Friday, October 23, 2026
Tag:

ransomware

Ransomware Gangs Use AI to Find and Steal the Most Sensitive Company Data Quickly

Ransomware operators are using generative AI to sharpen phishing campaigns, speed up reconnaissance, and identify sensitive corporate information to steal. Zscaler ThreatLabz describes a...

AI Used in 84% of Ransomware Attacks as Identity Infrastructure Comes Under Fire.

Artificial intelligence appeared in ransomware incidents affecting 84% of surveyed victims, while 87% reported attacks targeting or exploiting identity infrastructure. The findings connect accelerated...

Ransomware Gangs Threaten Employees’ Families as AI-Powered Attacks Escalate

Ransomware operators are extending their extortion tactics beyond corporate networks by threatening employees' families and using artificial intelligence to enhance their attacks, according to...

Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks

A Russian-speaking Gentlemen ransomware affiliate used the Model Context Protocol (MCP) to execute commands during live intrusions, turning an AI coding assistant’s tool interface...

Aembit Launches Support for Okta Cross App Access, Extending Enterprise Identity Controls to AI Agents

Silver Spring, Maryland, USA, September 22nd, 2026, CyberNewswire Aembit, the identity and access management (IAM) company for AI agents, today announced support for Cross App...

JADEPUFFER Evolves Agentic Ransomware to Target AI Models and Training Data

JADEPUFFER, the agentic threat actor first linked to an autonomous ransomware operation against exposed Langflow infrastructure, has evolved its tooling to target artificial intelligence...

Mantax OTAX Android Ransomware Spies on Users, Steals OTPs and Encrypts Files

Mantax OTAX is aggressive Android malware family combines ransomware, spyware, credential theft, and remote device-control features in a single infection chain. Linked to Indonesian...

Hackers Deploy New SloppyRAT via ClickFix to Enable Ransomware Lateral Movement

A new Windows remote-access trojan dubbed SloppyRAT, which appears to be positioned as an intrusion-enablement tool for ransomware operations. First observed in June 2026,...