Ransomware

Ransomware incidents spiked in July, with finance, technology and healthcare disproportionately targeted per report.

INC ransomware group aggressively exploits SonicWall SMA 1000 zero-days to steal and encrypt data for extortion.

Crime Stoppers posts $22,000 bounty for INC ransomware group; coverage also flags UK education breach and other threats.

Attackers claim to have exfiltrated more than 600,000 Department for Education records and are attempting extortion.

Coca-Cola confirms hackers stole data from Fairlife after a ransomware attack affecting subsidiary systems.

DevMan RaaS (Funky Mantis) operates a portal centralizing payload builds, victim tracking, and affiliate payouts for ransomware affiliates.

Cl0p affiliates exploit unauthenticated RCEs in Windchill and FlexPLM to steal data for extortion campaigns.

JadePuffer resurfaces deploying ransomware designed to encrypt or wipe AI models, datasets and vector DBs.

Qilin ransomware exploits critical Palo Alto PAN-OS GlobalProtect authentication bypass to breach networks and deploy ransomware.

JadePuffer/ENCFORGE targets AI model files, encrypting weights, vector indexes and datasets after Langflow RCE.

Stadler Rail rejects Everest ransomware group's $12.3M extortion demand after data theft from supplier's file-sharing platform.

Ransomware disrupted operations at a Japanese frozen-food logistics firm, delaying shipments to major clients including national franchises.

Chaos/msaRAT abuses headless Chrome and Edge for covert C2 channels, complicating detection and network-based controls.

Spirals ransomware used IIS web shell and PsExec to achieve full network encryption at an IT firm within 24 hours.

Ransomware forced Coca‑Cola's Fairlife to suspend U.S. production, impacting supply chains and operations.

CISA warns of actively exploited SharePoint vulnerabilities and flags a stealthy ransomware family and law-enforcement takedowns.

Spirals ransomware completes intrusion-to-encryption in under 24 hours, stressing the need for rapid detection and response.

Investigation reveals ransomware negotiation firm leaked victims' insurance and strategy to attackers, undermining incident response trust and outcomes.