Ransomware-as-a-Service (RaaS) stories
Business and public sector organisations faced 2,270 attacks a week in June, as ransomware rose 33% and GenAI use exposed sensitive data.
Organisations have only days to patch gaps as AI-driven attackers automate the same old weaknesses, Five Eyes warned.
ESET says the gang's operator-backed toolkit could help affiliates bypass defences faster, widening the threat to businesses worldwide.
More than half of countries surveyed now say cybercrime makes up 30 per cent of recorded offences, as phishing and ransomware spread fast.
Ransomware losses worsened in May as attacks climbed 48% year on year, despite a 7% drop in overall cyber incidents.
Stolen patient records are now being traded alongside ransomware access, deepening risks for hospitals, suppliers and insurers across the sector.
Industrials remained the main target as the monthly ransomware total eased 7%, even as The Gentlemen surged to second place among active gangs.
Experts say AI is accelerating ransomware attacks, shrinking the patching window and forcing organisations to overhaul defences and recovery plans.
Attackers are exploiting passkeys, stolen sessions and AI-generated scams, exposing gaps in identity security beyond the login screen.
Leak-site noise is making it harder for firms to tell real breaches from extortion theatre, as active sites hit 91 in the first quarter of 2026.
Check Point Research says a better affiliate payout is helping the gang spread fast, with more than 320 claimed victims since mid-2025.
New extortion-only gangs are reshaping a ransomware market that remained at about 150 to 200 victim posts a week in the first quarter.
Ransomware hit manufacturers hardest in 2025 as incidents climbed 56 per cent, with ageing factory systems and suppliers widening exposure.
Senior staff are increasingly in the crosshairs as suspected former Black Basta affiliates use Teams impersonation to seize remote access.
IBM warns shadow AI, deepfakes and quantum threats will reshape cyber risk by 2026, as autonomous agents speed breaches and ransomware.
The deal should reduce Footasylum's upfront costs and speed up its move to a denser goods-to-person system before peak trading.
Australian businesses face renewed ransomware pressure as INC expands quickly after LockBit and BlackCat were disrupted, researchers say.
The partnership gives the pensions technology firm access to AI tools and Azure credits as it targets stronger links with retirees.
Thailand has joined the ransomware top 10 as fewer groups now drive most attacks, raising the cost of each breach for businesses.
A paranoid posture and heavy automation promise to transform SOCs, cutting dwell times and exposing stealthy attacks at unprecedented scale.