T1021.001 - Remote Desktop Protocol

Exploitation of Langflow Flaws via Commodity Crawlers

Healthcare Cybersecurity Under Siege: Remote Desktop Tools Exploited by Hackers

Akira Ransomware Attack Exploits Disabled VPN Account

GoodPersonRAT Malware Distributed via Fake LetsVPN Installer

Vishing Campaigns Target Organizations via Microsoft Teams and New Operator Console

The Gentlemen Ransomware Group Expands Operations with New Tools

AI-Generated PowerShell Script Used for Active Directory Reconnaissance

Ransomware Fuels Surge in Global Cyberattacks

Gh0st RAT and CloverPlus Adware Distributed in New Malware Campaign

Akira Ransomware Uses Safe Mode to Evade EDR Detection

Huntress Analyzes Akira Ransomware Attack After EDR Failure

Apache ActiveMQ Vulnerability Exploited for LockBit Ransomware Attack

Rhysida and Interlock Ransomware Groups Exploit Shared Malware Ecosystem

Macnica Launches ANTERAS DarkWeb Amid Rising Ransomware Cases in Japan

AI-Generated Malware Exploits Active Directory via Vibe Coding

DeadLock Ransomware Employs BYOVD Technique to Bypass Security

Prometei Botnet Targets Windows Servers for Remote Access and Malware Deployment

Cephalus Ransomware Targets Windows via Exposed RDP in Double-Extortion Scheme

Shift in Ransomware Tactics Targeting Cloud Assets

Lynx Ransomware Deployed via Compromised RDP After Backup Deletion

Investigation into Qilin Ransomware Incident

Kraken Ransomware Emerges from HelloKitty with Advanced Techniques

Investigation into Qilin Ransomware Incident

Bitdefender Achieves 100% Telemetry in EDR Test

Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries

Cyble’s recent report

ShinyHunters Hacks the FBI in a Security Breach Exposing Personal Information ...

Microsoft Warns Of Midnight Blizzard Spear Phishing Campaign

Gpo Abuse Exploiting Vulnerable Group Policy Objects

NightEagle APT Targets Russia With GhostContainer Backdoor

GreyNoise on X: "Two CISA known

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

GHSA 34qg 65m4 F23m

Human Attacker Hits Machine-Speed Exploitation of Marimo RCE

Machine speed, hold the AI: Hand-rolled marimo CVE-2026

Macnica launches ANTERAS DarkWeb as Japan ransomware cases hit 1,021

Financially Motivated Threat Actor Breeze Comet Targets Brazil

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

Akira Affiliate Crashes Ransomware After Attempting EDR Evasion

Akira ransomware attacker uses Safe Mode reboot to evade EDR | news

Akira Hits Safe Mode: Ransomware Rebooting Around EDR

Gunra Ransomware Hit Hospitals and Governments; Linux Victims Should Not Pay Ransom

115909

New Chaos Ransomware

Chaos in Teams vishing

Russia's GRU Hackers Target Ukraine With Fake CAPTCHAs and an Unkillable Blockchain Server

New Spirals ransomware encrypts victim network in under 24 hours

AI

New GoodPersonRAT malware distributed via fake LetsVPN installer

Vibe

AI-Coded Malware | Analyzing Vibe-Coded AD Enumeration

How the RaaS Business Model Actually Works

Investigators draw connection between KelpDAO and Humanity hackers on

Remote desktop tools offer hackers a front door to healthcare networks: report

New Prinz Eugen ransomware prioritizes recent files for encryption

Operation Escaneo Signals Shift in LatAm Threat Landscape

Interlock and Rhysida: AI in the Ransomware Ecosystem

Russia

Akira Ransomware Kill Chain Reconstructed from Logs

GreyVibe hackers use ChatGPT, Gemini to power cyberattacks

Silent Ransom Group Sends Operatives Into Law Firm Offices: 38 Firms Already Leaked

Reconstructing an Akira Ransomware Kill Chain from Perimeter and Endpoint Logs, (Wed, May 27th)

Threat Spotlight Vpn Exploitation When Patched Doesnt Mean Protected