Related Threat Clusters

Cisco FMC Static Credential Vulnerability Under Active Exploitation
Cisco has reported a high-severity vulnerability (CVE-2026-20316) in its Secure Firewall Management Center (FMC) software, which is being actively exploited in the wild. The flaw arises from hardcoded static credentials…

10 articles · Updated July 30, 2026
Toy Ghouls Launch GenieLocker Ransomware Targeting Russian Manufacturing
The Toy Ghouls group, also known as Bearlyfy, has introduced a new ransomware called GenieLocker, active since March 2026. This ransomware targets Windows, Linux, and VMware ESXi systems, primarily affecting the…

5 articles · Updated July 30, 2026

Recent Intelligence Reports

New GenieLocker Ransomware Attacks Windows, ESXi, and Linux Instances — Cybersecuritynews · July 30, 2026
CISA Adds Cisco Secure Firewall Management Flaw to Exploited Vulnerabilities List — Gbhackers · July 30, 2026
New GenieLocker Ransomware Encrypts Windows, Linux and VMware ESXi Systems — Gbhackers · July 30, 2026
Toy Ghouls’ new toy: the GenieLocker ransomware — Securelist · July 30, 2026

Toy Ghouls DDoS Malware Ransomware Cisco Russia Russian Federation CVE-2026-20316 CWE-798 - Use of Hard-coded Credentials Financial Services Government Manufacturing