NEWS · ALERTS · RESEARCH

Ransomware

Original cybersecurity reporting and practical analysis, alongside headlines from trusted publications, agencies and researchers.

Original reporting & analysis

Ransomware · News & analysis

October ransomware register nearly doubles after a single day of review

The register’s publisher raised its October tally from 13 incidents to 25. Its evidence for encryption varies across the cases.

2026-11-12 · 2 MIN READ

Ransomware · News & analysis

Vanderbilt keeps registration on schedule as systems return after cyber incident

The university restored access to several academic services following a campus device shutdown. A ransomware group’s claim remains unconfirmed.

2026-11-10 · 2 MIN READ

Ransomware · News & analysis

3AM school intrusion turns separate domains into a route for ransomware

Bitdefender’s new investigation documents trust changes before encryption, while treating AI involvement as an interpretation of the evidence.

2026-11-05 · 2 MIN READ

Ransomware · News & analysis

Sophos finds AI agents handling the middle stages of Aur0ra intrusions

Recovered artifacts connect operator-supplied access with automated discovery and privilege escalation.

2026-11-02 · 2 MIN READ

Ransomware · News & analysis

Talos traces VYPR ransomware intrusion from remote assistance to disabled defenses

A vendor investigation describes prolonged data theft and repeated attempts to remove endpoint protection.

2026-11-01 · 2 MIN READ

Ransomware · News & analysis

SafePay Advisory Puts Backup Administration Inside the Ransomware Threat Model

An international advisory describes attacks on recovery infrastructure, giving businesses a concrete test for who can alter their backups.

2026-10-26 · 2 MIN READ

Ransomware · News & analysis

Ransomware Investigations Trace a Route From VPN Access to Virtual Servers

Unit 42’s October update makes virtualization management a necessary part of investigating affected GlobalProtect gateways.

2026-10-22 · 2 MIN READ

Ransomware · News & analysis

Anne Arundel Separates Two Data-Theft Investigations as Criminal Claims Surface

The county’s October update distinguishes an earlier notification process from a separate 2026 intrusion.

2026-10-19 · 2 MIN READ

Ransomware · News & analysis

Ransomware Response Plans Face a Human Test as Staff Threats Escalate

Semperis’s new victim survey highlights intimidation, putting employee support and escalation procedures alongside technical recovery.

2026-10-15 · 2 MIN READ

Ransomware · News & analysis

Record Ransomware Claims Demand Careful Reading—and a Recovery Test

Comparitech’s third-quarter report separates confirmed incidents from unverified claims, a distinction that matters when businesses turn threat statistics into spending decisions.

2026-10-12 · 2 MIN READ

Ransomware · News & analysis

MonsterCloud Charges Put Ransomware Recovery Promises Under Scrutiny

Federal prosecutors allege that a recovery provider secretly paid attackers while selling clients a different explanation.

2026-10-08 · 2 MIN READ

Ransomware · News & analysis

Warlock Intrusions Put Domain-Wide Recovery Plans to the Test

New Symantec and Carbon Black research traces ransomware activity from SharePoint access to the systems used to distribute software across an organization.

2026-10-05 · 2 MIN READ

Ransomware · News & analysis

Ransomware Recovery Plans Need an Answer for Stolen Data

New Zscaler findings distinguish the growth of stolen data from victim counts—and show why a successful restore cannot settle every extortion incident.

2026-10-01 · 2 MIN READ

Ransomware · News & analysis