Krebs identifies a St. Petersburg man as Qilin ransomware admin
Leaked records and forum pivots name 36-year-old Aleksey Yakovtsev; Qilin claims 365 victims in three months.
Stories per day · 30 days
24 RSS
Relatedextortion14healthcare12qilin12hive8nefilim8sentencing8semperis7data-breach6globalprotect6phishing6survey6bulletproof-hosting5cryptocurrency5fbi5incident-response5pan-os5supply-chain5virtualine5
14,662 stories, newest first · one card per story
Stories tagged #ransomware
A third of industrial organizations reported an OT incident, SANS finds
Among nearly 700 respondents, incidents rose from 22% to 34%, and reported IP theft jumped from 6% to 31%.
GhostFrame toolkit hijacks VMware ESXi hosts and steals Windows credentials
Recorded Future says TAG-218, overlapping Settra, needs existing ESXi root and dumps guest secrets without guest malware.
Model-based authoring builds consistent virtual SOC training exercises
A phishing-to-ransomware reference package with eight events passed reference validation and runs in a Virtual SOC prototype.
Kaseya ties ransomware recovery communication to MSP client retention
Kaseya cites 12% of MSPs losing clients after incidents and pitches one platform for RMM, PSA and recovery.
1
More than 575 malicious OpenClaw skills delivered malware
Acronis also describes an AI-agent operator, next-day exploitation of a patched Gitea flaw, and ransomware that removes recovery data.
3
Threat bulletin covers library ransomware and exploited SonicWall, OpenSSH flaws
SonicOS SAML VPN bypass and OpenSSH before 10.6p2 are described as actively exploited; Android 14–17 RCE is also patched.
4
Storm-3358 uses ARTEX against financial sector
Cambodia-based Storm-3358 cluster deploys agentic AI framework ARTEX to scan exploit and install RATs in financial organizations across Southeast Asia.
2
Storm-2603 Exploits SharePoint ToolShell Flaws and Cloudflare Tunnels
Storm-2603 installed webshells and deployed Cloudflare Tunnels after exploiting SharePoint vulnerabilities.
1
Recorded Future identifies 82 high-impact CVEs in October 2026
Insikt Group notes 52 Very Critical Risk Scores and CISA KEV coverage for 36 vulnerabilities among 82 high-impact CVEs.
2
Akamai blog calls for a higher-ed ransomware and AI-risk playbook
Only the title and outline are available, with no incidents, data, or recommended controls.
Hackmageddon counts 438 confirmed incidents in October 2026
Malware led named vectors with 71 cases, and 98 breaches began at public-facing applications.
Elastic Warns of Attackers Abusing Trusted Software
Elastic's November report details how adversaries weaponize legitimate RMM tools, AI coding assistants, and first-party applications for persistent access.
1
Hackers Hit UNM Hospital and Offer Patient Compensation
BYOD ransomware group that attacked University of New Mexico hospital apologized and offered up to $2,500 per affected patient while keeping the stolen data.
1
HHS Settles with Lehigh Valley Health Network Over Ransomware Breach
OCR imposed $800,000 penalty and corrective actions after Lehigh Valley Health Network's 2023 ransomware attack exposed PHI of 248,359 individuals.
1
NCSC warns UK organisations of AI-powered ransomware attacks
AI will increase speed, scale and efficiency of attacks on critical national infrastructure within two years.
1
Synology warns ransomware hits NAS devices on outdated DSM
Attackers exploit a flaw patched in December 2024; Synology has not said which of three CVEs is used.
NCSC warns AI-powered ransomware could hit UK infrastructure by 2028
The UK also announced Cyber Shield, NERV, AISI and agent-security funding plus cheaper Cyber Essentials for smaller firms.
1
NCSC warns AI could accelerate ransomware on critical infrastructure
AI is helping attackers discover flaws and create social engineering messages faster, according to NCSC 2026 review.
1
NCSC warns of AI-powered ransomware on UK critical infrastructure by 2028
AI adoption by hostile actors is highly likely to boost ransomware scale and efficiency by 2028, NCSC report warns.
1
Hackers Hit UNM Hospital, Offer Compensation
The BYOD group attacked the University of New Mexico hospital, apologized, offered up to $2,500 per affected patient, and claimed they did not disrupt critical infrastructure.
1
HHS Settles with Lehigh Valley Health Network for Ransomware Breach
The HHS Office for Civil Rights settled with Lehigh Valley Health Network for $800,000 and a corrective action plan after a 2023 ransomware attack that affected 248,359 individuals.
1
Check Point weekly bulletin covers crypto thefts and exploited flaws
The November 2 roundup also cites a claimed $6.3 billion Binance theft and exposure of about 4.9 million student-aid records.
4
OWASP co-leads release free RAID-AI ransomware assessment
Users manually rate controls from zero to five; RAID-AI does not connect to systems or verify the answers.
1