Synology Warns of C3RB3R Ransomware Targeting NAS Devices
Synology has issued an urgent warning to update NAS devices amid a surge in C3RB3R ransomware attacks targeting vulnerable network-attached storage devices.
Tag
#Ransomware
18 results in the archive.
Qilin and INC Ransomware Groups Exploit Palo Alto Networks MFA Bypass Flaw
Palo Alto Networks has disclosed exploitation of CVE-2026-0257, an authentication bypass vulnerability in PAN-OS and Prisma Access used by Qilin and INC ransomware groups to gain unauthorized VPN access.
StopRansomware Advisory: SafePay Ransomware Targets Global Infrastructure
SafePay ransomware has targeted over 600 global victims, leveraging multiple CVEs and sophisticated evasion tactics to demand cryptocurrency ransoms.
Warlock ransomware exploits SharePoint in water and telecom attacks
The China-linked Warlock ransomware group exploited SharePoint vulnerabilities to gain initial access in attacks against water utilities, telecom providers, regional governments, and universities, underscoring ongoing risks to critical infrastructure and public sector organizations.
Tracking Storm-2570's Consistent Ransomware Tradecraft
Storm-2570 is a ransomware affiliate using consistent tools and techniques across multiple ransomware operations, posing detection and disruption challenges.
CISA Alerts on Ransomware Exploiting Critical VMware vCenter Flaw
CISA warns that ransomware gangs have begun exploiting a critical remote code execution vulnerability in VMware vCenter that was patched in July.
Cisco FMC Flaws Exploited by Ransomware and State Hackers
Two patched vulnerabilities in Cisco Secure Firewall Management Center are actively exploited by ransomware gangs and state-sponsored hackers, threatening critical network security infrastructure.
Berlin Confirms Data Theft After Rhysida Ransomware Attack
Berlin's city administration confirmed data theft following a ransomware attack by the Rhysida group, who are demanding ransom.
CISA: Ransomware Gangs Exploiting Windows Task Host Flaw
CISA confirms ransomware groups are actively exploiting a high-severity Windows Task Host vulnerability, posing increased risk to enterprise environments.
DeadLock ransomware uses decentralized infrastructure for extortion
Microsoft Threat Intelligence analyzes DeadLock ransomware, a Rust-based encryptor that employs decentralized victim communication and negotiation infrastructure alongside double extortion tactics.
#StopRansomware: Emerging Gunra Ransomware Threat
Gunra ransomware, a double-extortion RaaS exploiting VPN and RDP vulnerabilities, threatens government and critical infrastructure with data encryption and leaks.
Microsoft Teams Vishing Attacks Deploy Chaos Ransomware in North America
Attackers use vishing via Microsoft Teams to impersonate IT support and deploy Chaos ransomware targeting organizations in North America through social engineering.
Cl0p Affiliates Exploit PTC Windchill and FlexPLM with Unauthenticated RCE
Cl0p ransomware affiliates exploit unauthenticated remote code execution vulnerabilities in internet-facing PTC Windchill and FlexPLM systems to conduct data extortion campaigns.
Swiss Rail Firm Stadler Rejects $12.3M Ransom Demand After Cyberattack
Swiss rail manufacturer Stadler Rail faced a ransomware attack by the Everest gang targeting a shared supplier data exchange platform, refusing a $12.3 million ransom demand.
Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leak
The Anubis ransomware group has claimed responsibility for a cyberattack on Coca-Cola's Fairlife brand and threatened to leak stolen data if ransom demands are not met.
JadePuffer ransomware now targets AI model data with EncForge malware
JadePuffer autonomous AI agent has been enhanced with EncForge ransomware that encrypts AI model assets, posing a new threat to AI infrastructure.
US Charges Russian Operators of Bulletproof Hosting for Ransomware Gangs
US prosecutors charged three Russian nationals for operating a bulletproof hosting service that enabled ransomware gangs causing over $62 million in damages globally.
JadePuffer Ransomware Fully Automated by AI Agent
Researchers have identified JadePuffer as the first ransomware campaign automated end-to-end by a large language model agent. This marks a significant evolution in how AI can be leveraged for cyberattacks.