Related Threat Clusters
-
Russian Drone Attack on Chernobyl's New Safe Confinement Raises Nuclear Safety Concerns
On February 14, 2025, a Russian drone struck the New Safe Confinement (NSC) at the Chernobyl Nuclear Power Plant, damaging its structure and raising alarms about potential radiation leaks. The NSC, designed to contain…
146 articles · Updated April 14, 2026 -
Toy Ghouls Launch GenieLocker Ransomware Targeting Russian Manufacturing
The Toy Ghouls group, also known as Bearlyfy, has introduced a new ransomware called GenieLocker, active since March 2026. This ransomware targets Windows, Linux, and VMware ESXi systems, primarily affecting the…
5 articles · Updated July 30, 2026 -
Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages
A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…
753 articles · Updated April 29, 2026 -
Massive Data Leak Exposes 24 Billion Credentials: Urgent Security Risks Identified
Cybernews researchers uncovered an exposed Elasticsearch database containing 24 billion records, including usernames, email addresses, and plaintext passwords. The data is primarily sourced from infostealer malware logs…
12 articles · Updated June 17, 2026 -
Payload Ransomware Targets Windows and ESXi with Babuk Encryption
A new ransomware strain named 'Payload' has emerged, posing a significant threat to organizations utilizing Windows and VMware ESXi systems. The group behind Payload has been active since at least February 17, 2026, and…
2 articles · Updated March 17, 2026 -
Hacktivist Groups Expand Attacks Beyond Russia to Middle East and Central Asia
Hacktivist groups 4BID, Hakerskii Kit, and C.A.S. have broadened their attack geography, targeting organizations in Kazakhstan, the UAE, Syria, and Egypt, moving beyond their previous focus on Russian and Belarusian…
2 articles · Updated June 9, 2026 -
La Sapienza University in Rome Offline Due to Ransomware Attack
La Sapienza University in Rome has experienced a significant disruption to its IT systems following a ransomware attack. The university, which serves around 120,000 students, took its systems offline as a precautionary…
7 articles · Updated February 5, 2026 -
FBI Seizes RAMP Cybercrime Forum Used by Ransomware Gangs
The FBI has seized the RAMP cybercrime forum, a key platform for ransomware operations and other digital crimes. Both the forum's dark web and clearnet domains now display a seizure notice attributed to the FBI,…
16 articles · Updated January 28, 2026 -
Cyber Adversaries Exploit File Enumeration and Data Collection Techniques
Recent reports detail the tactics employed by various cyber adversaries to enumerate files and directories on compromised systems. Adversaries utilize command shell utilities and custom tools to gather sensitive…
2 articles · Updated April 22, 2026 -
Bactor Ransomware Identified in Cybersecurity Monitoring
CYFIRMA Research and Advisory Team has identified Bactor Ransomware while monitoring underground forums. This ransomware targets Windows systems and affects multiple industries and technologies. The findings are part of…
5 articles · Updated November 20, 2025
Recent Intelligence Reports
- 115909 — securelist.ru · July 30, 2026
- New GenieLocker Ransomware Attacks Windows, ESXi, and Linux Instances — Cybersecuritynews · July 30, 2026
- 24B records exposed in colossal data leak: What does that mean for you? — Cybernews · June 17, 2026
- 114990 — securelist.com · June 9, 2026
- Shai-Hulud goes open-source — News.Risky.Biz · May 15, 2026
- T1083 — attack.mitre.org · April 22, 2026
- New ‘Payload’ Ransomware Uses Babuk — Cybersecuritynews · March 17, 2026
- Payload ransomware hits Windows and ESXi with Babuk — Gbhackers · March 17, 2026