Exploitation of Windows MMC zero-day is being pinned on a ransomware gang known as EncryptHub (an affiliate of RansomHub) ...

Russian-speaking espionage group RedCurl has been deploying ransomware on victims’ networks in a recent campaign.

Cybersecurity vendor Resecurity exploits a vulnerability in the BlackLock website to snoop on and hijack the gang’s ...

The new Russian ransomware program — accessible to affiliates at $5,000 — offers variants targeting Windows, Linux, BSD, ARM, ...

Researchers say 'proactive' approach is needed to combat global cybercrime Here's one you don't see every day: A cybersecurity vendor is admitting to breaking into a notorious ransomware crew's ...

The former US Attorney in the Eastern District of Virginia who was found dead Saturday morning had been in charge of some of ...

The U.S. Department of Justice announced that Rostislav Panev, who developed code and maintained infrastructure for LockBit, ...

The Russian cybersecurity vendor, in its own bulletin, characterized the zero-day exploitation of CVE-2025-2783 as a ...

A Russian-speaking ransomware group has been deploying a malicious Windows PE driver that imitates a legitimate CrowdStrike ...

The Swiss blockchain analytics firm said it found a trove of off and on-chain data to suggest Grinex is a direct successor to ...

A new multi-platform ransomware-as-a-service (RaaS) operation named VanHelsing has emerged, targeting Windows, Linux, BSD, ...