ransomware

April 29, 2026

Analyzing Vect 2.0: The Evolution of a High-Tempo Multi-Platform RaaS Threat

The ransomware landscape is shifting from localized malware attacks to sophisticated, multi-platform operations. Leading this charge is Vect 2.0, a…
Read More »
April 27, 2026

Beyond PowerShell: Anatomy of the Stealthy New ClickFix “Living-off-the-Land” Attack

Cybersecurity researchers have identified a sophisticated new evolution in the ClickFix attack lineage. Moving away from the relatively noisy use…
Read More »
April 24, 2026

Trigona Affiliates Pivot to Proprietary Data Exfiltration Tooling

In a significant tactical shift, ransomware operators are moving away from “living off the land” with common utilities and toward…
Read More »
April 22, 2026

Critical OS Command Injection Vulnerability (CVE-2026-21571) Identified in Atlassian Bamboo

Atlassian has issued a critical security advisory regarding a high-impact OS Command Injection vulnerability, tracked as CVE-2026-21571, affecting Atlassian Bamboo…
Read More »
April 22, 2026

Lotus Wiper: Destructive Malware Targeting Venezuelan Critical Infrastructure & OT Networks

In a sophisticated display of cyber-sabotage, a new breed of destructive malware known as Lotus Wiper has been identified targeting…
Read More »
April 22, 2026

The Convergence of State-Sponsored Espionage and Criminal MaaS: Unmasking the MuddyWater and CastleRAT Connection

In a significant development for the cybersecurity landscape, recent forensic investigations have uncovered a direct operational bridge between the Iranian-linked…
Read More »
April 22, 2026

LOTUSLITE: How Mustang Panda is Weaponizing Trusted Binaries Against the Banking Sector

In a sophisticated display of “living off the land” tradecraft, threat actors are increasingly leveraging Microsoft-signed developer tools to mask…
Read More »
April 21, 2026

The Rise of ‘Gentlemen’: A Multi-Platform RaaS Threat Targeting Enterprise Infrastructure

The ransomware landscape is witnessing the rapid ascent of a sophisticated Ransomware-as-a-Service (RaaS) operation known as Gentlemen. Unlike many opportunistic…
Read More »
April 21, 2026

Critical Alert: Active Exploitation of Cisco Catalyst SD-WAN Manager Demands Immediate Remediation

The cybersecurity landscape has shifted significantly following an urgent advisory from the Cybersecurity and Infrastructure Security Agency (CISA). Network defenders…
Read More »
April 21, 2026

Critical Exposure Alert: Over 6,000 Apache ActiveMQ Instances Vulnerable to Remote Code Execution

In a significant blow to enterprise perimeter security, a massive wave of internet-facing Apache ActiveMQ brokers has been identified as…
Read More »
April 17, 2026

Critical FortiSandbox Vulnerability CVE-2026-39808: Public Exploit Now Available

A proof-of-concept (PoC) exploit has been publicly released for a critical security flaw in Fortinet’s FortiSandbox, putting thousands of networks…
Read More »
April 17, 2026

Resurgent Payouts King Ransomware Group: BlackBasta Legacy Meets Advanced Evasion Tactics

A sophisticated new ransomware operation called Payouts King is rapidly emerging, leveraging proven social-engineering tactics from the now-defunct BlackBasta collective…
Read More »
April 15, 2026

Attackers Weaponize Google Cloud Storage to Deliver Remcos RAT Through Phishing Campaigns

Cybercriminals are increasingly leveraging Google Cloud Storage infrastructure to circumvent email and web content filters, deploying Remcos Remote Access Trojan…
Read More »
April 15, 2026

JanaWare: The Under-the-Radar Ransomware That Has Been Quietly Targeting Turkey Since 2020

A stealthy ransomware operation known as JanaWare has been silently preying on Turkish internet users for at least five years…
Read More »
April 14, 2026

CISA Warns of Two Actively Exploited Microsoft Vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) has added two newly confirmed, actively exploited security flaws in Microsoft products to…
Read More »
April 14, 2026

Critical ShowDoc Vulnerability Exposes Organizations to Unauthenticated RCE

Cybersecurity researchers have uncovered a severe vulnerability in ShowDoc, a widely used online document-sharing platform designed for IT teams. Tracked…
Read More »
April 14, 2026

CISA Warns of Critical Fortinet Vulnerability: CVE-2026-21643

On April 13, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-21643 to its Known Exploited Vulnerabilities (KEV) catalog.…
Read More »
April 13, 2026

VIPERTUNNEL: Python Malware Unmasked Through Fake DLLs & Multi-Stage Obfuscation

Hackers are leveraging a sophisticated Python backdoor called VIPERTUNNEL to establish covert command-and-control channels in victim networks. The attack chain…
Read More »
April 13, 2026

EDR Killers Broaden Ransomware Tactics, ESET Warns

Ransomware gangs are rapidly expanding their use of EDR killers, moving beyond vulnerable drivers to a broader mix of scripts,…
Read More »
April 9, 2026

CISA Issues Warning on Critical Ivanti EPMM Flaw Exploited in Ongoing Attacks

The Cybersecurity and Infrastructure security Agency (CISA) has issued an urgent alert regarding a critical security flaw in Ivanti Endpoint…
Read More »

Previous page Next page