Search: “PLEASE_READ_ME”

24 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 20 Ransomware 15 Malware 10 Exploit / PoC 7 Data breach 6 Industry 5 Phishing & fraud 3 Policy & legal 3 Model release 1 Research 1 Threat actor 1 Tools 1 AI safety & security 1

SeverityAll critical 21 high 24 medium 19 low 8 info 2

PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers

Guardicore Labs uncovers the PLEASE_READ_ME ransomware campaign targeting MySQL servers, using double extortion and publishing stolen victim data.

Guardicore Labs at Akamai uncovered an opportunistic ransomware campaign dubbed PLEASE_READ_ME that targets MySQL servers. The attackers employ double extortion, publishing stolen data to pressure victims into paying. The campaign is devastating internet-facing MySQL deployments, making exposed database servers the primary at-risk population.

Akamai BlogSep 8, 15:13 UTC · 8d agoRansomware in the wild

Data from connected CloudPets teddy bears leaked and ransomed, exposing kids' voice messages

Troy HuntFeb 27, 21:01 UTC · Feb 27, 2017Data breach

The MiniDuke Mystery: PDF 0-day Government Spy Assembler 0x29A Micro Backdoor

Kaspersky SecurelistFeb 27, 18:00 UTC · Feb 27, 2013Malware CVE-2013-0640

Xbash Combines Botnet, Ransomware, Coinmining in Worm that Targets Linux and Windows

Palo Alto Unit 42Mar 24, 08:51 UTC · Mar 24, 2022Ransomware

New Uyghur and Tibetan Themed Attacks Using PDF Exploits

Kaspersky SecurelistMar 14, 14:55 UTC · Mar 14, 2013Vulnerability CVE-2013-0640 CVE-2013-0158 CVE-2010-3333+1 CVEs

sk185169 - CVE-2026-16232 - Authentication bypass with SmartConsole ...

Check Point issued a high-severity alert for CVE-2026-16232, an authentication bypass in the SmartConsole login process via application token.

Check Point published support article sk185169 describing CVE-2026-16232, an authentication bypass affecting the SmartConsole login process when using application tokens. The vendor rates the issue High. The brief advisory text provides no exploitation details, CVSS score, or affected-version list.