US Treasury Issues First Sanctions Against VPN Operators Supporting Ransomware Gangs
The US Treasury has sanctioned VPN operators for the first time, targeting services that shielded ransomware groups for over a decade.
Category Ransomware Attacks
Ransomware incidents and attacks
US Treasury Issues First Sanctions Against VPN Operators Supporting Ransomware Gangs
The Treasury targets the hidden infrastructure ransomware gangs depend on to launch attacks costing American businesses billions.
Ransomware incidents surge 20 percent during first half 2026
Ransomware attacks reached 5,275 incidents in H1 2026, with threat actors now targeting large enterprises alongside traditional SMB victims.
Ransomware incidents surge 20 percent during first half 2026
Ransomware groups are targeting enterprises with laser focus, with large companies facing 74 percent more attacks in 2026.
Hackers distribute credential-stealing malware via fake software repositories
Attackers hide credential-stealing malware in fake and compromised open-source packages, targeting developers who trust package managers blindly.
Hackers distribute credential-stealing malware via fake software repositories
Developers face a hidden risk when installing software packages: counterfeit repositories containing credential-stealing malware designed to capture their most sensitive authentication data.
Malware evades security tools through Windows symbolic link exploit
Windows filesystem redirection tricks let compromised systems hide malware from EDR tools, requiring urgent patching and enhanced path validation.
Malware evades security tools through Windows symbolic link exploit
Windows administrators face a new threat where legitimate system features become invisible smuggling routes for malware, bypassing EDR tools and security scanners.
Ransomware Attacks Rise as Breached User Accounts Become Primary Attack Vector, Report Finds
Attackers are purchasing compromised login credentials as the fastest path to deploying ransomware, bypassing traditional defenses entirely.
Fake Repositories Masquerade as Popular Software, Secretly Installing Malware on Developer Machines
Attackers deployed thousands of fake GitHub repositories disguised as popular software, tricking developers into installing malware.