Finance.Yahoo

Rapid7 Q3 2025 Report Highlights Ransomware Growth and AI Weaponization

First seen 2 Dec 2025, 18:33 UTC • Stocktitan

•87% similarity •20.7

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Rapid7's Q3 2025 Threat Landscape Report, released on November 12, 2025, reveals a significant increase in active ransomware groups, rising from 65 to 88. The report notes that attackers are increasingly exploiting older vulnerabilities and utilizing generative AI to enhance their tactics. Key vulnerabilities include CVE-2025-53770 and flaws in Cisco ASA/FTD.

ThreatCluster AI

Attack Flow

12 entities, 21 inferred relationships (STIX 2.1).

Technique (5)

Malware
Phishing
Ransomware
Supply Chain Attack
T1566 - Phishing

Vulnerability (1)

CVE-2025-53770

Malware (1)

LAMEHUG

Affected Platform (2)

Cisco ASA/FTD
Microsoft SharePoint

Threat Actor (3)

Qilin
Safepay
WorldLeaks

Relationships

Qilin uses LAMEHUG
Safepay uses LAMEHUG
WorldLeaks uses LAMEHUG
Qilin uses Malware
Qilin uses Phishing
Qilin uses Ransomware
Qilin uses Supply Chain Attack
Qilin uses T1566 - Phishing
Safepay uses Malware
Safepay uses Phishing
Safepay uses Ransomware
Safepay uses Supply Chain Attack
Safepay uses T1566 - Phishing
WorldLeaks uses Malware
WorldLeaks uses Phishing
WorldLeaks uses Ransomware
WorldLeaks uses Supply Chain Attack
WorldLeaks uses T1566 - Phishing
LAMEHUG exploits CVE-2025-53770
CVE-2025-53770 targets Cisco ASA/FTD
CVE-2025-53770 targets Microsoft SharePoint

Community

Browse all →

Rapid7 Q3 2025 Report Highlights Ransomware Growth and AI Weaponization

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading