64 casos · pág. 1/4
Huntress explains the compliance obligations of Texas law HB 3834, passed in June 2019. It requires state agency and local government employees, and state contractors, to complete a Department of Information Resources (DIR)-certified cybersecurity awareness training every year. Since September 1, 2025, HB 3512 adds a second annual require…
Huntress published a vendor blog post on the role and limits of Microsoft Volume Shadow Copy Service (VSS) in modern data protection. It explains that VSS remains a core framework for application-consistent snapshots on Windows workloads but should not be treated as a complete recovery or ransomware defense. The article warns that modern …
This sponsored piece from Zscaler argues that UK public services have reached a cyber resilience inflection point. It cites a new Prime Minister, the scrapping of DSIT, and the redistribution of its cyber and digital functions across Whitehall. Three forces are named: policy raising expectations for boards, organizational reform (Local Go…
Trend Micro published its 2024 Cyber Risk Report, based on telemetry from the Trend Vision One Cyber Risk Exposure Management platform. The average Cyber Risk Index (CRI) was 38.4 for the year, down 6.2 points from 2023, and stayed in the Medium Risk zone (31-69). Trend attributes the decline to organizations adopting proactive, risk-base…
A Ponemon Institute and Proofpoint survey of 705 IT and security practitioners at U.S. healthcare institutions (conducted May 2026) found that 97% of organizations suffered at least one cyberattack in the past 12 months, and 74% of those reported disruption to patient care. The average number of attacks per organization rose to 51 from 43…
A Register "On Call" column recounts a reader's account (pseudonym Daniel) of joining a UK school in 2020, after the school's network had been taken offline for three months by ransomware. Recovery relied on external contractors and a months-old backup. His audit found a password policy of six letters with no complexity or expiry, and use…
Nord Security reports 2,894 ransomware attacks between July and September 2026, a 50% increase year over year and an 8.6% rise over Q2 2026. Researchers attribute the rebound to the market stabilizing after law enforcement takedowns of LockBit, BlackCat and RansomHub, which suppressed activity during 2025. The Gentlemen (383 attacks) narr…
Objective-See analyzed Heartbreaker, a previously unknown macOS ransomware sample (ad hoc-signed ARM64 Mach-O written in Rust). It was uploaded to VirusTotal in May 2025 and remains undetected by all AV engines. It was found by researcher Megan Carney. It encrypts files in ~/Downloads with AES-256-GCM, renames them to .heartbreaker, drops…
Conduent has agreed to pay $80m to settle a class action over the October 2024 cyber incident that exposed personal and health data of roughly 62 million people. The filing was submitted to the US District Court for the District of New Jersey on October 16, 2026, and confirmed in an 8-K filing with the SEC. The attack was allegedly carrie…
A 28-year-old Russian man, identified by German media only as "Vladimir K", has been arrested in Germany on suspicion of being a key member of the Qilin ransomware gang. He was first detained in Japan in May while on holiday and was extradited to Germany earlier this month. German investigators are examining possible links between him and…
Trend Micro disclosed its part in a multinational law enforcement operation against the LockBit ransomware group, working with the FBI and the NCA. Per the vendor, undercover infiltration helped prevent the release of the group's next malware product, LockBit-NG-Dev, and Trend customers received protection before LockBit had finished test…
Toy Ghouls (aka Bearlyfy, Laboo.boo, Feral Wolf), a financially motivated group targeting Russian organizations since 2025, was observed in early July 2026 using a custom backdoor for the first time. Kaspersky GERT identified two versions, mqtt-bird-agent 0.1.0 (C2 over the public HiveMQ MQTT broker) and matrix-bird-agent 0.1.0 (C2 over a…
CRPx0 is a cybercrime operation that began as a scam and then pivoted into a full ransomware and cryptocurrency business. The source is a short Fortra blog teaser by Graham Cluley that points to a fuller article. The teaser gives no victim names, sectors, technical details, IOCs, CVEs, TTPs or attribution beyond the operation's name. Defe…
N0n is a newly emerged cyber extortion group first spotted in mid-September 2026. Within days it had published details of what it claimed were around a dozen victims on its dark web leak site, and the tally has continued to grow. The source is a short Fortra blog teaser by Graham Cluley that points to a fuller article. The teaser gives no…
Krybit is described as a fast-growing ransomware group that was reportedly hacked by a rival gang, retaliated, and is still extorting victims. The source is a short Fortra blog teaser by Graham Cluley, which points to a fuller article covering how the group operates, who it has targeted and how organisations can protect themselves. The te…
In his Weekly Update 517, Troy Hunt offers commentary on the current ransomware situation. He argues that much of what is called ransomware often involves no malware at all and is simply extortion, frequently carried out by young offenders. These actors earn large sums but struggle to spend them without being caught. He adds that breached…
An actor using the handle WolfBlxck posted an updated recruitment announcement for Beelzebub ransomware. The actor claims the malware was rewritten from scratch with a stronger focus on disabling endpoint defenses, suppressing telemetry and hindering incident response. The post seeks three more members: a developer, a penetration tester a…
Organizations are reporting that ransomware operators are escalating extortion with threats of stalking, physical violence and abduction aimed at employees. The article says these claims are difficult to verify. The reports point to a possible shift toward real-world intimidation of staff and their families as pressure during extortion. T…
The arrest of a well-known ransomware negotiator has raised concerns that a trusted intermediary in extortion cases may have worked for the adversary's side. The article, a Dark Reading commentary by Terry J. Maxwell, argues the case shows a critical need for vendor program oversight when organizations hire third parties to handle ransomw…
Rapid7's Q3 2026 threat landscape report finds that high-severity vulnerabilities were exploited an average of three days after disclosure, with 71% exploited within the first seven days. 79% of them are classed as 'holy grail' flaws, meaning remote and needing no credentials or user interaction. Ransomware remains the dominant threat. Th…
