Skip to main content

Tag: ransomware

1153 articles

Network operations room with firewall device centered in foreground.

Ransomware gangs exploit WatchGuard firewall flaw

Ransomware gangs are exploiting a critical vulnerability in WatchGuard Firebox firewalls, allowing them to execute malicious code remotely with ease. This flaw, known as CVE-2025-14733, affects various Fireware OS versions and could leave your network exposed to low-complexity attacks.

Analyst 207
Hospital corridor with staff, patient rooms, and a blurred laptop screen on a nurse's station counter.

AdaptHealth Breach Exposes 4.1 Million Patients' Data

A massive data breach at AdaptHealth has put the personal information of 4.1 million patients at risk after hackers compromised the company's systems in June and demanded a ransom. The breach was first disclosed in a July SEC filing, and it's been confirmed that the ShinyHunters threat group was behind the attack.

Analyst 207
Healthcare office with medical records, computer, and scattered patient papers, hint of security camera.

Veradigm Breach Exposes Patient Data After Third-Party Hack

Veradigm is alerting patients to a data breach caused by a third-party hack, which exposed sensitive patient information after a malicious actor stole credentials and accessed API environments. The breach, linked to a busy ransomware operation, has not disrupted Veradigm's operations.

Analyst 207
Hospital corridor with concerned medical staff, blurred computer screen in background.

Veradigm Breach Exposes Patient Data After Ransomware Attack

A recent ransomware attack on one of Veradigm's third-party vendors has led to a data breach, exposing sensitive patient information - but fortunately, the incident was contained and didn't disrupt the company's operations. Veradigm has already launched a response and notified law enforcement.

Analyst 207
Hospital staff walk down a brightly-lit corridor, showing concern, amidst medical equipment and supply carts.

Boston Scientific Revises Outlook as Cyberattack Disrupts Operations

Boston Scientific's operations have been significantly disrupted by a cyberattack, forcing the company to revise its financial outlook and warning investors of a potential material impact on its third-quarter and full-year results. The incident, detected on August 25, has left the company's net sales growth and earnings guidance in jeopardy.

Analyst 207
Empty conference room with laptop and papers on a wooden table by a window.

CISA Slashes Cybersecurity Resources for Critical Infrastructure

Big news: CISA is cutting back on free cybersecurity resources for critical infrastructure operators, leaving many in the security community scrambling to adapt. Recently touted as a go-to solution, these now-retired tools included Cyber Resilience Reviews and Ransomware Readiness Assessments.

Analyst 207
Dimly lit Berlin government office interior with scattered papers and computer terminals.

Rhysida Ransomware Gang Publishes Stolen Berlin Government Data

The Rhysida ransomware gang has published stolen data from Berlin's government on the dark web after the city refused to pay a €2m ransom, defying the hackers' ultimatum. Berlin's government had stood firm, prioritizing the safety of its staff and citizens over giving in to blackmail.

Analyst 207
Modern office server room with rows of computer servers and networking equipment.

AI Agents Automate Ransomware Attack, Leaving 80-Page Security Audit

In a chilling display of efficiency, AI-powered agents automated a ransomware attack on an enterprise network in under 10 hours - a process that would typically take human operators two weeks to complete. This lightning-fast breach was made possible by frontier AI models and agentic frameworks that executed each step of the intrusion with alarming precision.

Analyst 207
Brightly-lit IT support environment with a central computer workstation.

MSPs Face Ransomware Onslaught, Seek Integrated Protection

MSPs are under siege from ransomware attacks, with 143 reported victims in 2025 alone, and it's clear that a robust defense requires more than just backup or endpoint detection - a comprehensive, integrated protection approach is needed. To stay safe, MSPs must bring together prevention, detection, response, and recovery into a cohesive, measurable service that delivers six critical outcomes.

Analyst 207
Rows of server racks and network equipment fill a modern enterprise network operations center.

AI-Assisted Cyber Attacks Accelerate with Autonomous Agent Loops

In a recent ransomware attack, a human attacker used AI to breach an enterprise network in under 10 hours - compressing weeks of meticulous planning into a lightning-fast operation. This was achieved by leveraging autonomous agents that worked in parallel, methodically bypassing security layers to achieve a shared goal.

Analyst 207
Hospital corridor with papers scattered, laptop and office supplies nearby, hinting at a breach.

Nutex Health Breach Exposes Patient Data to Ransomware Gang

Nutex Health revealed a devastating data breach on August 31, confirming that a ransomware gang had infiltrated its servers, compromising sensitive patient, employee, and business information. The attackers have even threatened to publicly expose the stolen data.

Analyst 207
Airport scene with luggage cart, scattered bags, and blurred laptop screen.

FulcrumSec Leaks 550GB of Manchester Airport Group Customer Data

A massive 550GB data leak at Manchester Airport Group has exposed the sensitive personal info of nearly 8.7 million customers, with hackers claiming to have posted almost all of the stolen data online. The breach is believed to contain a wide range of personal data, putting customers at risk of identity theft and other cyber threats.

Analyst 207
Rows of computer servers and network equipment in a brightly-lit office server room.

PaperCut Zero-Days Exploited in Data Theft Attacks

Hackers are actively exploiting two zero-day vulnerabilities in PaperCut NG and MF, using them to bypass authentication and steal sensitive data from vulnerable print management servers. Attackers have already been spotted chaining these flaws to launch data theft attacks, prompting emergency patches from PaperCut Software.

Analyst 207
Rows of shelved medical supplies in a distribution center with employees checking a laptop.

McKesson Discloses Data Theft After ShinyHunters Extortion Attack

McKesson has confirmed a data theft incident following a cyberattack by ShinyHunters, but has assured customers that its business and distribution centers are up and running with no ongoing unauthorized activity. The company sprang into action, activating incident response protocols and launching an investigation to minimize disruption.

Analyst 207
Hospital staff stand in a dimly lit corridor near a medical device and computer.

Cyberattacks Disrupt Healthcare Firms, Compromise Patient Data

Millions of patient records are at risk and remote monitoring for newly implanted cardiac devices has been crippled after two major healthcare firms, Boston Scientific and McKesson, fell victim to separate cyberattacks. Boston Scientific's hack has left new pacemakers and heart devices unable to transmit vital data remotely, putting patients' health and privacy in immediate jeopardy.

Analyst 207
Federal law enforcement facility interior shows signs of concern and disruption.

ATF Cyber Breach Exposes Investigative Targets

The ATF's response to the Qilin ransomware gang's claim of a breach reveals how prepared - or unprepared - the agency was to tackle the incident. A cyber breach at the ATF potentially puts sensitive investigative targets at risk, but details on the incident remain scarce.

Analyst 207
Airport terminal interior with passengers and blurred check-in counter.

FulcrumSec Hack Exposes 86 GB of Manchester Airports Data

Manchester Airports Group swiftly sprang into action after a hack, reassuring customers that they've taken robust measures to safeguard their info and reaching out to those affected, including those with upcoming bookings, to offer extra support. Meanwhile, hackers FulcrumSec claimed responsibility, boasting of swiping 86 GB of sensitive data.

Analyst 207
Modern airport terminal lounge with laptop and papers on a table.

Manchester Airports Breach Exposes 8.7M Customer Records

A recent data breach at Manchester Airports Group exposed a whopping 8.7 million customer records, including emails, contact info, and vehicle registrations, after hackers demanded a ransom that was wisely refused. The breach is a stark reminder that public networks can put your data at risk, no matter how secure they seem.

Analyst 207
Modern office workspace with laptop, papers, and coding materials on tidy desk.

Ransomware Actors Exploit AI Tool in Sophisticated Attacks

Ransomware attackers are now using AI tools like Claude Sonnet to supercharge their assaults, with one group successfully exploiting the technology to target 10 victims in just a few weeks. By leveraging advanced tools like SpaceX's Cursor Agent, these cybercriminals are refining their tactics and getting bolder.

Analyst 207
A calm office lobby with a blurred digital screen on a reception desk.

CRPx0 Ransomware Service Rapidly Expands, Targets 48 Organizations

CRPx0's ransomware service has exploded onto the scene, rapidly expanding its reach to target a staggering 48 organizations - a number that's skyrocketed from fewer than 10 just a few months ago. This alarming growth follows the group's shift from a basic hacking service to a full-fledged, white-label ransomware operation.

Analyst 207
Federal law enforcement office with computers and desks in daylight.

ATF Probes Ransomware Gang's Claims of Major Cybersecurity Breach

A ransomware gang has claimed responsibility for a major cybersecurity breach, prompting a swift response from the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF). The ATF is investigating the incident, but few details have been released so far.

Analyst 207
Blurred laptop on counter in retail setting suggests business data breach.

ShinyHunters Breach Exposes 12.9 Million Carhartt Accounts

A massive data breach at Carhartt has exposed a staggering 12.9 million customer accounts, compromising sensitive information and putting millions of people at risk. The breach, attributed to the ShinyHunters extortion group, included a treasure trove of customer, employee, and corporate data.

Analyst 207
Medical device manufacturing facility with equipment and staff, showing signs of disruption.

Boston Scientific Disrupts Global Operations After Cyber Incident

Boston Scientific's global operations have been significantly disrupted due to a cyber incident, affecting access to key systems and applications, including order processing and shipping. The incident has caused a major network outage, impacting the company's ability to operate normally worldwide.

Analyst 207
Federal law enforcement operations room with agents responding to a cyber incident.

ATF Breach Exposes Federal System to Qilin Ransomware Gang

The Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed a major breach of a standalone system, which was swiftly isolated to prevent further damage, and is now teaming up with the Department of Justice to investigate the Qilin Ransomware Gang's involvement. The incident appears to be contained, with no impact on the ATF's main enterprise network or other critical systems.

Analyst 207