Ransomware operators are extending their extortion tactics beyond corporate networks by threatening employees' families and using artificial intelligence to enhance…
A Kimsuky campaign that delivers Funhouse ransomware through a malicious Hangul document disguised as a resume. The operation combines embedded…
A Russian-speaking Gentlemen ransomware affiliate used the Model Context Protocol (MCP) to execute commands during live intrusions, turning an AI…
International law enforcement authorities have arrested three suspects linked to the KillSec ransomware group, including a 16-year-old who is alleged…
Keio Corporation has confirmed that a ransomware attack has caused a system failure within parts of its group infrastructure, disrupting…
A newly identified ransomware operation tracked as Galago has emerged with apparent operational links to the Panzer ransomware group, raising…
A ransomware incident in which attackers used Active Directory Group Policy to disrupt operations without deploying a Windows encryptor or…
Feral Wolf has expanded its ransomware tradecraft by abusing exposed Atlassian Confluence servers and insecure 1C:Enterprise deployments to gain access…
A newly observed ransomware operation dubbed SETTRA is abusing the legitimate MeshAgent remote monitoring and management platform for persistence while…
JADEPUFFER, the agentic threat actor first linked to an autonomous ransomware operation against exposed Langflow infrastructure, has evolved its tooling…