Ransomware

Mastering Ransomware Defense: Your Resource for Prevention, Response, Recovery, and More.

Fake Zoom installer delivers new CloudSyncD macOS backdoor

Laura FrenchOctober 1, 2026

The malware uses a unique Unicode-based method to hide the user’s password in a fake Zoom configuration file.

Today's Top Ransomware Headlines

Ransomware News

Malware

2 new forms of malware exploited Citrix Netscaler devices one month before patch

Steve ZurierSeptember 30, 2026

Google report focuses on exploit of CVE-2026-88772, which executed lateral movement a month before a patch existed.

Malware

Malicious ChatGPT Custom GPTs lead to ClickFix attack

Laura FrenchSeptember 30, 2026

Instructions to visit a malicious website were delivered through the real ChatGPT site.

Ransomware

Critical 9.8 JetBrains TeamCity RCE exploited by ransomware, says CISA

Steve ZurierSeptember 24, 2026

Ransomware groups exploit a critical TeamCity flaw, putting software supply chains at risk.

The FBI seal is seen on its headquarters at the J. Edgar Hoover FBI building in Washington.

Ransomware

FBI probes ShinyHunters claims of massive agent data theft

Steve ZurierSeptember 23, 2026

ShinyHunters claims it stole 2 TB of sensitive data on thousands of current and former FBI agents.

Ransomware

Settra ransomware group uses MeshAgent RMM in recent attacks

Laura FrenchSeptember 18, 2026

The nascent threat actor has claimed 93 victims since June 2026.

Ransomware

Patched VMware vCenter bug targeted in ransomware campaigns

Steve ZurierSeptember 15, 2026

Ransomware groups exploit a critical VMware vCenter bug just seven weeks after patch released.

Phishing

Microsoft warns of cloud storage attacks, financial fraud scams targeting customers

Laura FrenchSeptember 15, 2026

Both campaigns use social engineering to access accounts or secure fraudulent transactions.

Ransomware

CISA: WatchGuard Firebox bug exploited in ransomware campaigns

Steve ZurierSeptember 10, 2026

Ransomware gangs are exploiting a WatchGuard Firebox flaw that CISA flagged nine months ago.

Digital warning signs: A digital landscape, with warning signs on the screen, which depicts an alert or error.

Network Security

F5 BIG-IP malware hides web shells in memory to evade detection

Steve ZurierSeptember 9, 2026

Memory-resident malware targeting F5 BIG-IP appliances can evade file-based security defenses.

Identity

BigBear 2.0 phishing campaign compromises MFA-protected Microsoft accounts

Laura FrenchSeptember 9, 2026

Researchers discovered more than 3,300 unique victims across 461 organizations.

Selected by the SC Media Editorial team every Tuesday.

Sign up now for the top five issues cybersecurity pros need to know this week.

Ransomware

Fake Zoom installer delivers new CloudSyncD macOS backdoor

Today's Top Ransomware Headlines

New PEERSTITCH malware exploits Fortinet flaw for covert communication

KGB RAT malware uses psychological tactics to scare and steal from Windows users

Israeli ad company secretly aided spyware delivery, report finds

Silent Lynx targets CIS government organizations with new attack chains

Ransomware: Explained and Explored

Stop evaluating what to patch by CVSS score alone

AI is making scams more convincing. Here are 10 ways to protect yourself

Why frontier AI model safety pledges won’t save cybersecurity

How to get enterprise-grade security without an enterprise-sized team

‘The Flip’: Retired Lt. Gen. Mary O’Brien warns the biggest data threat is now coming in, not going out

AI testing contracts need a retrospective right

Why partner access outlives the partnership

Why teams must take a least-privileged access approach in the AI era

AI agents breach production systems, spread malware in major exploits

The AI you can’t see: Bringing third-party shadow AI into the risk picture

Ransomware News

2 new forms of malware exploited Citrix Netscaler devices one month before patch

Malicious ChatGPT Custom GPTs lead to ClickFix attack

Critical 9.8 JetBrains TeamCity RCE exploited by ransomware, says CISA

FBI probes ShinyHunters claims of massive agent data theft

Settra ransomware group uses MeshAgent RMM in recent attacks

Patched VMware vCenter bug targeted in ransomware campaigns

Microsoft warns of cloud storage attacks, financial fraud scams targeting customers

CISA: WatchGuard Firebox bug exploited in ransomware campaigns

F5 BIG-IP malware hides web shells in memory to evade detection

BigBear 2.0 phishing campaign compromises MFA-protected Microsoft accounts

Fast Five

Selected by the SC Media Editorial team every Tuesday.

Ransomware Events

The Network Isn’t What You Think It Is: Securing an Environment Built for Machines

Ransomware reloaded: Finding resilience when attackers wield AI

Ransomware Resilience: Strategies to Defend, Mitigate, and Recover