UPDATED
Every story on Updated that mentions Ransomware Attacks, newest first. Each headline links to a summary page with the original source, so you can scan the topic in under a minute.
The Record by Recorded Future · · High severity
Ukrainian national Artem Stryzhak, 36, had pleaded guilty last year to charges related to participating in at least two well-known ransomware groups.
Slashdot · · High severity
An anonymous reader quotes a report from ProPublica: A Florida man who was the subject of a 2019 investigation by ProPublica was indicted last month on federal charges that he defrauded clients of his ransomware data recovery firm....
Flashpoint · · Critical severity
Table Of Contents Table of Contents Introducing Ransomware in the Age of AI: A Survival Guide for Defenders Understanding the Modern Ransomware Attack Lifecycle Build a More Proactive Defense Against Ransomware More subscribe to our...
The Hacker News · · High severity
Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation feature to conduct impersonation...
The Hacker News · · High severity
Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an "Autonomous Red Team Kill Chain...
SecurityWeek · · High severity
Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe. The post In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents,...
HackRead · · Critical severity
Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials…
AlienVault OTX · · High severity
Threat researchers discovered an AI-driven intrusion ecosystem operated by affiliates of INC Ransomware and The Gentlemen Ransomware groups through seven exposed command-and-control servers. The operators integrated commercial AI models...
Cybersecurity Dive - Latest News · · Critical severity
The group has been linked to a 2025 attack targeting technology firm Ingram Micro.
SecurityWeek · · High severity
Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents. The post High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 appeared...
HackRead · · High severity
SOCRadar has found seven exposed servers linked to INC and The Gentlemen ransomware affiliates, holding AI chats, stolen…
Infosecurity Magazine · · Critical severity
Cybercriminal groups The Gentlemen and Qilin dominate ransomware attacks - and both are evolving their tactics in an attempt to outdo one another
Help Net Security · · High severity
Several ransomware groups are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks’ PAN-OS GlobalProtect patched in May, to break into organizations in sectors ranging from healthcare and education to government and...
Infosecurity Magazine · · Critical severity
The ICO has slammed security failings by the Welsh local government data unit and IT service provider following the 2024 incident
BleepingComputer · · Critical severity
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024.
AlienVault OTX · · High severity
The Gentlemen is a Russian-speaking ransomware-as-a-service group that emerged in mid-2025 after operating as an affiliate of LockBit and Qilin. The group offers affiliates up to 90% of ransom revenue and has claimed over 800 victims...
The Record by Recorded Future · · Critical severity
The FBI and cyber agencies in the UK and Germany said SafePay is targeting businesses and critical infrastructure by guessing passwords, exploiting vulnerabilities and using phishing attacks.
CISA Alerts · · Critical severity
Advisory at a Glance Title #StopRansomware: SafePay Ransomware Original Publication October 20, 2026 Executive Summary This advisory details recent activity by the SafePay ransomware group. SafePay actors have been highly active since...
The Register · · High severity
Multiple ransomware groups, including Qilin and Inc, have been exploiting a high-severity authentication bypass bug in Palo Alto Networks' PAN-OS, with Unit 42 investigating attacks since early June across numerous industries, such as...
The Hacker News · · High severity
Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an...
Cybersecurity Dive - Latest News · · High severity
Multiple threat actors have exploited a high-severity flaw in the company’s GlobalProtect portal.
Graham Cluley · · High severity
A 28-year-old Russian man has been arrested by German police, suspected of being a key member of the Qilin ransomware gang. Detectives have linked the man to the attack against blood-testing firm Synnovis, that disrupted London...
HackRead · · High severity
Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate an extortion site used to pressure nearly 100 organisations.
Help Net Security · · Critical severity
Ransomware attackers threatened employees’ family members or friends at 37% of organizations surveyed for Semperis’ 2026 Ransomware Risk Report. The survey covered 1,200 IT and security professionals at organizations that had...
Graham Cluley · · High severity
Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and what organisations can do to protect themselves. Read more in my article on...
darkreading · · High severity
The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.
The Record by Recorded Future · · High severity
Anne Arundel County, Maryland, said an intruder stole files from government systems, and investigators are working to assess how much data was exposed.
Infosecurity Magazine · · High severity
New report warns that threats of violence against employees of organizations hit by ransomware are on the rise as attackers find new ways to guarantee payments
AlienVault OTX · · High severity
DragonForce is a financially motivated ransomware operation that emerged in August 2023, initially using leaked LockBit 3.0 code and later transitioning to Conti v3-based variants. Operating as a Ransomware-as-a-Service model, they...
Graham Cluley · · High severity
A ransomware negotiator attended a cybersecurity conference, only to be arrested by the FBI in connection with its investigation into the ShinyHunters gang. Meanwhile, hackers get the keys to ASOS's app and the chance to message every...
TechCentral · · High severity
The gang behind the MIP Holdings breach ranks fourth on leak sites, but Microsoft is sceptical.
darkreading · · High severity
Organizations are reporting that employees face threats to their families, stalking, physical violence, and abduction. But these alarming claims are hard to verify.
The Register · · High severity
Tim Beasley, a senior incident response consultant at Semperis, was investigating a cyberattack involving Russia’s Midnight Blizzard when a package containing nesting dolls and other regional gifts showed up on his doorstep. At the...
HackRead · · High severity
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.
CIO&Leader · · High severity
PT ITSEC Asia Tbk, a cybersecurity and AI company operating in Indonesia and across the Asia Pacific, today announced the release of a new research whitepaper, From Sample to Signal: Uncovering the GodDamn Ransomware Operation . The...
PYMNTS.com · · High severity
A ransomware gang claimed Monday (Oct. 12) that it stole data from payment network MoneyGram and will publish the data if the company does not start negotiating, Cybernews reported Monday (Oct. 12), citing the gang’s claim posted on the...
AlienVault OTX · · High severity
A North Korean threat actor distributed Funhouse ransomware through malicious Korean-language documents disguised as resumes. Funhouse is a variant of the previously observed Endpoint ransomware. The attack chain involves multi-stage...
darkreading · · High severity
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money.
Infosecurity Magazine · · High severity
Leaked documents suggest a multi-pronged operation, with social engineering and more technical attackers working together to manipulate a single target
SecurityWeek · · High severity
The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference. The post Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe appeared first on...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free