14, 18:00 UTC · Aug 14, 2025RansomwareCVE-2025-654360