Coverage of ransomware attacks, extortion campaigns, and the criminal ecosystems behind them — including threat actor profiles, incident analysis, negotiation tactics, and defense strategies for security teams and executives.
Two IR pros jailed for BlackCat. Scattered Spider arrested in Finland. Cordial/Snarky Spider target SaaS. CISA's 48-hour cPanel mandate. Europol's velocity gap warning.
ShinyHunters claims 9M Medtronic records. A PyPI package with 1.1M monthly downloads pushes infostealer via CI/CD. North Korea targets macOS. 10,500 Zimbra servers exposed. AI engine exploited in 12 hours.
ShinyHunters breaches ADT via a phone call — 10M records at stake. Germany's Bundestag president's Signal account hijacked. 12-year Linux root bug disclosed. Notion leaks your team's emails.
A $5 tracker compromised a $585M NATO warship. Russia's RAMP ransomware database leaked. 500K UK DNA records sold on Alibaba. Anthropic's restricted AI bypassed on launch day. Blackwater deadline today.
A ransomware negotiator secretly worked for BlackCat. Ransomware hides inside QEMU virtual machines your EDR can't see. 22 OT vulnerabilities expose hospitals and power grids. 26 crypto stealers in Apple's App Store.
YouTube accounts hijacked via fake copyright strikes, CISA adds a SharePoint zero-day and a 2009 Excel bug, n8n weaponized for malware delivery, and ransomware blacks out European automotive data.
Ransomware groups are now disabling your endpoint security before striking. Plus Booking.com data exposed, Anodot breach spreads, and 4 missed stories.