Ransomware-as-a-Service (RaaS) stories
Industrial firms remained the main target as global ransomware attacks climbed 3% in Q2, with North America still hardest hit.
AI-driven phishing and state-linked espionage are pushing Asia-Pacific incident numbers higher, with data breaches still the biggest threat.
Ransomware activity stayed elevated in Q2, with 2,252 named victims and The Gentlemen overtaking Qilin to top the rankings.
Business and public sector organisations faced 2,270 attacks a week in June, as ransomware rose 33% and GenAI use exposed sensitive data.
Organisations have only days to patch gaps as AI-driven attackers automate the same old weaknesses, Five Eyes warned.
ESET says the gang's operator-backed toolkit could help affiliates bypass defences faster, widening the threat to businesses worldwide.
More than half of countries surveyed now say cybercrime makes up 30 per cent of recorded offences, as phishing and ransomware spread fast.
Ransomware losses worsened in May as attacks climbed 48% year on year, despite a 7% drop in overall cyber incidents.
Stolen patient records are now being traded alongside ransomware access, deepening risks for hospitals, suppliers and insurers across the sector.
Industrials remained the main target as the monthly ransomware total eased 7%, even as The Gentlemen surged to second place among active gangs.
Experts say AI is accelerating ransomware attacks, shrinking the patching window and forcing organisations to overhaul defences and recovery plans.
Attackers are exploiting passkeys, stolen sessions and AI-generated scams, exposing gaps in identity security beyond the login screen.
Leak-site noise is making it harder for firms to tell real breaches from extortion theatre, as active sites hit 91 in the first quarter of 2026.
Check Point Research says a better affiliate payout is helping the gang spread fast, with more than 320 claimed victims since mid-2025.
New extortion-only gangs are reshaping a ransomware market that remained at about 150 to 200 victim posts a week in the first quarter.
Ransomware hit manufacturers hardest in 2025 as incidents climbed 56 per cent, with ageing factory systems and suppliers widening exposure.
The deal should reduce Footasylum's upfront costs and speed up its move to a denser goods-to-person system before peak trading.
Australian businesses face renewed ransomware pressure as INC expands quickly after LockBit and BlackCat were disrupted, researchers say.
The partnership gives the pensions technology firm access to AI tools and Azure credits as it targets stronger links with retirees.
Thailand has joined the ransomware top 10 as fewer groups now drive most attacks, raising the cost of each breach for businesses.