Easily exploitable, unpatched Windows privilege escalation flaw revealed (CVE-2021-36934)Help Net Security·Jul 23, 07:46 UTC · Jul 23, 2021VulnerabilityCVE-2021-3693460
Ransomware Defense Using the Wazuh Open Source PlatformThe Hacker News·Nov 4, 11:06 UTC · Nov 4, 2025Ransomware60
Becoming Ransomware Ready: Why Continuous Validation Is Your Best DefenseThe Hacker News·Feb 26, 11:51 UTC · Feb 26, 2025Ransomware60
Threat Assessment: Black Basta RansomwarePalo Alto Unit 42·Jun 5, 17:55 UTC · Jun 5, 2024Ransomware60
New BYOVD loader behind DeadLock ransomware attackCisco Talos·Dec 9, 11:00 UTC · Dec 9, 2025RansomwareCVE-2024-5132460
New Avalon Malware Framework Packs CrownX Ransomware CapabilitiesThe Hacker News·Jul 3, 18:55 UTC · Jul 3, 2026RansomwareCVE-2025-324860
U.S. Cybersecurity Agency Raises Alarm Over Royal Ransomware's Deadly CapabilitiesThe Hacker News·Mar 3, 09:59 UTC · Mar 3, 2023Ransomware60
Microsoft Issues Patches for SharePoint ZeroThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2023-20585CVE-2026-21637CVE-2026-25250+4 CVEs160
Extending AutoFocus Threat Intelligence With New Tag TypesPalo Alto Unit 42·Jan 28, 21:52 UTC · Jan 28, 2022Ransomware60
BlueHammer: Windows zero-day exploit leakedHelp Net Security·Jun 30, 11:31 UTC · Jun 30, 2026Exploit / PoC in the wildCVE-2026-3382560
Sodinokibi ransomware exploits WebLogic Server vulnerabilityCisco Talos·Apr 30, 18:00 UTC · Apr 30, 2019RansomwareCVE-2019-272560
Akira ransomware continues to evolveCisco Talos·Oct 21, 16:50 UTC · Oct 21, 2024Ransomware in the wildCVE-2024-40766CVE-2020-3259CVE-2023-20263+5 CVEs60
Windows CLFS and five exploits used by ransomware operatorsKaspersky Securelist·Dec 21, 09:53 UTC · Dec 21, 2023RansomwareCVE-2023-28252CVE-2022-24521CVE-2022-37969+1 CVEs60
Ransomware group behind Oakland attack strengthens capabilities with new tools, researchers sayCyberScoop·Apr 19, 10:00 UTC · Apr 19, 2023Ransomware in the wild60
Underestimating the FONIX - Ransomware as a Service could be an errorSecurity Affairs·Oct 11, 16:44 UTC · Oct 11, 2020Ransomware60
Bumblebee attacks, from initial access to the compromise of Active Directory ServicesSecurity Affairs·Aug 19, 08:33 UTC · Aug 19, 2022Ransomware60
[SI-LAB] LockerGoga is the most active ransomware against companiesSecurity Affairs·Mar 21, 07:36 UTC · Mar 21, 2019Ransomware60
An untold cost of ransomware: It will change how you operateHelp Net Security·May 15, 17:33 UTC · May 15, 2017Ransomware60
Can Data Protection Systems Prevent Data At Rest Leakage?The Hacker News·May 15, 00:00 UTC · May 15, 2021Phishing & fraud55
New MemGhost Attack Plants Persistent False Memories in AI Agents Through One EmailThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Data breachCVE-2025-32711260
DeadLock Ransomware Uses BYOVD to Evade Security MeasuresInfosecurity Magazine·Dec 9, 16:00 UTC · Dec 9, 2025RansomwareCVE-2024-5132460
Desktop and IoT malware report for Q3 2025Kaspersky Securelist·Nov 19, 10:00 UTC · Nov 19, 2025MalwareCVE-2024-4076660
SonicWall Investigating Potential SSL VPN ZeroThe Hacker News·Aug 7, 05:27 UTC · Aug 7, 2025Ransomware in the wild60
SonicWall firewalls targeted in ransomware attacks, possibly via zero-dayHelp Net Security·Aug 6, 09:33 UTC · Aug 6, 2025Ransomware in the wildCVE-2025-4059960
Ransomware Group Uses AI Chatbot to Intensify Pressure on VictimsInfosecurity Magazine·Jul 22, 13:00 UTC · Jul 22, 2025Ransomware60
RansomHub Went Dark April 1; Affiliates Fled to Qilin, DragonForce Claimed ControlThe Hacker News·May 1, 10:52 UTC · May 1, 2025Ransomware60
Introducing ToyMaker, an initial access broker working in cahoots with double extortion gangsCisco Talos·Apr 23, 10:00 UTC · Apr 23, 2025Ransomware60
VanHelsingRaaS Expands Rapidly in Cybercrime MarketInfosecurity Magazine·Mar 24, 17:15 UTC · Mar 24, 2025Ransomware60
Helldown Ransomware Expands to Target VMware and Linux SystemsInfosecurity Magazine·Nov 19, 16:30 UTC · Nov 19, 2024Ransomware60
Researchers out new Qilin ransomware-as-aCyberScoop·Oct 24, 17:23 UTC · Oct 24, 2024Ransomware in the wild60
Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate ProgramThe Hacker News·Oct 22, 13:52 UTC · Oct 22, 2024Ransomware60
Cicada3301 Ransomware Targets Critical Sectors in US and UKInfosecurity Magazine·Oct 17, 17:16 UTC · Oct 17, 2024Ransomware60
Threat Assessment: Clop RansomwarePalo Alto Unit 42·Jun 6, 13:24 UTC · Jun 6, 2024RansomwareCVE-2021-27101CVE-2021-27102CVE-2021-27103+1 CVEs160
An AI Based Solution to Detecting the DoubleZero .NET WiperPalo Alto Unit 42·Jun 5, 17:25 UTC · Jun 5, 2024Malware55
Black Basta Ransomware Strikes 500+ Entities Across North America, Europe, and AustraliaThe Hacker News·May 15, 00:00 UTC · May 15, 2024RansomwareCVE-2020-1472CVE-2021-42278CVE-2021-42287+2 CVEs160
Akira Ransomware Gang Extorts $42 Million; Now Targets Linux ServersThe Hacker News·Apr 20, 05:08 UTC · Apr 20, 2024RansomwareCVE-2020-3259CVE-2023-2026960
Akira Ransomware Group Rakes in $42m, 250 Organizations ImpactedInfosecurity Magazine·Apr 19, 11:17 UTC · Apr 19, 2024Ransomware60