T1021.001 - Remote Desktop Protocol

Handala Hackers Launch Destructive Cyberattacks Using RDP and NetBird

Russian Drone Attack on Chernobyl's New Safe Confinement Raises Nuclear Safety Concerns

GREYVIBE: AI-Driven Cyberattacks Targeting Ukraine by Russian Hackers

SonicWall SSL VPN Vulnerability CVE-2024-12802 Actively Exploited Despite Patching

Critical Zoom Vulnerabilities Enable Remote Code Execution via AI-Driven Exploits

Healthcare Cybersecurity Under Siege: Remote Desktop Tools Exploited by Hackers

Toy Ghouls Launch GenieLocker Ransomware Targeting Russian Manufacturing

Trigona Ransomware Group Deploys Custom Exfiltration Tool for Data Theft

Akira Ransomware Attack Exploits Disabled VPN Account

Breeze Comet Targets Brazilian Financial Sector with Systemic Fraud

Vishing Campaigns Target Organizations via Microsoft Teams and New Operator Console

The Gentlemen Ransomware Group Expands Operations with New Tools

GoodPersonRAT Malware Distributed via Fake LetsVPN Installer

South Staffordshire Water Fined Nearly £1M for Cybersecurity Failures

Microsoft Teams Exploited for Helpdesk Impersonation Attacks

Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

BlueHammer Zero-Day Exploit Released, Exposing Windows Users to Privilege Escalation

AI-Generated PowerShell Script Used for Active Directory Reconnaissance

Ransomware Fuels Surge in Global Cyberattacks

ZachXBT Links Humanity Protocol and Kelp DAO Attacks to Overlapping Attackers

Gh0st RAT and CloverPlus Adware Distributed in New Malware Campaign

Akira Ransomware Uses Safe Mode to Evade EDR Detection

Vulnerability in Notepad's Markdown Feature Allows Remote Code Execution

Apache ActiveMQ Vulnerability Exploited for LockBit Ransomware Attack

AI-Generated Malware Exploits Active Directory via Vibe Coding

Rhysida and Interlock Ransomware Groups Exploit Shared Malware Ecosystem

Macnica Launches ANTERAS DarkWeb Amid Rising Ransomware Cases in Japan

DeadLock Ransomware Employs BYOVD Technique to Bypass Security

Crazy Ransomware Gang Exploits Employee Monitoring Tools for Attacks

Microsoft Addresses Six Actively Exploited Zero-Day Vulnerabilities

Prometei Botnet Targets Windows Servers for Remote Access and Malware Deployment

Cephalus Ransomware Targets Windows via Exposed RDP in Double-Extortion Scheme

Lynx Ransomware Deployed via Compromised RDP After Backup Deletion

Shift in Ransomware Tactics Targeting Cloud Assets

Investigation into Qilin Ransomware Incident

Kraken Ransomware Emerges from HelloKitty with Advanced Techniques

Investigation into Qilin Ransomware Incident

Bitdefender Achieves 100% Telemetry in EDR Test

Akira ransomware attacker uses Safe Mode reboot to evade EDR | news

Akira Hits Safe Mode: Ransomware Rebooting Around EDR

Gunra Ransomware Hit Hospitals and Governments; Linux Victims Should Not Pay Ransom

115909

New Chaos Ransomware

Chaos in Teams vishing

Russia's GRU Hackers Target Ukraine With Fake CAPTCHAs and an Unkillable Blockchain Server

New Spirals ransomware encrypts victim network in under 24 hours

AI

New GoodPersonRAT malware distributed via fake LetsVPN installer

Vibe

AI-Coded Malware | Analyzing Vibe-Coded AD Enumeration

How the RaaS Business Model Actually Works

Investigators draw connection between KelpDAO and Humanity hackers on

Remote desktop tools offer hackers a front door to healthcare networks: report

New Prinz Eugen ransomware prioritizes recent files for encryption

Operation Escaneo Signals Shift in LatAm Threat Landscape

Interlock and Rhysida: AI in the Ransomware Ecosystem

Russia

Akira Ransomware Kill Chain Reconstructed from Logs

GreyVibe hackers use ChatGPT, Gemini to power cyberattacks

Silent Ransom Group Sends Operatives Into Law Firm Offices: 38 Firms Already Leaked

Reconstructing an Akira Ransomware Kill Chain from Perimeter and Endpoint Logs, (Wed, May 27th)

Threat Spotlight Vpn Exploitation When Patched Doesnt Mean Protected

Ve Cve 2026 20182 Critical Authentication Bypass Cisco Catalyst Sd Wan Controller Fixed

Bitdefender GravityZone: 100% Telemetry in AV

South Staffordshire Water Fined £1m After Data Breach

Iranian threat group used Chaos ransomware as a 'false flag,' researchers say

MuddyWater hackers use Chaos ransomware as a decoy in attacks

Trigona Ransomware

Snow Flurries: How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite

Novel malware campaign bundles Gh0st RAT, CloverPlus adware | brief

Microsoft April 2026 Patch Tuesday fixes 167 vulnerabilities and two zero

Handala Hack Uses RDP, NetBird, and Parallel Wipers in MOIS

Threat Actors Exploit Apache ActiveMQ Vulnerability to Gain RDP Access, Deploy LockBit Ransomware

Threat Actors Exploit Apache ActiveMQ Server Vulnerability to Gain RDP Access and Deploy LockBit Ransomware

Who's the bossware? Ransomware slingers like employee monitoring tools, too

LockBit strikes with new 5.0 version, targeting Windows, Linux and ESXI systems

Cephalus Ransomware Exploits Exposed RDP in Double-Extortion Attacks

Microsoft Patch Tuesday - January 2026, (Tue, Feb 10th)

Prometei botnet exploits weak passwords on UK construction firm's server

Piecing Together the Puzzle: A Qilin Ransomware Investigation