Friday, November 21, 2025
Follow on LinkedIn

Authorities Sanctioned Russia-based Bulletproof Hosting Provider for Supporting Ransomware Operations

The U.S. Department of the Treasury, Australia, and the United Kingdom have announced coordinated sanctions against Media Land. This Russia-based bulletproof hosting company provides infrastructure...
Cephalus Ransomware RDP Credentials

Threat Actors Leveraging RDP Credentials to Deploy Cephalus Ransomware

A newly identified ransomware group, Cephalus, has emerged as a significant threat to organizations worldwide, exploiting stolen Remote Desktop Protocol (RDP) credentials to gain...
Cybersecurity Professionals Charged

Cybersecurity Professionals Charged for Deploying ALPHV BlackCat Ransomware Against US Companies

Two cybersecurity professionals have been federally charged for orchestrating a sophisticated ransomware campaign targeting multiple American businesses. Ryan Clifford Goldberg, 28, of Watkinsville, Georgia, and...
Conti  Ransomware Member Extradited

Conti Group Member Responsible for Deploying Ransomware Extradited to USA

A Ukrainian national accused of playing a key role in the notorious Conti ransomware operation has been extradited from Ireland to face federal charges...
Apache OpenOffice Data Breach

Akira Ransomware Allegedly Claims Theft of 23GB in Apache OpenOffice Breach

The notorious Akira ransomware group announced on October 29, 2025, that it successfully breached the systems of Apache OpenOffice, exfiltrating a staggering 23 gigabytes...

AI-Powered Ransomware Is the Emerging Threat That Could Bring Down Your Organization

The cybersecurity landscape has entered an unprecedented era of sophistication with the emergence of AI-powered ransomware attacks. Recent research from MIT Sloan and Safe...
BlackSuit Ransomware VMware ESXi

BlackSuit Ransomware Actors Breached Corporate Environment, Including 60+ VMware ESXi Hosts

The BlackSuit ransomware group, tracked as Ignoble Scorpius by cybersecurity experts, devastated a prominent manufacturer's operations. The attack, detailed in a recent Unit 42 report...
LLM-enabled MalTerminal Malware GPT-4

LLM-enabled MalTerminal Malware Leverages GPT-4 to Generate Ransomware Code

Cybersecurity researchers have identified what is believed to be the earliest known instance of malware that leverages a Large Language Model (LLM) to generate...
DFIR Tool Velociraptor Exploited

Hackers Use DFIR Tool ‘Velociraptor’ to Attack VMware ESXi and Windows Servers with Ransomware

Security researchers at Cisco Talos have confirmed that ransomware operators are actively exploiting Velociraptor, an open-source digital forensics and incident response (DFIR) tool, in...
New LockBit 5.0 Ransomware Variant

New LockBit 5.0 Ransomware Variant Attacking Windows, Linux, and ESXi Systems

Following a major law enforcement disruption in February 2024, the notorious LockBit ransomware group has resurfaced, marking its sixth anniversary with the release of...
CSN

Top 10