-
On December 25, while much of the world was observing Christmas, the Everest ransomware group published a new…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
HardBit ransomware continues its evolution with the release of version 4.0, introducing sophisticated mechanisms to establish persistence through vulnerable network services. The latest variant leverages open Remote Desktop Protocol (RDP) and Server Me…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Romania’s critical water infrastructure faced a significant cyber threat when the National Administration “Romanian Waters” disclosed a ransomware attack affecting multiple government agencies on December 20, 2025. The incident compro…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ukrainian man pleads guilty in United States to deploying Nefilim ransomware in global extortion scheme targeting companies across multiple countries.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The notorious Clop ransomware group has launched a new data extortion campaign targeting internet-facing Gladinet CentreStack file servers, exploiting an unknown vulnerability to steal sensitive corporate information. Incident responders from the Curat…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
RansomHouse, a ransomware-as-a-service (RaaS) operation managed by the threat group Jolly Scorpius, has significantly enhanced its encryption capabilities, marking a critical escalation in the threat landscape. Recent analysis of RansomHouse binaries r…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
SentinelLABS has released a comprehensive assessment regarding the integration of Large Language Models (LLMs) into the ransomware ecosystem, concluding that while AI is not yet driving a fundamental transformation in tactics, it is significantly accel…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
In a significant escalation of the global cyber threat landscape, the notorious threat group ShinyHunters appears to be transitioning from data theft to full-scale ransomware operations. Cybersecurity researchers have identified an early build of a new…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A prolific cybercriminal group that calls itself “Scattered LAPSUS$ Hunters” made headlines regularly this year by stealing data from and publicly mass extorting dozens of major corporations. But the tables seem to have turned somewhat for “Rey,” the moniker chosen by the technical operator and public face of the hacker group: Earlier this week, Rey confirmed his real life identity and agreed to an interview after KrebsOnSecurity tracked him down and contacted his father.
·
A Little Sunshine, BreachForums, Breadcrumbs, CrowdStrike, Cyb3r Drag0nz Team, cybero5tdev@proton.me, Disney/Hulu, FedEx, Flashpoint, Hellcat, Hikki-Chan, KELA, LAPSUS$, Ne’er-Do-Well News, o5tdev, Orange Romania, Ransomware, Saif Al-Din Khader, Scattered LAPSUS$ Hunters, Scattered Spider, Schneider Electric, SentinelOne, ShinyHunters, ShinySp1d3r, SpyCloud, Telefonica, Toyota, U.S. Centers for Disease Control and Prevention, ups, wristmug, Zaid Khader¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Akira ransomware group has begun weaponizing vulnerabilities in SonicWall SSL VPN devices, turning merger-and-acquisition (M&A) processes into high-speed launchpads for cyberattacks. This trend exposes dangerous blind spots for businesses acquiring smaller companies, as inherited SonicWall devices often serve as easy entry points for attackers. How Akira Ransomware Targets M&A Environments During mergers and acquisitions, […] The post Akira Ransomware Uses SonicWall VPN Exploit to Exfiltrate Sensitive Data appeared first on Cyber Security News.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
