Ransomware

Mastering Ransomware Defense: Your Resource for Prevention, Response, Recovery, and More.

Settra ransomware group uses MeshAgent RMM in recent attacks

Laura FrenchSeptember 18, 2026

The nascent threat actor has claimed 93 victims since June 2026.

Today's Top Ransomware Headlines

Ransomware: Explained and Explored

AI/ML
Closing the AI control gap: From shadow AI to continuous protection
Threat Management
AI reshapes exposure management around real-world risk, says Brinqa exec
Patch/Configuration Management
How teams can patch faster when a bug gets added to CISA’s KEV
Identity
From autonomous agent to trusted worker: Building identity and accountability for AI agents
Security Strategy, Plan, Budget
What the FBI’s new offensive cyber strategy means to the private sector
Identity
Identity at machine speed: Okta pushes governance beyond human users
AI/ML
Hastily deployed agentic security is not the answer to enterprise cyber threats
AI benefits/risks
In the AI era, the pre-patch window needs its own security playbook
Incident Response
Preparing for AI-enabled incidents: Helping business leaders understand enterprise risk
AI benefits/risks
OpenAI’s Astra restrictions are another warning shot for security teams

Ransomware News

Patched VMware vCenter bug targeted in ransomware campaigns

Steve ZurierSeptember 15, 2026

Ransomware groups exploit a critical VMware vCenter bug just seven weeks after patch released.

Microsoft warns of cloud storage attacks, financial fraud scams targeting customers

Laura FrenchSeptember 15, 2026

Both campaigns use social engineering to access accounts or secure fraudulent transactions.

Ransomware

CISA: WatchGuard Firebox bug exploited in ransomware campaigns

Steve ZurierSeptember 10, 2026

Ransomware gangs are exploiting a WatchGuard Firebox flaw that CISA flagged nine months ago.

Digital warning signs: A digital landscape, with warning signs on the screen, which depicts an alert or error.

Network Security

F5 BIG-IP malware hides web shells in memory to evade detection

Steve ZurierSeptember 9, 2026

Memory-resident malware targeting F5 BIG-IP appliances can evade file-based security defenses.

BigBear 2.0 phishing campaign compromises MFA-protected Microsoft accounts

Laura FrenchSeptember 9, 2026

Researchers discovered more than 3,300 unique victims across 461 organizations.

Manager Pressing REMOTE MONITORING AND MANAGEMENT

Phishing campaign targets widely used RMM platforms in 46 countries

Steve ZurierSeptember 3, 2026

Phishing attacks trick victims into installing legitimate RMM tools for remote access.

RevStealer malware spread through fake Claude Opus 5 download

Laura FrenchSeptember 1, 2026

The Windows infostealer uses several evasion measures to remain mostly invisible to security systems.

(Credit: Robert – stock.adobe.com)

Codex ClickFix installation lure spreads suspected AMOS infostealer

Laura FrenchAugust 25, 2026

The attack uses iframes embedded in Google Sites to deliver malicious content from a trusted domain.

(Credit: Ralf – stock.adobe.com)

Black Hat/DEF CON attendees targeted in malware scheme with Google Doc lure

Laura FrenchAugust 20, 2026

A malicious Google Apps Script sidebar leads to payloads for both macOS and Windows.

(Adobe Stock)

Medusa ransomware group attacked more than 500 victims since 2021

Steve ZurierAugust 19, 2026

Medusa ransomware hit 500-plus victims, exploiting critical flaws at increasing speed.

Selected by the SC Media Editorial team every Tuesday.

Sign up now for the top five issues cybersecurity pros need to know this week.

Ransomware Events