Ransomware

Microsoft has warned of a new wave of CACTUS ransomware attacks that leverage malvertising lures to deploy DanaBot as an initial access vector.

A warning of suspected exploitation of a recently disclosed critical security flaw in the Apache ActiveMQ open-source message broker service.

Russian ransomware gang LockBit has claimed responsibility for the Royal Mail cyberattack. The group has also threatened to leak the data stolen.

VMware ESXi hypervisors are the target of a new wave of attacks exploit CVE-2021-21974 designed to deploy ransomware on compromised systems.

Microsoft has revealed it is tracking more than 100 threat actors deploying ransomware against businesses around the world.

The new method bypasses mitigations that microsoft had provided for the exploit chain vulnerability at ProxyNotShell flaws in exchange server.

Microsoft threat intelligence division assessed that a subgroup of Iranian threat actor tracked as Phosphorus is conducting ransomware attacks.

The Lockbit ransomware gang announced the launch of Lockbit 3.0, a new ransomware-as-a-service offering and a bug bounty program.

A critical security flaw in Atlassian Confluence Server being actively weaponized in real-world attacks to drop cryptocurrency miners and ransomware.

IBM security released its annual X-Force threat intelligence index, unveiling asia experienced the most server access and ransomware attacks.