The Register on MSN2d
Microsoft signed a dodgy driver and now ransomware scum are exploiting it
Five flaws found in Paragon Partition Manager's kernel-level .sys Ransomware crooks are exploiting a third-party Windows ...
Microsoft Teams tactics, malware connect Black Basta, Cactus ransomware
New research has uncovered further links between the Black Basta and Cactus ransomware gangs, with members of both groups ...
The Hacker News10h
Medusa Ransomware Hits 40+ Victims in 2025, Demands $100K–$15M Ransom
Medusa ransomware surged 42% in 2024, claiming nearly 400 victims. Spearwing exploits Microsoft flaws to breach networks ...
Microsoft Adds Paragon Partition Manager Driver To Blocklist As Ransomware Hackers Exploit Windows-Signed Driver For Attacks
Ransomware operators have found a way to exploit a Microsoft Windows-signed driver from Paragon Partition Manager, posing a ...
The Register on MSN7d
With millions upon millions of victims, scale of unstoppable info-stealer malware laid bare
A tip-off from a government agency has resulted in 284 million unique email addresses and plenty of passwords snarfed by ...
Microsoft SharePoint hijacked to spread Havoc malware
Havoc is a post-exploitation framework designed for advanced red teaming and adversary simulation, providing modular ...
Trend Micro vs. Windows Defender: How both tools differ in protecting your computer
Windows Defender does a decent job of blocking malware but lacks many of the protection features found in suites like Trend ...
CSO Online3d
Ransomware access playbook: What Black Basta’s leaked logs reveal
Analyzing leaked internal communication logs, security researchers are piecing together how one of the most notorious ...
CNET8d
Do You Need Antivirus Software for Windows 11?
We explore how Windows Security and Microsoft Defender protect your Windows 11 computer and why you might want to consider an ...
The Hacker News9h
EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing
EncryptHub expands phishing and ransomware tactics, leveraging PPI services, trojanized apps, and EncryptRAT to target ...
Windows Report1d
Black Basta and Cactus attackers gang up on Teams users with new techniques
A new security report discovered similarities in Black Basta and Cactus ransomware attacks showing collaboration traits.
EncryptHub breaches 618 orgs to deploy infostealers, ransomware
A threat actor tracked as 'EncryptHub,' aka Larva-208, has been targeting organizations worldwide with spear-phishing and ...