Latest Ransomware news

A Russian access broker sold corporate network credentials for $1,000. His Yanluowang buyers demanded millions. Separately, a DigitalMint negotiator ran BlackCat attacks against his own clients, extracting $75 million. Both face federal prosecution.

Thirty-six days of zero-day access. Interlock ransomware hit Cisco Firewall Management Center via CVE-2026-20131 (CVSS 10.0) before anyone knew the flaw existed. A misconfigured server exposed their entire toolkit. CISA gave agencies three days to patch.

Four CVSS 9.9 remote code execution flaws patched in Veeam Backup and Replication. Authenticated domain users could run arbitrary code on backup servers. Past Veeam vulnerabilities were weaponized by Akira, Fog, and Frag ransomware within weeks of disclosure.

INC RANSOM has launched a coordinated sweep against industrial targets in the US and Italy. The list includes high-purity manufacturer Fit-Line Global and, most alarmingly, STIM Group, which fell victim to LockBit just two years ago. A look at the …