Unit 42 traces PEERSTITCH malware to FortiManager and FortiOS flaws
Unit 42 traced the multi-stage intrusion to CVE-2024-47575, exploited in Sep. 2024 against a telecommunications managed service provider.
Ransomware
ransomware extortion encryption leak site group claims ransom payment negotiation
-
-
FBI arrests ransomware negotiator Dubrovsky before Philadelphia Cyber Risk Summit on Oct. 8, 2026
Senior DOJ officials described the Martino case as significant and are considering roundtables with cybersecurity firms to discuss insider‑threat prevention.
-
Ransomware gangs add physical threats to encryption attacks
According to a Semperis 2026 report, 40% of ransomware attacks now involve psychological or physical threats against staff.
-
Rhysida auction puts 2.6TB of Anne Arundel County data on dark web market
The ransomware cartel claims to have stolen sensitive files from Anne Arundel County, including payroll, medical and jail records, after a confirmed August breach.
-
Ransomware groups turn to employee doxxing and family threats
Semperis found 37% of surveyed victims said employees’ friends or family had been threatened and 25% reported doxxing.
-
Japan declares cyberspace emergency as ransomware attacks expose millions of records
The declaration follows a wave of AI‑accelerated ransomware attacks that compromised personal data of over 14 million citizens and disrupted nearly 500 businesses.
-
Semperis finds AI used in 84% of ransomware attacks
Semperis survey found 44% of victims reported ransomware exploiting their own AI agents or systems
-
Halcyon launches Double Extortion Prevention to block ransomware data theft
DXP aims to block the data theft that ransomware groups use for extortion
-
In 2025, ransomware attacks surged with AI tools and rising payments
By March 2025, Qilin became the most active ransomware brand targeting industrial organizations.
-
Azazel runs own leak site, exposed server shows tools, malware capabilities described
Azazel victimized two dozen organizations in six nations.
-
How extortionware, cyber extortion and ransomware differ: definitions, tactics and response implications
The three threats vary in how they pressure victims and what defenses work with best.
-
Japanese authorities detain 28‑year‑old Russian over Qilin ransomware suspicions in Osaka
German authorities received him on October 2, 2026, following a decision by the Tokyo High Court under Japan's extradition law (SecurityWeek).