UPDATED
Help Net Security · · High severity
Cisco Talos has identified a Rust-based remote access trojan it attributes to the Chaos ransomware group, named msaRAT after four of the binding names left in the binary. The tool starts its own instance of Chrome or Edge on the victim...
The Record by Recorded Future · · High severity
Stadler Rail said it will not make a $12.3 million ransom payment after cybercriminals stole technical data from a supplier's file-sharing platform.
Infosecurity Magazine · · High severity
A new study of organizations which have fallen victim to ransomware suggests the rise of AI-tools being used by hackers is making life harder for defenders
CIO&Leader · · High severity
, a global leader in human- and agent-centric security, today released its 2026 AI-Era Ransomware Report , revealing that artificial intelligence is making ransomware significantly more successful by helping attackers create more...
darkreading · · Critical severity
A cyberattack on a food and logistics firm disrupts the supply of frozen food to thousands of clients, including major franchises like Kentucky Fried Chicken.
TechRadar · · High severity
A bizarre new malware campaign hacks your printer and forces it to print out ransomware demands
Cybersecurity Dive - Latest News · · Critical severity
The attackers previously exploited vulnerabilities or used stolen credentials for initial access.
BleepingComputer · · Critical severity
Enterprise AI can accelerate ransomware attacks when AI assistants and agents inherit excessive permissions or compromised identities. Acronis explains how identity controls, governance, and least-privilege access help reduce AI-enabled...
ExtremeTech · · High severity
With AI-powered ransomware, attackers are becoming ever more sophisticated.
The Register · · High severity
Authoritative advice against paying ransom demands is everywhere in UK PLC, and one warning keeps proving true in 2026: paying doesn't mean the crooks leave you alone. Fresh Proofpoint data shows that 58 percent of extorted...
IT Security Guru · · Critical severity
Global ransomware attacks climbed 3% in the second quarter of 2026, rising from 2,165 incidents in Q1 to 2,229, according to NCC Group’s latest Quarterly Cyber Threat Intelligence Report . While the increase in volume was modest, the...
IT Security Guru · · Critical severity
A new threat intelligence report has painted a stark picture of the cyber risks facing the UK and Ireland, describing an environment in which ransomware gangs, nation-state spies and politically motivated hacktivists are increasingly...
SecurityWeek · · High severity
The Anubis ransomware group claims to have stolen 1 TB of confidential data from the Coca-Cola subsidiary. The post Ransomware Group Threatening to Leak Data Stolen From Coca-Cola’s Fairlife appeared first on SecurityWeek .
UpGuard Blog · · High severity
Navigate modern ransomware and double extortion with this 5-phase incident response checklist based on NIST guidelines. Contain, recover, and harden today.
darkreading · · High severity
Researchers pointed to fragmentation of the ransomware ecosystem, the emergence of new attackers, and expansion of attacks on less defended organizations.
BleepingComputer · · High severity
The Anubis ransomware gang has claimed responsibility for the cyberattack on Coca-Cola's Fairlife dairy subsidiary, threatening to publish allegedly stolen corporate data unless the company pays a ransom.
Flashpoint · · High severity
Blogs Blog Understanding Illicit Ecosystems: Inside Rehub’s Rise as a Primary Ransomware Marketplace As part of our ongoing series, Flashpoint intelligence tracks Rehub, breaking down its migration, infrastructure, and the various RaaS...
Cybersecurity Dive - Latest News · · High severity
Many organizations still aren’t securing their email or patching vulnerabilities after recovering from attacks, a new report found.
Intelligent CIO Africa · · High severity
Forescout Technologies has released its 2026 H1 Threat Review Report , analysing global cyberthreat trends during the first half of 2026. The report, produced by Forescout Research – Vedere Labs, examines more than 37,000 newly...
Intelligent CIO ME · · High severity
Forescout Technologies has released its 2026 H1 Threat Review Report , analysing global cyberthreat trends during the first half of 2026. The report, produced by Forescout Research – Vedere Labs, examines more than 37,000 newly...
The Hacker News · · Critical severity
Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) ransomware on victim environments. Arctic Wolf Labs said it investigated...
Help Net Security · · High severity
JadePuffer, the threat actor behind the recently documented extortion operation executed end-to-end by an AI agent, is now attempting to leverage ENCFORGE, novel ransomware created to target AI and machine learning (ML) infrastructure....
Infosecurity Magazine · · High severity
Analysis by Black Kite warns that ransomware ecosystem is becoming bigger and more fragmented
AlienVault OTX · · High severity
An advanced threat actor identified as JADEPUFFER has evolved its capabilities, now deploying ENCFORGE, a specialized ransomware targeting AI and ML infrastructure. The actor exploits CVE-2025-3248 in Langflow to gain initial access,...
BleepingComputer · · High severity
The Qilin ransomware gang is exploiting a critical PAN-OS GlobalProtect authentication bypass flaw to breach victims' networks, according to cybersecurity company Arctic Wolf.
Tahawul Tech · · Critical severity
Ross McKerchar, chief information security officer, Sophos. Exploited vulnerabilities are no longer the primary root cause of ransomware attacks, as cybercriminals prioritise malicious emails and phishing campaigns Dubai — Sophos , a...
The Hacker News · · High severity
Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operator it first documented earlier this month. The same operator has now been spotted deploying ENCFORGE, a new compiled...
DQ : Latest Posts · · High severity
Recently ESET researchers analysed the Endpoint Detection and Response (EDR)-killing toolset of the ransomware-as-a-service (RaaS) gang Gentlemen, one of the most active gangs that has emerged since the beginning of 2026 in the...
BleepingComputer · · High severity
The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, such as training datasets, vector databases, and model checkpoints.
TechSpective · · Critical severity
The data coming out of 2025 shows a clear shift in how ransomware operates, and in how organizations need to think about resilience. Disclosed ransomware attacks rose by nearly 50% year over year — a record high — while an […] The post...
Ars Technica · · High severity
Nearly half of companies that are targets of a ransomware cyber attack end up paying a ransom to release their data or systems, according to 2025 research from cyber security group Sophos, while the median amount demanded is rising....
Infosecurity Magazine · · High severity
JadePuffer follow-up campaign deployed ENCFORGE locker built to destroy AI model artifacts
Cyber Defense Magazine · · High severity
Operational Impact and Response The Coca-Cola Company revealed a cyber incident impacting its Fairlife dairy business on July 16, 2026. The disruption forced an immediate nationwide pause on U.S. The post Ransomware in the Dairy Aisle:...
PYMNTS.com · · High severity
Governments have reportedly begun banning ransomware payments to hackers as demand amounts continue to rise. That’s according to a report Monday (July 20) from the Financial Times (FT), which cites the example of the U.K.’s planned ban...
TechRadar · · Critical severity
Ransomware attacks hit SMBs harder than ever as cybercrime gang rivalry heats up
CXO Insight Middle East · · Critical severity
Compromised identities have become the leading entry point for ransomware attacks, overtaking exploited software vulnerabilities as cybercriminals increasingly rely on malicious email and phishing campaigns to gain access to...
darkreading · · Critical severity
When chained together, the two vulnerabilities allow threat actors to gain root-level capabilities on SonicWall's mobile access appliances.
Cybersecurity Dive - Latest News · · Critical severity
The beverage company is still working to determine the full scope of the breach at its Fairlife business.
Infosecurity Magazine · · High severity
Government organizations are targeted by attackers who know agencies cannot afford disruption to public services
Flashpoint · · High severity
Blogs Blog Inside Qilin Ransomware: Custom Rust Loader and Kernel-Level EDR Killer In this post we analyze Qilin ransomware’s new custom Rust loader, break down the inner workings of its sophisticated kernel-level EDR killer, and...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free