UPDATED
Manufacturing Accounts for 22% of all Ransomware Victims
Infosecurity Magazine · · Critical severity
Black Kite has found that manufacturing remained the most targeted sector for ransomware attacks, and saw a big jump in incidents in H1 2026
Ransomware Attacks News
New Settra Ransomware Strain Deploys MeshAgent RMM for Persistence
IT Security Guru · · High severity
Researchers at Huntress have detailed two ransomware incidents involving Settra, a relatively new strain first observed in June, and revealed a consistent set of post-compromise tactics defenders can use to spot the threat before...
Druva expands identity resilience with ransomware detection
Help Net Security · · High severity
Druva has announced new capabilities for Druva Identity Resilience alongside the launch of Ransomware Detection, a new feature fueled by a proprietary AI threat pipeline. Powered by Dru MetaGraph, the new offerings use behavioral...
Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows
SecurityWeek · · Critical severity
Research shows attacks on manufacturers rose 40% in early 2026, as ransomware groups increasingly exploit the supply-chain disruption caused by operational shutdowns. The post Ransomware Attacks on Manufacturers Surge as Supply Chain...
Middle East ransomware activity surges over 20X as hacktivism, state-linked espionage and AI-assisted threats converge
Tahawul Tech · · High severity
Ransomware activity targeting the Middle East surged to its highest level during the 17-month period assessed by CloudSEK , jumping from 17 threat intelligence feeds in April 2025 to 357 in June 2026 — more than a 20-fold increase. The...
Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers
The Hacker News · · High severity
Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky. The cybersecurity vendor said it has identified attacks...
OTX Threat: C2Looper: A New Backdoor Likely Tied To Ransomware With GitHub C2
AlienVault OTX · · High severity
In July 2026, a new Rust-based malware family called C2Looper was identified, likely used by ransomware-related threat actors. The malware is assessed with low to medium confidence to be delivered through multi-stage ClickFix infection...
The true cost of a ransomware attack, with and without BCDR
BleepingComputer · · Critical severity
The ransom itself can be only a fraction of the total cost of a ransomware attack, with downtime, recovery, remediation, and legal obligations adding millions to the bill. Datto explains how a mature BCDR strategy can reduce downtime...
Most Firms Unable to Recover Quickly from Ransomware
Infosecurity Magazine · · High severity
Fenix24 found only four of more than 800 clients came close to stated ransomware recovery targets of 24-48 hours
Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler
The Register · · High severity
A Swiss court has sentenced a 52-year-old Ukrainian ransomware developer to 12 years and nine months in prison for his role in attacks on companies including Stadler Rail. Zurich District Court found that the man developed LockerGoga,...
CISA: Critical VMware RCE flaw now exploited by ransomware gangs
BleepingComputer · · High severity
Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ransomware gangs have now joined ongoing attacks exploiting a critical VMware vCenter vulnerability patched in July.
Exclusive: 45Drives expands ransomware protection and adds multi-server management to its storage line
SiliconANGLE · · High severity
Open-source data storage provider 45Drives Ltd. today announced an expansion of its SnapShield cybersecurity platform that adds protection against data exfiltration and centralized management across multiple servers and locations. The...
OTX Threat: Hits Safe Mode: Ransomware Rebooting Around EDR
AlienVault OTX · · High severity
An Akira ransomware affiliate gained initial access through an exposed SonicWall VPN without multi-factor authentication via credential spraying. After compromising the domain controller, the attacker performed Active Directory...
OTX Threat: Cl0p Ransomware: Attack Pattern in Threat Intelligence
AlienVault OTX · · Critical severity
A comprehensive analysis of Cl0p ransomware operations spanning six years reveals a sophisticated threat actor with systematic focus on managed file transfer infrastructure. The group has exploited zero-day vulnerabilities in nine...
A new Android attack combines malware and ransomware in a cocktail of cybercrime
TechRadar · · High severity
A new Android attack combines malware and ransomware in a cocktail of cybercrime
Ukrainian hacker gets four years in US prison over Conti ransomware attacks
The Record by Recorded Future · · Critical severity
A Ukrainian national was sentenced to four years in a U.S. prison for his role in the notorious Conti ransomware operation, which targeted more than 1,000 victims worldwide before shutting down in 2022.
Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison
SecurityWeek · · High severity
Oleksii Oleksiyovych Lytvynenko has been sentenced to 4 years in prison after he was arrested in Ireland in 2023. The post Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison appeared first on SecurityWeek .
OTX Threat: SloppyRAT: A New Tool For Ransomware Attacks
AlienVault OTX · · Critical severity
In June 2026, a new malware family named SloppyRAT was identified, likely used by ransomware-related threat actors to establish footholds for lateral movement. Delivered through multi-stage ClickFix infection chains, the malware...
Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
The Hacker News · · High severity
Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilities. The attacks leverage...
Conti ransomware gang member sentenced to 4 years in prison
BleepingComputer · · Critical severity
A Ukrainian national has been sentenced to four years in prison for his role in Conti ransomware attacks between 2021 and 2022.
Building a ransomware decision tree before the call comes in
Help Net Security · · High severity
In this Help Net Security video, Kerri Shafer-Page, VP of Incident Response at Arctic Wolf, walks through the ransomware decision tree in this video. She covers four areas where decisions need settling in advance, starting with...
Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers
BleepingComputer · · High severity
Cisco Talos says two recently patched Secure Firewall Management Center (FMC) vulnerabilities have been exploited by three separate threat clusters linked to ransomware and state-sponsored attacks.
MantaxOtax Android Malware Combines Ransomware With Spyware
Infosecurity Magazine · · High severity
MantaxOtax Android malware combines ransomware with extensive spyware capabilities
Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)
Help Net Security · · Critical severity
State-sponsored and financially-motivated attackers are actively exploiting CVE-2026-20079, a critical authentication bypass vulnerability in Cisco Secure Firewall Management Center (FMC), which is used for centrally managing multiple...
August Cyber Threats Rise as Ransomware Nearly Doubles and GenAI Data Exposure Becomes a New Enterprise Risk
TechTrends Africa · · High severity
Check Point Research reveals a 22% year-on-year increase in global cyber attacks and a rise in phishing activity. The post August Cyber Threats Rise as Ransomware Nearly Doubles and GenAI Data Exposure Becomes a New Enterprise Risk...
CISA: WatchGuard RCE flaw now exploited in ransomware attacks
BleepingComputer · · Critical severity
Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a critical WatchGuard Firebox firewall vulnerability, which it flagged as actively exploited in December.
OTX Threat: Mantax Otax: Indonesian Mobile Ransomware with Spyware Integration
AlienVault OTX · · High severity
A sophisticated mobile threat linked to Indonesian actors combines ransomware and spyware capabilities in a single attack vector. The malware is distributed via third-party file-sharing platforms through social engineering, targeting...
Fake GTA6 ‘Leaked Download’ Caught Spreading RATs, Infostealer and Wiper Ransomware
IT Security Guru · · High severity
Cybersecurity firm Huntress has uncovered a malware campaign that preys on excitement for Grand Theft Auto VI (GTA6), packaging remote access trojans, an infostealer, and destructive ransomware inside fake “leaked” copies of the hotly...
Veradigm warns of patient data breach after ransomware gang claims attack
BleepingComputer · · High severity
Healthcare technology company Veradigm disclosed a data breach after a cybersecurity incident at one of its third-party vendors exposed patients' personal data.
CRPx0 ransomware: what you need to know
Graham Cluley · · High severity
CRPx0 is a cybercrime operation that started off operating a scam before pivoting into a fully-blown ransomware and cryptocurrency business. Read more in my article on the Fortra blog.
Ransomware negotiation tactics have turned into a business process
Help Net Security · · High severity
In this Help Net Security video, Dave Ross, Senior Director of the Intelligence Fusion Team at Intel 471, explains what happens behind the scenes during ransomware negotiations. Ross walks through the tactics groups use once an attack...
Ransomware hackers dump 1.4 million stolen records from German government
TechRadar · · High severity
Ransomware hackers dump 1.4 million stolen records from German government
AI agents carried out every step of this ransomware attack – then left the victim an 80-page security audit
The Register · · Critical severity
A human ransomware crook used frontier AI models to breach an enterprise network in less than 10 hours, an intrusion Unit 42 says would normally take human operators around two weeks. The human attacker then told negotiators that they...
OTX Threat: One leftover build path links an infostealer, a remote-access tool, and a ransomware family
AlienVault OTX · · High severity
A compilation artifact, specifically a developer's home directory path (/home/tcherber/.cargo/), linked multiple malware families including a Rust-based infostealer named Zer0day Stealer, an HVNC remote-control tool, and ENIGMA Locker...
New pro-Ukraine hacker group targets Russian companies with custom ransomware
The Record by Recorded Future · · High severity
The group, which calls itself VantaCore, has targeted at least seven known victims, Russian cybersecurity firm F6 said in a report published this week.
Ransomware protection for MSPs: A 6-point checklist for faster recovery
BleepingComputer · · High severity
Ransomware resilience requires more than backups or endpoint detection alone. Acronis outlines six capabilities MSPs should test across client environments, from reducing exposure and detecting attacks to preserving recovery points and...
Stronger Security Drives Ransomware Groups to Recruit From Within
darkreading · · Critical severity
Some security researchers have observed an uptick in insider-assisted ransomware attacks, but malicious insiders pose other threats that cost companies millions.
Ransomware Gang Claims Nutex Health Data Breach
SecurityWeek · · High severity
The company has notified the SEC that hackers accessed patient, employee, provider, business, and financial information. The post Ransomware Gang Claims Nutex Health Data Breach appeared first on SecurityWeek .
AI Agents Are Now Orchestrating Entire Ransomware Attacks, Signaling a New Threat Era
Telecom Review · · Critical severity
Security researchers at Sysdig have identified JADEPUFFER as the first ransomware campaign carried out entirely by an autonomous AI agent, with no human operator directing individual steps. After exploiting a vulnerability in Langflow,...
Berlin confirms data theft after Rhysida ransomware attack claims
BleepingComputer · · Critical severity
Berlin's city administration has confirmed that cybercriminals are attempting to extort the city after the Rhysida ransomware gang listed it on their data leak site.
Get these stories the moment they break
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated freeTech news by section
- Top Tech News
- Cybersecurity News
- AI & Deep Tech News
- DevOps & Cloud News
- Funding, M&A & Layoffs
- Enterprise IT & CIO News
- Global Tech News
- Tech Rumors & Leaks
- Tech Careers News
- Trending Tech News
Tech news by region
- India & Middle East Tech News
- Africa Tech News
- Asia & China Tech News
- APAC Tech News
- Europe Tech News
- North America Tech News
Trending topics
- Ransomware Attacks
- Data Breaches
- Zero-Day Vulnerabilities
- CVEs & Actively Exploited Vulnerabilities
- Phishing Attacks
- Malware & Threat Intelligence
- Software Supply Chain Attacks
- Generative AI
- OpenAI & ChatGPT
- Anthropic & Claude
- Google Gemini & DeepMind
- Large Language Models (LLMs)
- AI Agents
- Nvidia & AI Chips
- Semiconductors & Chips
- Quantum Computing
- Kubernetes & Containers
- AWS (Amazon Web Services)
- Microsoft & Azure
- Apple
- Google & Alphabet
- Tech Layoffs
- Tech IPOs
- Tech Acquisitions & Mergers
- Startup Funding Rounds
- Indian Startups
- Data Privacy & Regulation
- Open Source