Ransomware

Mastering Ransomware Defense: Your Resource for Prevention, Response, Recovery, and More.

Qilin exploits Palo Alto Networks GlobalProtect VPN firewalls

Steve ZurierJuly 21, 2026

Qilin exploited a patched Palo Alto VPN flaw, highlighting the cost of delayed patching.

Today's Top Ransomware Headlines

Ransomware News

Vulnerability Management

M. Thénardier, LastPass, GitHub, EBS, Spirals, Pegasus, Shaft, Josh Marpet, and More – SWN #599

July 17, 2026

M. Thénardier, LastPass, GitHub, EBS, Spirals, Pegasus, Shaft, Josh Marpet, and More on this episode of the Security Weekly News.

Ransomware

Stolen identities cause 79% of ransomware attacks, says Sophos report

Steve ZurierJuly 17, 2026

Identity failures replace software flaws as ransomware's top access vector.

Ransomware

Attackers execute a complete ransomware operation in under 24 hours

Steve ZurierJuly 16, 2026

Spirals ransomware encrypted a victim in under 24 hours, underscoring the need for rapid containment.

Malware

MacOS ‘CrashStealer’ malware poses as crash reporter to steal credentials

Laura FrenchJuly 15, 2026

The malware is written in C++ and uses a signed and notarized dropper to evade Gatekeeper.

Vulnerability Management

Mr. Data, Joomla Babooa, 1VPNS, RabbitMQ, UEFI, Center 16, Sextortion, Aaran Leyland – SWN #598

July 14, 2026

Mr. Data, Joomla Babooa, 1VPNS, RabbitMQ, UEFI, Center 16, Sextortion, Aaran Leyland, and More on the Security Weekly News.

Vulnerability Management

Borg, GitLost, ColdFusion, GodDamn, GhostApproval, OWA, Epaphroditus, Josh Marpet,.. – SWN #597

July 10, 2026

Borg, GitLost, ColdFusion, GodDamn, GhostApproval, OWA, Epaphroditus, Locutus, Josh Marpet, and More on this episode of the Security Weekly News.

Ransomware

‘GodDamn’ ransomware deploys PoisonX driver to kill EDR

Laura FrenchJuly 10, 2026

GodDamn, a rebrand of Beast and Monster ransomware, leverages AnyDesk for remote access.

Ransomware

1st ‘agentic ransomware’ JADEPUFFER invades database at machine speed

Laura FrenchJuly 2, 2026

The LLM fixed a failed login attempt within 31 seconds, demonstrating real-time adaptability.

Ransomware

‘Interpol’ emails spread custom ransomware with decryption key left inside

Laura FrenchJuly 2, 2026

The campaign targets small businesses with fearmongering emails.

Malware

Attack exploiting SimpleHelp vulnerability deploys novel loader, infostealer

Laura FrenchJune 30, 2026

The TaskWeaver loader delivers Djinn Stealer, which targets dev credentials and AI tokens.

Fast Five

Selected by the SC Media Editorial team every Tuesday.

Sign up now for the top five issues cybersecurity pros need to know this week.

Ransomware

Qilin exploits Palo Alto Networks GlobalProtect VPN firewalls

Today's Top Ransomware Headlines

Golden Chickens malware-as-a-service resurfaces with four new families

Cybersecurity threats escalate with ransomware, data breaches and online fraud

UK issues alert over Russian zero-click email attacks

AI assistant used in cyberattack on Thailand’s Ministry of Finance

Ransomware: Explained and Explored

Rep. Bacon warns CISA cuts weaken U.S. cyber defenses

Is cybersecurity already full of AI slop?

The real lesson from Claude Mythos isn’t about AI, it’s about governance

Don’t break in, log in: How abuse of trust leads to system compromise

Why Mythos is the cybersecurity crisis we need

The organizations that got breached had strong identity programs

What the recent SharePoint bugs told us about the patch race

In Europe, security has become the price of entry to the AI market

7 mistakes companies make deploying AI agents

Bridging the divide: The convergence of AI and infosec

Ransomware News

M. Thénardier, LastPass, GitHub, EBS, Spirals, Pegasus, Shaft, Josh Marpet, and More – SWN #599

Stolen identities cause 79% of ransomware attacks, says Sophos report

Attackers execute a complete ransomware operation in under 24 hours

MacOS ‘CrashStealer’ malware poses as crash reporter to steal credentials

Mr. Data, Joomla Babooa, 1VPNS, RabbitMQ, UEFI, Center 16, Sextortion, Aaran Leyland – SWN #598

Borg, GitLost, ColdFusion, GodDamn, GhostApproval, OWA, Epaphroditus, Josh Marpet,.. – SWN #597

‘GodDamn’ ransomware deploys PoisonX driver to kill EDR

1st ‘agentic ransomware’ JADEPUFFER invades database at machine speed

‘Interpol’ emails spread custom ransomware with decryption key left inside

Attack exploiting SimpleHelp vulnerability deploys novel loader, infostealer

Fast Five

Selected by the SC Media Editorial team every Tuesday.

Ransomware Events

Ransomware reloaded: Finding resilience when attackers wield AI

Ransomware Resilience: Strategies to Defend, Mitigate, and Recover