Finance.Yahoo

Rapid7 Q3 2025 Report Highlights Ransomware Growth and AI Weaponization

First seen 2 Dec 2025, 18:33 UTC • Stocktitan

•20.7

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Rapid7's Q3 2025 Threat Landscape Report, released on November 12, 2025, reveals a significant increase in active ransomware groups, rising from 65 to 88. The report notes that attackers are increasingly exploiting older vulnerabilities and utilizing generative AI to enhance their tactics. Key vulnerabilities include CVE-2025-53770 and flaws in Cisco ASA/FTD.

How this analysis works

Attack Flow

12 entities, 21 inferred relationships (STIX 2.1).

Technique (5)

Malware
Phishing
Ransomware
Supply Chain Attack
T1566 - Phishing

Vulnerability (1)

CVE-2025-53770

Malware (1)

LAMEHUG

Affected Platform (2)

Cisco ASA/FTD
Microsoft SharePoint

Threat Actor (3)

Qilin
Safepay
WorldLeaks

Relationships

Qilin uses LAMEHUG
Safepay uses LAMEHUG
WorldLeaks uses LAMEHUG
Qilin uses Malware
Qilin uses Phishing
Qilin uses Ransomware
Qilin uses Supply Chain Attack
Qilin uses T1566 - Phishing
Safepay uses Malware
Safepay uses Phishing
Safepay uses Ransomware
Safepay uses Supply Chain Attack
Safepay uses T1566 - Phishing
WorldLeaks uses Malware
WorldLeaks uses Phishing
WorldLeaks uses Ransomware
WorldLeaks uses Supply Chain Attack
WorldLeaks uses T1566 - Phishing
LAMEHUG exploits CVE-2025-53770
CVE-2025-53770 targets Cisco ASA/FTD
CVE-2025-53770 targets Microsoft SharePoint

Continue Reading

Akira Ransomware Group Targets Critical Infrastructure, Extracts $42 Million Inotiv Confirms Data Breach from August 2025 Ransomware Attack Critical Check Point VPN Vulnerability Exploited by Ransomware Gang Russia's Hybrid Warfare Threatens UK with Cyberattacks and Sabotage MuddyWater Targets U.S. Entities Amid Geopolitical Tensions Synnovis Reports Data Breach Following June 2024 Ransomware Attack

Rapid7 Q3 2025 Report Highlights Ransomware Growth and AI Weaponization

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading