Security News

Ransomware in 2024: New players, bigger payouts, and smarter tactics
2024-12-19 04:00

In 2024, ransomware remained the top cybersecurity threat to organizations worldwide. New groups filled the void left by law enforcement crackdowns, targeting businesses with record-breaking...

Ransomware scum blow holes in Cleo software patches, Cl0p (sort of) claims responsibility
2024-12-16 23:45

But can you really take crims at their word? Supply chain integration vendor Cleo has urged its customers to upgrade three of its products after an October security update was circumvented,...

Ransomware to Cause ‘Bumpy’ Security Ride in 2025
2024-12-16 21:41

Cashed-up ransomware criminals may exploit more zero days while potential blanket ransomware payment bans hang over defenders like a shadow.

Rhode Island confirms data breach after Brain Cipher ransomware attack
2024-12-16 16:51

Rhode Island is warning that its RIBridges system, managed by Deloitte, suffered a data breach exposing residents' personal information after the Brain Cipher ransomware gang hacked its systems. [...]

Clop ransomware claims responsibility for Cleo data theft attacks
2024-12-15 20:15

The Clop ransomware gang has confirmed to BleepingComputer that they are behind the recent Cleo data-theft attacks, utilizing zero-day exploits to breach corporate networks and steal data. [...]

CISA confirms critical Cleo bug exploitation in ransomware attacks
2024-12-13 21:24

CISA confirmed today that a critical remote code execution bug in Cleo Harmony, VLTrader, and LexiCom file transfer software is being exploited in ransomware attacks. [...]

Starbucks, Supermarkets Targeted in Ransomware Attack
2024-12-13 19:00

In December, ransomware group Termite claimed responsibility for the attacks.

Cleo patches zero-day exploited by ransomware gang
2024-12-12 16:19

Cleo has released a security patch to address the critical vulnerability that started getting exploited while still a zero-day to breach internet-facing Cleo Harmony, VLTrader, and LexiCom...

US Sanctions Chinese Cybersecurity Firm for 2020 Ransomware Attack
2024-12-11 18:23

Chinese cybersecurity firm Sichuan Silence has been sanctioned for exploiting a vulnerability in Sophos firewalls used at critical infrastructure organizations in the U.S.

Lynx ransomware behind Electrica energy supplier cyberattack
2024-12-11 16:28

​The Romanian National Cybersecurity Directorate (DNSC) says the Lynx ransomware gang breached Electrica Group, one of the largest electricity suppliers in the country. [...]