UPDATED
Krebs on Security · · High severity
A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90...
BleepingComputer · · High severity
Law enforcement has dismantled the “AudiA6” cryptocurrency service allegedly used by ransomware actors and other cybercriminals to launder more than $380 million.
BleepingComputer · · High severity
A Ukrainian national extradited from Ireland to the United States last year has pleaded guilty to conspiracy charges tied to the Conti ransomware operation.
IT Pro · · High severity
Shattered glass fragmenting into a multitude of sharp splinters pictured against a black backdrop.
BleepingComputer · · High severity
Treasury's Office of Foreign Assets Control (OFAC) has announced sanctions against Nobitex, Iran's largest cryptocurrency exchange, for facilitating payments related to terrorist activities.
Seqrite Blog · · Critical severity
Introduction Ransomware attacks continue to evolve at an alarming pace, affecting organizations of all sizes across industries. Cybercriminals are no longer relying on simple encryption tactics alone; modern ransomware campaigns involve...
SANS Internet Storm Center · · High severity
Most Akira write-ups focus on the ransom note or the encryption routine. By the time those show up the interesting forensic work is over. The questions that matter to defenders sit earlier.
UpGuard Blog · · Critical severity
Read how veteran CISO Nick Gicinto saved his alma mater from a LockBit ransomware attack by discarding the standard playbook.
Graham Cluley · · High severity
A notorious ransomware gang claims to have stolen MyPillow's private data, but CEO Mike Lindell calls it a politically motivated "hit job." With the countdown ticking toward a massive dark web leak, who is telling the truth? Read more...
IT Pro · · High severity
Profit margin concept image showing digital interface with multiple charts showing an upward trajectory.
BleepingComputer · · Critical severity
A threat actor is using an AI-built ransomware attack toolkit that automates Active Directory discovery and helps evade endpoint detection and response (EDR) solutions.
The Register · · High severity
Even ransomware cartels make mistakes, and in this case, it was a biggie that could have landed the responsible crim in a Russian gulag: accidentally infecting a company located in a Commonwealth of Independent States country. In what...
TechRadar · · High severity
Phishing, E-Mail, Network Security, Computer Hacker, Cloud Computing Cyber Security 3d Illustration
TechRadar · · Critical severity
A hooded figure in front of a laptop. Digital symbols obscure his face and appear to be pouring out of his head
Seqrite Blog · · Critical severity
Ransomware attacks have evolved into one of the most disruptive cyber threats facing businesses today. From healthcare institutions and manufacturing units to government agencies and small businesses, no organization is immune....
The Hacker News · · Critical severity
Authorities in Europe and North America have announced the dismantling of a criminal virtual private network (VPN) service used by criminal actors to obscure the origins of ransomware attacks, data theft, scanning, and denial-of-service...
TechCrunch · · High severity
First VPN promised hackers complete anonymity for their cyberattacks. But Europol said it was able to notify the service’s users that they have now been identified.
Help Net Security · · High severity
First VPN, a virtual private network service marketed to cybercriminals, promising anonymity for its users, was taken offline on May 19 and 20 as part of Operation Saffron. During the operation, French and Dutch authorities, with...
The Record by Recorded Future · · Critical severity
The international operation targeted a service known as First VPN, which had been marketed for years on Russian-speaking cybercrime forums as a secure way for criminals to evade law enforcement.
BleepingComputer · · High severity
A virtual private network service called 'First VPN,' used in ransomware and data theft attacks, has been taken offline in a joint international law enforcement operation.
HackRead · · High severity
Europol has seized First VPN, a service used by ransomware gangs, arrested its administrator and gained access to data linked to thousands of users.
TechRepublic · · High severity
Microsoft disrupted Fox Tempest, a malware-signing service accused of abusing Azure certificates to disguise ransomware and malware as trusted software. The post Microsoft Disrupts Malware-Signing Service Used by Ransomware Gangs...
The Hacker News · · Critical severity
Microsoft on Tuesday said it disrupted a malware-signing-as-a-service (MSaaS) operation that weaponized the company's Artifact Signing system to deliver malicious code and conduct ransomware and other attacks, compromising thousands of...
TechRadar · · High severity
CSO Online Security · · High severity
Microsoft has disrupted the infrastructure powering the largest malware code-signing service used to help ransomware groups and other cybercriminals make malicious programs harder to detect on Windows. The threat actors behind the...
The Register · · High severity
Microsoft seized websites and took down hundreds of virtual machines running a cybercrime service that allegedly sold code-signing certificates to ransomware gangs, thus making their malware look like legitimate software – and allowing...
TechRepublic · · High severity
DragonForce claims it stole 390GB from AdvancedHEALTH, including patient data and minors’ records, as breach notices and legal scrutiny begin. The post AdvancedHEALTH Ransomware Claim Includes 2.3M Patient Data Lines appeared first on...
The Record by Recorded Future · · High severity
The company unsealed a legal case in U.S. District Court on Tuesday detailing the disruption of Fox Tempest — a popular service that has operated since May 2025 and provides cybercriminals with code signing tools.
Infosecurity Magazine · · High severity
Microsoft’s Digital Crimes Unit has taken down the infrastructure of Fox Tempest, a prolific cybercrime-enabling threat group
HackRead · · High severity
The Gentlemen ransomware gang suffered an internal breach in May 2026, exposing victim data, affiliate activity, and backend operations.
Help Net Security · · High severity
Ransomware, supply chain vulnerabilities, insider threats, compliance failures, and software disruptions remain major concerns for security leaders, according to The Ransomware Reality: Zero Days to Recover report by Absolute Security....
CSO Online Security · · High severity
The moment every boardroom dreads There is a moment in almost every ransomware negotiation — usually around 36 hours, when legal, IT and the CFO are all in the same room — when someone says it out loud: “Let’s just see what the...
Graham Cluley ·
Pay up, or we'll pay someone to pay you a visit. Cybercrime gangs are increasingly turning to real-world threats - and even hiring local muscle to deliver the message. Read more in my article on the Hot for Security blog.
PYMNTS.com · · Critical severity
Foxconn , which manufactures products for Apple and Google, is reportedly recovering from a ransomware attack. A company spokesperson confirmed the incident for web publication BleepingComputer Wednesday (May 13), following claims...
TechCrunch · · High severity
A ransomware group has claimed responsibility for hacking the electronics manufacturing giant Foxconn, and is attempting to extort the company.
Infosecurity Magazine · · Critical severity
Instructure says it reached an agreement with ShinyHunters over the Canvas breach data
BleepingComputer · · High severity
Foxconn, the world's largest electronics manufacturer, says some of its North American factories are now working to resume normal operations after a cyberattack.
Infosecurity Magazine · · High severity
Survey of cybersecurity leaders suggests that majority would strongly consider paying cybercriminals, if that’s what it took to help restore encrypted systems
MacRumors · · Critical severity
Apple supplier Foxconn has confirmed a cyberattack on several of its U.S. factories, after a ransomware group claimed to have stolen confidential Apple project files as part of the hack. The Nitrogen group posted the breach on its data...
9to5Mac · · Critical severity
WIRED reports that Foxconn acknowledged that some of its North American factories “suffered a cyberattack” in recent days, after the ransomware group Nitrogen claimed to have stolen 8TB of data from the company.
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free