GuidePoint Security’s Research and Intelligence Team (GRIT) has uncovered a ransomware extortion tactic in which an alleged recovery service, “Ransom Busters,” contacts victims before...
The Cl0p ransomware and extortion group is reportedly exploiting CVE-2026-12569, a critical remote code execution flaw in PTC Windchill, to deploy a custom web...
The malware was discovered in July 2026 and is likely used by a ransomware-related threat actor to gain an initial foothold, perform reconnaissance, move...
A suspected Chinese-speaking threat actor has exploited a critical VMware vCenter Server vulnerability to gain root-level access, establish several backdoors, steal directory credentials, and...
A single missing multi-factor authentication (MFA) control turned a basic credential-spraying attempt into a near-complete Akira ransomware intrusion in early August 2026.
The incident...