Ransomware 2026-10-30
Ransomware activity digest — 2026-10-30
31 organizations were newly listed on ransomware leak sites, with the most active groups being Booba Project, qilin, Shiba. Figures are aggregated from public l
Automated daily updates on newly exploited vulnerabilities, ransomware activity and malware indicators — from public sources.
Ransomware 2026-10-30
31 organizations were newly listed on ransomware leak sites, with the most active groups being Booba Project, qilin, Shiba. Figures are aggregated from public l
Vulnerability 2026-10-29
CVE-2026-76418 (Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability) affecting Cis
Vulnerability 2026-10-29
CVE-2026-97229 (GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability) affecting GitLab was added to CISA's Known Exploit
Ransomware 2026-10-29
25 organizations were newly listed on ransomware leak sites, with the most active groups being SilentRansomGroup, akira, Whitearmor. Figures are aggregated from
Vulnerability 2026-10-28
CVE-2026-46300 (Linux Kernel Missing Initialization of a Variable Vulnerability) affecting Linux was added to CISA's Known Exploited Vulnerabilities catalog, in
Vulnerability 2026-10-28
CVE-2026-41709 (Broadcom VMWare ESX Insufficient Logging Vulnerability) affecting Broadcom was added to CISA's Known Exploited Vulnerabilities catalog, indicati
Ransomware 2026-10-28
42 organizations were newly listed on ransomware leak sites, with the most active groups being Booba Project, everest, play. Figures are aggregated from public
Vulnerability 2026-10-27
CVE-2026-111497 (Google Brotli Unchecked Return Value Vulnerability) affecting Google was added to CISA's Known Exploited Vulnerabilities catalog, indicating ac
Vulnerability 2026-10-27
CVE-2026-48356 (Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability) affecting Adobe was added to CISA's Known Exploited Vu
Ransomware 2026-10-27
33 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, Whitearmor, dragonforce. Figures are aggregated from publi
Vulnerability 2026-10-26
CVE-2026-109619 (PHP Stale Internal Request-State Vulnerability) affecting PHP Group was added to CISA's Known Exploited Vulnerabilities catalog, indicating act
Vulnerability 2026-10-26
CVE-2026-109618 (PHP Memory Corruption Vulnerability) affecting PHP Group was added to CISA's Known Exploited Vulnerabilities catalog, indicating active exploit
Ransomware 2026-10-26
25 organizations were newly listed on ransomware leak sites, with the most active groups being N0n, qilin, payload. Figures are aggregated from public leak-site
Ransomware 2026-10-25
33 organizations were newly listed on ransomware leak sites, with the most active groups being krybit, Majinahanashi, N0n. Figures are aggregated from public le
Ransomware 2026-10-24
43 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, N0n, lockbit5. Figures are aggregated from public leak-sit
Vulnerability 2026-10-23
CVE-2026-110447 (Collabora Online – Built-in CODE Server OS Command Injection Vulnerability) affecting Collabora was added to CISA's Known Exploited Vulnerabili
Vulnerability 2026-10-23
CVE-2026-114625 (Arista VeloCloud Orchestrator SQL Injection Vulnerability) affecting Arista was added to CISA's Known Exploited Vulnerabilities catalog, indica
Ransomware 2026-10-23
30 organizations were newly listed on ransomware leak sites, with the most active groups being N0n, qilin, SilentRansomGroup. Figures are aggregated from public
Ransomware 2026-10-22
40 organizations were newly listed on ransomware leak sites, with the most active groups being N0n, BrainCipher, lamashtu. Figures are aggregated from public le
Ransomware 2026-10-21
25 organizations were newly listed on ransomware leak sites, with the most active groups being Booba Project, N0n, SilentRansomGroup. Figures are aggregated fro
Vulnerability 2026-10-20
CVE-2026-110936 (Siemens Software Center Uncontrolled Search Path Element Vulnerability) affecting Siemens was added to CISA's Known Exploited Vulnerabilities c
Vulnerability 2026-10-20
CVE-2026-96652 (Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability) affecting Plex was added to CISA's Known Exploited Vulnerabilities catalog,
Vulnerability 2026-10-20
CVE-2026-96654 (Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability) affecting Plex was added to CISA's Known Exploited
Vulnerability 2026-10-20
CVE-2026-96655 (Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability) affecting Plex was added to CISA's Known Exploited Vulnerabilities catalog,
Vulnerability 2026-10-20
CVE-2026-96656 (Plex Media Server External Control of File Name or Path Vulnerability) affecting Plex was added to CISA's Known Exploited Vulnerabilities catalo
Vulnerability 2026-10-20
CVE-2026-106931 (EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability) affecting EG Secure Solutions was added to CISA's Known Exploi
Ransomware 2026-10-20
31 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, N0n, Storm. Figures are aggregated from public leak-site m
Ransomware 2026-10-19
32 organizations were newly listed on ransomware leak sites, with the most active groups being N0n, settra, qilin. Figures are aggregated from public leak-site
Ransomware 2026-10-18
23 organizations were newly listed on ransomware leak sites, with the most active groups being everest, Helix, N0n. Figures are aggregated from public leak-site
Ransomware 2026-10-17
74 organizations were newly listed on ransomware leak sites, with the most active groups being thegentlemen, N0n, THE SEVEN DEADLY SINS. Figures are aggregated
Vulnerability 2026-10-16
CVE-2025-61624 (Fortinet Multiple Products Path Traversal Vulnerability) affecting Fortinet was added to CISA's Known Exploited Vulnerabilities catalog, indicat
Vulnerability 2026-10-16
CVE-2026-102764 (BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability) affecting BeyondTrust was added to CISA's Known Exploited Vulnerabi
Ransomware 2026-10-16
45 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, iah6477, N0n. Figures are aggregated from public leak-site
Vulnerability 2026-10-15
CVE-2026-21589 (Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability) affecting Atlassian was added to CISA's Known Exp
Ransomware 2026-10-15
22 organizations were newly listed on ransomware leak sites, with the most active groups being lockbit5, akira, nightspire. Figures are aggregated from public l
Vulnerability 2026-10-14
CVE-2026-0322 (Palo Alto Networks PAN-OS Code Injection Vulnerability) affecting Palo Alto Networks was added to CISA's Known Exploited Vulnerabilities catalog,
Vulnerability 2026-10-14
CVE-2026-105133 (Ahsay AhsayCBS Improper Authentication Vulnerability) affecting Ahsay was added to CISA's Known Exploited Vulnerabilities catalog, indicating a
Vulnerability 2026-10-14
CVE-2026-76519 (Cisco Secure Email Gateway Relative Path Traversal Vulnerability) affecting Cisco was added to CISA's Known Exploited Vulnerabilities catalog, i
Vulnerability 2026-10-14
CVE-2026-105134 (Ahsay AhsayCBS Command Injection Vulnerability) affecting Ahsay was added to CISA's Known Exploited Vulnerabilities catalog, indicating active
Ransomware 2026-10-14
59 organizations were newly listed on ransomware leak sites, with the most active groups being Wallstreet, HYFLOCK, Orova. Figures are aggregated from public le
Vulnerability 2026-10-13
CVE-2026-96951 (Microsoft Windows Command Injection Vulnerability) affecting Microsoft was added to CISA's Known Exploited Vulnerabilities catalog, indicating a
Vulnerability 2026-10-13
CVE-2026-104935 (Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability) affecting Ivanti was added to CISA's Known Exploited Vulnerabilities cat
Ransomware 2026-10-13
71 organizations were newly listed on ransomware leak sites, with the most active groups being N0n, interlock, thegentlemen. Figures are aggregated from public
Ransomware 2026-10-12
21 organizations were newly listed on ransomware leak sites, with the most active groups being N0n, qilin, rhysida. Figures are aggregated from public leak-site
Ransomware 2026-10-11
29 organizations were newly listed on ransomware leak sites, with the most active groups being Majinahanashi, qilin, thegentlemen. Figures are aggregated from p
Ransomware 2026-10-10
82 organizations were newly listed on ransomware leak sites, with the most active groups being thegentlemen, nightspire, qilin. Figures are aggregated from publ
Ransomware 2026-10-09
34 organizations were newly listed on ransomware leak sites, with the most active groups being nightspire, Eclipse, SilentRansomGroup. Figures are aggregated fr
Vulnerability 2026-10-08
CVE-2015-3306 (ProFTPD Improper Access Control Vulnerability) affecting ProFTPD was added to CISA's Known Exploited Vulnerabilities catalog, indicating active e
Vulnerability 2026-10-08
CVE-2021-3199 (ONLYOFFICE Docs Server Path Traversal Vulnerability) affecting ONLYOFFICE was added to CISA's Known Exploited Vulnerabilities catalog, indicating
Vulnerability 2026-10-08
CVE-2023-22894 (Strapi Cleartext Storage of Sensitive Information Vulnerability) affecting Strapi was added to CISA's Known Exploited Vulnerabilities catalog, i
Vulnerability 2026-10-08
CVE-2016-3081 (Apache Struts Command Injection Vulnerability) affecting Apache was added to CISA's Known Exploited Vulnerabilities catalog, indicating active ex
Vulnerability 2026-10-08
CVE-2015-5477 ( ISC BIND Data Processing Errors Vulnerability) affecting ISC was added to CISA's Known Exploited Vulnerabilities catalog, indicating active expl
Ransomware 2026-10-08
24 organizations were newly listed on ransomware leak sites, with the most active groups being incransom, UmBra, qilin. Figures are aggregated from public leak-
Ransomware 2026-10-07
20 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, everest, akira. Figures are aggregated from public leak-si
Ransomware 2026-10-06
51 organizations were newly listed on ransomware leak sites, with the most active groups being safepay, VYPR, BYOD. Figures are aggregated from public leak-site
Ransomware 2026-10-05
16 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, krybit, play. Figures are aggregated from public leak-site
Vulnerability 2026-10-04
CVE-2026-88779 (Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability) affecting Citrix was added to CISA's Kno
Ransomware 2026-10-04
19 organizations were newly listed on ransomware leak sites, with the most active groups being thegentlemen, Storm, Wallstreet. Figures are aggregated from publ
Ransomware 2026-10-03
31 organizations were newly listed on ransomware leak sites, with the most active groups being settra, krybit, Booba Project. Figures are aggregated from public
Vulnerability 2026-10-02
CVE-2026-102489 (Zammad GmbH Zammad Session Fixation Vulnerability) affecting Zammad GmbH was added to CISA's Known Exploited Vulnerabilities catalog, indicatin
Run a free security report for any domain.
Get your free report