Ransomware

State-owned Latvijas Valsts Mezi (LVM) remains recovering weeks after a financially-motivated cyberattack corrupted systems.

GigaWiper backdoor combines disk-wiping, overwriting, and fake ransomware behaviors to deliver destructive Windows intrusions.

Researchers detail GodDamn ransomware's use of a signed PoisonX kernel driver to disable security tools and evade detection.

Researchers report JadePuffer, an agentic ransomware automating attack steps and accelerating operations.

FortiBleed credential theft connected to INC and Lynx ransomware shows large-scale credential harvesting used for intrusions. Mitigations include credential hygiene and network segmentation.

Active exploitation of the Microsoft Defender privilege escalation flaw CVE-2026-33825 is fueling ransomware campaigns. Patches available; prioritise rapid remediation.

EU organizations and suppliers face rising ransomware pressure; strengthen vendor risk and incident response.

EU organizations and suppliers face rising ransomware pressure; strengthen vendor risk and incident response.

DragonForce uses Teams relays to conceal C2 traffic. Review Team relay configs and enforce network segmentation and EDR visibility.

Extortion group data leak; breach shows attacker access lasting months. Review data exposure and customer notification readiness.

Instructure reached an extortion settlement to prevent data leaks from Canvas, affecting thousands of schools. Monitor for affected organizations and assess risk exposure.

Ransomware overlay amid 600+ manufacturing sector hits; highlights supply-chain risk and downtime impact.

Education tech giant confirms breach; extortion group claims responsibility with potential student data exposure.

VECT 2.0 acts more as a data wiper due to encryption nonce flaws; recovery unlikely even for attackers.

ADT confirms data breach following ShinyHunters' extortion claim; millions potentially affected.

McGraw Hill confirms a breach affecting 13.5M users; review Salesforce exposure, implement credential hygiene, and monitor for extortion chatter.

Autovista faced ransomware impacting automotive data operations; assess backups, isolate affected systems, and strengthen access controls.