Topic
Malware that encrypts a victim's files or systems, used by attackers to demand ransom for decryption and often threaten to leak stolen data.
Anne Arundel County, Maryland, confirmed that an unauthorized actor copied files from its systems after detecting activity on August 28. The Rhysida ransomware gang claimed the attack, but the county has not said what was taken or whether residents are affected.
Reality
Semperis reports that 40% of ransomware attacks in its survey of 1,200 security professionals involved psychological or physical threats against staff. Infosecurity Magazine says the threats could still push a victim to pay when backups would let it restore.
Reality
Qilin and Settra ransomware groups are exploiting CVE-2026-0257, a PAN-OS GlobalProtect and Prisma Access authentication bypass disclosed in May. ReliaQuest says access through a victim's own VPN can look like remote work until credential theft or ransomware deployment is underway.
Reality
Picus Security's Blue Report 2026 puts prevention at 69% across 338 million simulated attacks. The vendor says prevention falls to 37% once an attacker has authenticated access, while the alert score has not moved from 14%.
Reality
Ahold Delhaize, operator of more than 9,400 stores, confirmed it took some systems offline after a cybersecurity incident. A spokesperson was not immediately available to answer BleepingComputer's questions on scope or encryption.
Perspective Coverage
11 publishersReality
ReliaQuest reports ransomware actors are exploiting CVE-2026-0257, an authentication bypass in Palo Alto PAN-OS GlobalProtect and Prisma Access. The Bedrock Agents credential flaw Zenity found is already fixed.
Reality
Semperis's survey of 1,200 IT and security professionals reports AI in the ransomware attacks on 84% of surveyed victims. The survey counts victims, and the people quoted on its meaning are tied to Semperis. The 87% who saw identity systems targeted give budget owners firmer ground this quarter.
Reality
An Akira affiliate began spraying passwords at a SonicWall SSL VPN on August 4, 2026, and one worked about seven minutes later. The account had no MFA, and the ransomware deployment that followed failed after credentials and file-share data were already stolen.
Reality
Japan's government told ministries, local authorities and companies to patch known flaws and tighten supplier security after 20-plus firms disclosed attacks. For operators the practical items are supplier maps, contractor logins and how long ID images are kept.
Reality
Cohesity data puts Qilin and The Gentlemen behind 32% of UK ransomware attacks. UK volume rose 60% on the quarter, and a watchlist of two names covers a third of it, leaving 68% with other actors.
Reality
ReliaQuest says Qilin and Settra ransomware groups are exploiting CVE-2026-0257, a PAN-OS GlobalProtect auth bypass disclosed May 13. Upgrading closes the entry point, but sessions opened before the upgrade may survive it.
Reality
More than 20 major Japanese companies have disclosed cyberattacks in recent weeks, the Financial Times reported. Tokyo's instructions to ministries and companies are basic. The recent cases put operators' exposure in their vendors and their ID handling.
Reality
Japan detained a Russian national alleged to be a core Qilin ransomware member in Osaka in May and has extradited him to Germany. Qilin went on listing victims while he was held, more than 450 since June by BleepingComputer's count.
Perspective Coverage
5 publishersReality
IDC Frontier says ransomware in its IDCF Cloud East Japan Region 1 has affected 495 companies and local governments using the service. The SoftBank Group subsidiary has also locked customers out of management consoles in every region while it verifies their security.
Perspective Coverage
3 publishersReality
Korea's cyberinsurance market was worth $3 million in 2023, about a sixty-fifth of Japan's $196 million. AI-based attacks are now reaching banks such as KB Kookmin and Hana, yet most Korean companies still pay for breaches out of their own funds.
Reality
MonsterCloud owner Zohar Pinhasi is charged with paying ransomware gangs over $8 million for keys while billing victims over $19 million. The charges turn on when the firm paid, so a recovery contract has to fix the order of steps and the source of any sample decryption.
Perspective Coverage
11 publishersReality
Comparitech counted 2,627 ransomware attacks claimed in Q3 2026, a quarterly record up 27% on Q2 and 61% on a year earlier. Victims have confirmed 247 of those claims, so the record is mostly a count of what the gangs themselves assert.
Reality
Andover officials confirmed an attacker reached some town systems in the Aug. 13 cyberattack but still cannot say whether any data was taken. The town has set no date for finishing the review that decides who gets notified.
Reality
The FBI and Secret Service warned Tuesday that FortiBleed is still scanning Fortinet firewalls and SSL VPN gateways with 86,644 stolen credentials. Patching and a password reset will not clear it.
Perspective Coverage
10 publishersReality
Check Point says organizations averaged 2,803 cyber attacks a week in September, up 48% on a year earlier. The figures come from the vendor's own count, and they support checking mail link filtering and AI prompt controls before spending anything new.
Reality
Security · October 7, 2026 · Confirmed2 publishers
Security · September 5, 2026 · Confirmed3 publishers
Security · October 5, 2026 · Confirmed2 publishers
Security · October 6, 2026 · Confirmed2 publishers
Leadership · October 1, 2026 · Confirmed2 publishers
Security · October 1, 2026 · Confirmed14 publishers
Security · September 28, 2026 · Confirmed6 publishers
Security · October 1, 2026 · Confirmed6 publishers
Security · September 30, 2026 · Confirmed3 publishers
Security · October 1, 2026 · Confirmed2 publishers
Security · September 30, 2026 · Confirmed4 publishers
Security · September 27, 2026 · Confirmed2 publishers
Security · August 17, 2026 · Confirmed3 publishers
Security · August 18, 2026 · Confirmed3 publishers
Security · August 18, 2026 · Confirmed3 publishers
Security · August 18, 2026 · Confirmed3 publishers
Security · August 21, 2026 · Confirmed2 publishers
Security · August 28, 2026 · Confirmed4 publishers
Security · August 28, 2026 · Confirmed6 publishers
Security · September 2, 2026 · Confirmed2 publishers
Security · September 10, 2026 · Confirmed2 publishers