Security News

Researchers Link CACTUS Ransomware Tactics to Former Black Basta Affiliates
2025-03-04 16:21

Threat actors deploying the Black Basta and CACTUS ransomware families have been found to rely on the same BackConnect (BC) module for maintaining persistent control over infected hosts, a sign...

Hunters International ransomware claims attack on Tata Technologies
2025-03-04 15:04

The Hunters International ransomware gang has claimed responsibility for a January cyberattack attack on Tata Technologies, stating they stole 1.4TB of data from the company. [...]

Hackers Exploit Paragon Partition Manager Driver Vulnerability in Ransomware Attacks
2025-03-03 13:56

Threat actors have been exploiting a security vulnerability in Paragon Partition Manager's BioNTdrv.sys driver in ransomware attacks to escalate privileges and execute arbitrary code. The zero-day...

The New Ransomware Groups Shaking Up 2025
2025-03-03 11:00

In 2024, global ransomware attacks hit 5,414, an 11% increase from 2023.  After a slow start, attacks spiked in Q2 and surged in Q4, with 1,827 incidents (33% of the year's total). Law enforcement...

Ransomware gangs exploit Paragon Partition Manager bug in BYOVD attacks
2025-03-01 15:17

Microsoft had discovered five Paragon Partition Manager BioNTdrv.sys driver flaws, with one used by ransomware gangs in zero-day attacks to gain SYSTEM privileges in Windows. [...]

Ransomware criminals love CISA's KEV list – and that's a bug, not a feature
2025-02-28 19:07

1 in 3 entries are used to extort civilians, says new paper Fresh research suggests attackers are actively monitoring databases of vulnerabilities that are known to be useful in carrying out...

Qilin ransomware claims attack at Lee Enterprises, leaks stolen data
2025-02-28 18:20

The Qilin ransomware gang has claimed responsibility for the attack at Lee Enterprises that disrupted operations on February 3, leaking samples of data they claim was stolen from the company. [...]

Southern Water says Black Basta ransomware attack cost £4.5M in expenses
2025-02-26 23:50

United Kingdom water supplier Southern Water has disclosed that it incurred costs of £4.5 million ($5.7M) due to a cyberattack it suffered in February 2024. [...]

EncryptHub breaches 618 orgs to deploy infostealers, ransomware
2025-02-26 15:31

A threat actor tracked as 'EncryptHub,' aka Larva-208, has been targeting organizations worldwide with spear-phishing and social engineering attacks to gain access to corporate networks. [...]

Data Theft Drove 94% of Global Cyberattacks in 2024 & Ransomware Defenses are “Increasingly Complex”
2025-02-26 14:00

Ransomware groups now steal, encrypt, and threaten to leak company data on the dark web, forcing victims to pay or risk exposing sensitive information.