Microsoft Disrupts Malware Signing Operation Linked to Ransomware Gangs

Microsoft has dismantled a cybercrime service that provided code-signing certificates to ransomware groups, impacting thousands of machines, including its own.

Microsoft has dismantled a cybercrime service that provided code-signing certificates to ransomware groups, impacting thousands of machines, including its own.

Instructure's assurances regarding the deletion of stolen student data from the recent Canvas breach are met with skepticism from security experts.

Recent findings reveal that Vect's ransomware is actually a data wiper, rendering recovery impossible for affected organizations.

The U.S. Cybersecurity and Infrastructure Security Agency has identified four vulnerabilities affecting SimpleHelp, Samsung MagicINFO 9 Server, and D-Link routers, with a deadline for federal agencies to address them.

Recent research has uncovered a significant botnet associated with The Gentlemen ransomware operation, revealing over 1,570 compromised victims worldwide due to the deployment of SystemBC malware.

0APT has issued threats against rival ransomware group Krybit, promising to expose their members unless demands are met. The motivations behind this unusual conflict remain unclear.

The Cybersecurity and Infrastructure Security Agency has identified four Microsoft vulnerabilities, including one dating back 14 years, that are being exploited by cybercriminals, particularly in ransomware attacks.

Despite a drop in ransomware payments, the number of attacks surged to unprecedented levels in 2025, according to Chainalysis' latest report.

A sophisticated phishing campaign has been identified, targeting users in Russia with ransomware and a remote access trojan known as Amnesia RAT. The attack employs social engineering tactics and multiple cloud services to distribute malicious payloads.

Oleg Evgenievich Nefedov, the alleged leader of the Black Basta ransomware group, has been placed on the EU's Most Wanted list and INTERPOL's Red Notice.