A ransomware gang exploited the critical React2Shell vulnerability (CVE-2025-55182) to gain initial access to corporate networks and deployed the file-encrypting malware less than a minute later.

A Ukrainian national pleaded guilty on Friday to conducting Nefilim ransomware attacks that targeted high-revenue businesses across the United States and other countries. The defendant, 35-year-old ...

The past year was much quieter than 2024 in ransomware takedown and anti-cybercrime law enforcement operations. Additionally, less organized collectives such as Scattered Spider, Lapsus$ and ...

Jason is principal analyst at Data Protection Matters, an independent firm focused on data protection, cyber resilience, BaaS-DRaaS & BC/DR. • From "tactical" previous versions to "strategic" disaster ...

A recent upgrade to the RansomHouse ransomware operation has added new concerns for enterprise defenders, introducing a multi-layered encryption update to the group’s double-extortion RaaS model. Also ...

A Ukrainian national has pleaded guilty to using Nefilim ransomware against a number of corporate victims in the US and elsewhere. Artem Aleksandrovych Stryzhak, 35, was extradited from the Spanish ...

What just happened? A ransomware attack has disrupted Romania's National Administration Apele Române, the government agency responsible for managing the country's water resources. The incident, which ...

Bowen Yang leaving 'Saturday Night Live' after 6 years in shock exit Hochul calls for action after 'timeout' boxes found at NY schools Muddy eruption at Black Diamond Pool in Yellowstone National Park ...

Don’t get lulled into a false sense of cybersecurity just because you’re not hearing about manufacturers hammered with production losses or paying out massive ransomware demands. Threat actors are out ...

DXS International, a U.K.-based company that provides healthcare tech for England’s National Health Service (NHS), disclosed a cyberattack in a statement on Thursday. In a filing with the London Stock ...

A common thread running through many of the biggest cyberattacks and data breaches in 2025 was a lack of visibility by organizations into their own IT systems—a weakness that attackers exploited again ...