Ransomware

Ransomware gang talked AI agents into doing much of its dirty work

agentic AI, AI, CloudSEK, cybercrime, News, Ransomware, Sophos /

Ransomware gang talked AI agents into doing much of its dirty work 2026-11-02 at 07:00 By Sinisa Markovic The group behind the Aur0ra ransomware has been using AI agents to move through victim networks, collect credentials and work its way up to domain administrator access, according to Sophos. AI-assisted intrusion workflow (Source: Sophos) The company, […]

Ransomware gang talked AI agents into doing much of its dirty work Read More »

Fake IT help desk callers got by on little more than names and email addresses

attack, Cisco, Claude Code, cybercrime, cybersecurity, Don't miss, Malware, Microsoft Teams, News, Ransomware, report, scams, social engineering, threats, vishing, voice recognition /

Fake IT help desk callers got by on little more than names and email addresses 2026-10-30 at 08:30 By Mirko Zorz Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos […]

Fake IT help desk callers got by on little more than names and email addresses Read More »

Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison

cybercrime, hacker, Hive, Nefilim, Ransomware, sentenced /

Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison 2026-10-28 at 17:24 By Ionut Arghire Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks. The post Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison appeared first on SecurityWeek. This […]

Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison Read More »

Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator

arrest, cybercrime, law enforcement, News, Ransomware, US DoJ /

Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator 2026-10-28 at 14:17 By Anamarija Pogorelec A Ukrainian national who participated in ransomware attacks targeting hospitals, government entities, law firms, and other businesses was sentenced to five years and 10 months in prison. Artem Stryzhak, 36, pleaded guilty in December 2025 to two counts of […]

Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator Read More »

71% of vulnerability exploitation starts within a week of disclosure

AI, Government, healthcare, News, Ransomware, Rapid7, vulnerability disclosure /

71% of vulnerability exploitation starts within a week of disclosure 2026-10-27 at 07:30 By Anamarija Pogorelec Attackers are exploiting newly disclosed security flaws within days, leaving organizations little time to respond, according to Rapid7’s Q3 2026 Quarterly Threat Landscape Report. The company reported an average of three days between public disclosure and exploitation of high-severity […]

71% of vulnerability exploitation starts within a week of disclosure Read More »

High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7

Ransomware, Threat Intelligence, Threat Report /

High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 2026-10-21 at 18:00 By Kevin Townsend Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents. The post High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 appeared first on SecurityWeek. […]

High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 Read More »

Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June

Don't miss, Hot stuff, News, Palo Alto Networks, Ransomware, Rapid7, ReliaQuest, VPN, vulnerability /

Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June 2026-10-21 at 14:13 By Sinisa Markovic Several ransomware groups are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks’ PAN-OS GlobalProtect patched in May, to break into organizations in sectors ranging from healthcare and education to government and energy. CVE-2026-0257 stems from the […]

Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June Read More »

Ransomware pressure now reaches employees’ homes and families

AI, cybersecurity, identity protection, News, Ransomware, report, Semperis /

Ransomware pressure now reaches employees’ homes and families 2026-10-19 at 07:00 By Anamarija Pogorelec Ransomware attackers threatened employees’ family members or friends at 37% of organizations surveyed for Semperis’ 2026 Ransomware Risk Report. The survey covered 1,200 IT and security professionals at organizations that had experienced at least one successful ransomware attack. “Ransomware has proven […]

Ransomware pressure now reaches employees’ homes and families Read More »

Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme

charged, cybercrime, MonsterCloud, Ransomware /

Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme 2026-10-08 at 12:27 By Ionut Arghire Zohar Pinhasi was paying ransoms to obtain decryption keys and then charging victims substantially more for remediation. The post Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme appeared first on SecurityWeek. This article is an excerpt from […]

Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme Read More »

Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims

FBI, law enforcement, News, Ransomware, US DoJ, USA /

Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims 2026-10-08 at 11:00 By Sinisa Markovic The owner of Florida-based ransomware remediation company MonsterCloud has been charged with fraud for allegedly paying ransomware gangs behind his clients’ backs and billing them far more than the ransom. Zohar Pinhasi (aka “Zack Silver” and “Zack […]

Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims Read More »

Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany

cybercrime, extradited, Germany, hacker, Japan, Qilin, Ransomware, Tracking & Law Enforcement /

Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany 2026-10-07 at 16:47 By Ionut Arghire The individual was detained in May and has been extradited to Germany to face hacking charges. The post Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany Read More »

250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms

data breach, Data Breaches, healthcare, Ransomware /

250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms 2026-10-05 at 15:35 By Ionut Arghire Hackers stole patient information from Clover Health Investments and AngMar Management Services in July. The post 250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms Read More »

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

China, exploited, Malware & Threats, Ransomware, SharePoint, Vulnerabilities, Warlock /

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks 2026-10-02 at 12:34 By Ionut Arghire The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025. The post Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks Read More »

Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader

cybercrime, disruption, Europol, Featured, KillSec, Ransomware, takedown /

Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader 2026-10-01 at 17:17 By Eduard Kovacs Police took control of KillSec’s leak site and secured at least 110 terabytes of data stolen from victims. The post Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader Read More »

16-year-old suspected leader of KillSec ransomware group arrested

cybercrime, Eurojust, Europol, law enforcement, News, Ransomware /

16-year-old suspected leader of KillSec ransomware group arrested 2026-10-01 at 16:59 By Sinisa Markovic A 16-year-old is suspected of being the main operator of KillSec, a ransomware group that Eurojust says is responsible for almost 1,000 attacks worldwide. Seizure notice (Source: Eurojust) According to Eurojust, KillSec has been active since 2024. The group got into […]

16-year-old suspected leader of KillSec ransomware group arrested Read More »

Deepfakes become a board priority once an executive falls for one

AI, cybersecurity, deepfakes, News, Pindrop, Ransomware, report /

Deepfakes become a board priority once an executive falls for one 2026-09-29 at 14:59 By Anamarija Pogorelec Nearly three-quarters of security leaders have encountered or suspect a deepfake attack in the past year, while just 10% say their organizations have purpose-built defenses, according to Pindrop’s 2026 Deepfake Readiness Index. Real-time communications have become a target […]

Deepfakes become a board priority once an executive falls for one Read More »

US Court Sentences Armenian Man to Prison for Ryuk Ransomware Attacks

cybercrime, Ransomware, Ryuk, sentenced /

US Court Sentences Armenian Man to Prison for Ryuk Ransomware Attacks 2026-09-24 at 11:38 By Eduard Kovacs Karen Vardanyan has also been ordered to pay over $1.2 million in restitution to victims. The post US Court Sentences Armenian Man to Prison for Ryuk Ransomware Attacks appeared first on SecurityWeek. This article is an excerpt from […]

US Court Sentences Armenian Man to Prison for Ryuk Ransomware Attacks Read More »

Europe’s technology backbone is becoming a cyber target

cybersecurity, DDoS, ENISA, EU, Europe, News, phishing, Ransomware, social engineering, supply chain /

Europe’s technology backbone is becoming a cyber target 2026-09-24 at 07:00 By Anamarija Pogorelec Disruptive attacks on public-facing services, financially motivated cybercrime and compromises of shared technology providers are increasing cybersecurity risks across Europe. ENISA’s Threat Landscape 2026 identifies cybercrime, state-linked activity, foreign information manipulation and interference, hacktivism and vulnerability exploitation as key threats. Geopolitical […]

Europe’s technology backbone is becoming a cyber target Read More »

Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows

ICS/OT, OT, Ransomware /

Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows 2026-09-17 at 15:29 By Kevin Townsend Research shows attacks on manufacturers rose 40% in early 2026, as ransomware groups increasingly exploit the supply-chain disruption caused by operational shutdowns. The post Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows appeared first on SecurityWeek. This […]

Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows Read More »

Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison

Conti, cybercrime, hacker, Ransomware, sentenced /

Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison 2026-09-11 at 14:29 By Eduard Kovacs Oleksii Oleksiyovych Lytvynenko has been sentenced to 4 years in prison after he was arrested in Ireland in 2023. The post Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison appeared first on SecurityWeek. This article […]

Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison Read More »

Scroll to Top