Interlock Ransomware Targets Education with Gaming Anti-Cheat Driver Exploit
Article Content
Browse articles 
The Interlock ransomware group has launched attacks primarily against the education sector in the U.S. and U.K., utilizing a new tool that exploits a zero-day vulnerability in a gaming anti-cheat driver. This exploit allows the ransomware to disable endpoint detection and response (EDR) and antivirus (AV) solutions, enhancing its effectiveness in infiltrating targeted systems.
Ask AI about this cluster
Answers cite the sources they use
Updated 214d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track Interlock and Education in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical RCE Vulnerabilities Discovered in DB-GPT AI Agent Platform Two critical remote code execution (RCE) vulnerabilities, CVE-2026-51862 and CVE-2026-51869, were identified in version 0.8.0 of the DB-GPT AI agent platform, which serves as a data access layer for autonomous AI agents. CVE-2026-51862, with a CVSS score of 9.1, allows attackers to exploit a directory traversal flaw… 
Ransomware Attacks Target Fort Smith and Cumar Marble & Granite On September 15, 2026, the ransomware group Interlock claimed to have compromised the City of Fort Smith, Arkansas, leaking over 5.6 TB of sensitive municipal data. The exposed information includes personal data, law enforcement records, and critical infrastructure details. Separately, on September 11, 2026, the Dark…