The Register on MSN2d
Microsoft signed a dodgy driver and now ransomware scum are exploiting it
Five flaws found in Paragon Partition Manager's kernel-level .sys Ransomware crooks are exploiting a third-party Windows ...
Microsoft Teams tactics, malware connect Black Basta, Cactus ransomware
New research has uncovered further links between the Black Basta and Cactus ransomware gangs, with members of both groups ...
The Hacker News13h
Medusa Ransomware Hits 40+ Victims in 2025, Demands $100K–$15M Ransom
Medusa ransomware surged 42% in 2024, claiming nearly 400 victims. Spearwing exploits Microsoft flaws to breach networks ...
Microsoft Adds Paragon Partition Manager Driver To Blocklist As Ransomware Hackers Exploit Windows-Signed Driver For Attacks
Ransomware operators have found a way to exploit a Microsoft Windows-signed driver from Paragon Partition Manager, posing a ...
Microsoft SharePoint hijacked to spread Havoc malware
Havoc is a post-exploitation framework designed for advanced red teaming and adversary simulation, providing modular ...
Redmondmag.com2h
Webinar: Meet the Threat Actors: What IT Needs to know about Malware, Ransomware & M365
If your organization relies on Microsoft 365 for collaboration, communication, and safeguarding critical information, it’s crucial to remain vigilant against evolving security risks. Join us to ...
Trend Micro vs. Windows Defender: How both tools differ in protecting your computer
Windows Defender does a decent job of blocking malware but lacks many of the protection features found in suites like Trend ...
CNET8d
Do You Need Antivirus Software for Windows 11?
We explore how Windows Security and Microsoft Defender protect your Windows 11 computer and why you might want to consider an ...
CSO Online3d
Ransomware access playbook: What Black Basta’s leaked logs reveal
Analyzing leaked internal communication logs, security researchers are piecing together how one of the most notorious ...
EncryptHub breaches 618 orgs to deploy infostealers, ransomware
A threat actor tracked as 'EncryptHub,' aka Larva-208, has been targeting organizations worldwide with spear-phishing and ...
The Hacker News12h
EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing
EncryptHub expands phishing and ransomware tactics, leveraging PPI services, trojanized apps, and EncryptRAT to target ...