Ransomware
Curated coverage and analysis in this editorial area.

cPanel Issues Critical Patches as Zero-Day Exploitation Targets WHM with Mirai and Ransomware
cPanel has released security updates for three new WHM vulnerabilities while confirming that a critical authentication bypass (CVE-202…

Trellix Confirms Source Code Breach as RansomHouse Claims Attack on Internal Infrastructure
Cybersecurity giant Trellix has confirmed unauthorized access to its source code repository following an extortion claim by RansomHous…

MuddyWater Mimics Chaos Ransomware to Conceal Targeted Espionage Operations
A Rapid7 investigation reveals that Iranian threat actor MuddyWater impersonated a Chaos ransomware affiliate in early 2026 to mask es…

Conti-Akira Ransomware Negotiator Sentenced to 102 Months in Prison
Deniss Zolotarjovs, a key 'closer' for the Conti and Akira ransomware syndicates, has been sentenced to 102 months in U.S. federal pri…

Inside the Betrayal: Cybersecurity Professionals Sentenced to 4 Years for ALPHV/BlackCat Ransomware Attacks
Two American cybersecurity experts were sentenced to four years in prison for acting as ALPHV/BlackCat ransomware affiliates. The case…

Worldleaks Dumps 8.5 TB of Mediaworks Data; Hungarian Media Giant Threatens Press Over Leaks
Cyber-extortion group Worldleaks has published 8.5 TB of sensitive data allegedly stolen from Mediaworks Kft. While the Hungarian medi…

Insider Risk in BlackCat Ransomware: Analyzing the Betrayal
Discover the impact of insider betrayal in the BlackCat ransomware: negotiators exploited defenses for extortion. What to know about t…

CISA KEV: Windows and ScreenConnect Added to List of Exploited Vulnerabilities
CISA adds CVE-2024-1708 and CVE-2026-32202 to the KEV catalog. Russian APT28 and Chinese Storm-1175 leverage these flaws for espionage…

The Gentlemen Ransomware: Over 320 Victims and Botnet of 1,570+ Companies
The Gentlemen group becomes the second most active ransomware of 2026. Over 320 victims and a ready botnet: here is the model attracti…

Scattered Spider: 'Bouquet' Arrested in Helsinki Under US Charges
A 19-year-old dual US-Estonian citizen known as 'Bouquet' has been arrested in Helsinki on US charges related to the Scattered Spider…

VECT 2.0 Ransomware: The Critical Bug That Permanently Destroys Encrypted Files
A design flaw turns VECT 2.0 into a wiper: files over 131KB are irreversibly destroyed. Paying the ransom recovers nothing. Here is th…

April 2026 CISA KEV: 12 Vulnerabilities in a Week, Ransomware Alert
CISA added 12 exploited vulnerabilities to the KEV catalog from April 20-24, 2026. SimpleHelp, D-Link, and Samsung are among the affec…