n0n's AI habit cost $7K, leaked its playbook
A newcomer extortion crew used AI to script attacks on 23 organizations, then left its own server wide open for researchers to read.
30 results for “ransom”
A newcomer extortion crew used AI to script attacks on 23 organizations, then left its own server wide open for researchers to read.
OWASP volunteers released RAID-AI, a free manual self-assessment that maps AI controls to NIST and CISA frameworks.
IDC Frontier says a ransomware attack on its IDCF Cloud disrupted East Japan Region 1 and locked 495 companies and local governments out of management consoles.
A Gentlemen affiliate pocketed extortion profits on a private leak site, as a week of supply chain and phishing threats piled up.
The FBI and Secret Service say the FortiBleed campaign remains active, with 86,644 Fortinet device credentials amassed across 194 countries.
Chip testing firm Advantest says attackers took names, SSNs, and financial data in a February ransomware intrusion.
Citrix and FortiMail zero-days, a new Spectre v2 variant, and a 16-year-old suspect top this week's threat roundup.
Symantec says the China-linked group behind Warlock ransomware disabled defenses on dozens of hosts within hours of exploiting SharePoint flaws.
A 16-year-old led a ransomware crew that claimed about 1,000 attacks, according to European police.
Ofqual survey finds secondary schools reporting fewer incidents and quicker recovery, but training and responsibility gaps persist.
ShinyHunters claims it breached an Oracle PeopleSoft zero-day on the FBI jobs site, stealing 2-3 TB of employee data and demanding a retraction, not ransom.
ShinyHunters claims it stole private keys and server data from rival Clop, defacing the ransomware group's dark web leak site.
SecurityWeek's roundup covers a ransomware sentencing, a zero-click AI plugin flaw, and a critical SAP bug under active scrutiny.
Huntress details a new ransomware variant that sabotages recovery options and deploys BYOVD in retail and manufacturing attacks.
Black Kite's study reports manufacturers made up 22% of ransomware victims from April 2025 to March 2026, the fifth straight year atop the sector list.
Kaspersky details NightEagle, Hacking Cat and Toy Ghouls deploying backdoors, ransomware and wipers against Russian enterprises.
A Zurich court found the 52-year-old Ukrainian developer built LockerGoga, MegaCortex, and Nefilim, though not as the operations' mastermind.
Fenix24's first State of Recoverability report finds only four of more than 800 clients neared their own recovery targets after a ransomware attack.
The FBI's first Cyber Strategy outlines four pillars for disrupting threat actors, from imposing costs to expanding victim support.
Berlin refused a €2m ransom; Rhysida leaked 5.7 TB, including emergency plans.
New research maps North Korea's Lazarus umbrella into six distinct cyber clusters with specialized roles.
Microsoft's cloud patches, Dropbox account breaches, and Guardio's $1.1B funding round headline this week's security news.
Manchester Airports Group data leak exposes 8.8M records after refusing ransom.
A human attacker used AI agents to breach a network in under 10 hours, leaving an 80-page audit.
Acronis data shows 143 MSP victims in 2025. A six-point checklist helps providers verify real recovery capability.
Microsoft's false 'Defender off' alerts risk training users to disregard real security warnings, experts say.
ATF confirms a cyber incident on a standalone system after the Qilin ransomware group claimed an attack.
Berlin refuses to pay Rhysida after data theft from its state network, saying it won't yield to blackmail.
Aurora ransomware actors use Cursor Agent AI to automate post-exploitation tasks, per Gambit Security research.
CRPx0's victim count rose from under 10 to 48 organizations since June, but experts urge caution over unverified claims.