Ransomware 2026-10-31
Ransomware activity digest — 2026-10-31
42 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, genesis, SilentRansomGroup. Figures are aggregated from pu
Automated daily updates on newly exploited vulnerabilities, ransomware activity and malware indicators — from public sources.
Ransomware 2026-10-31
42 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, genesis, SilentRansomGroup. Figures are aggregated from pu
Vulnerability 2026-10-30
CVE-2026-111357 (Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability) affecting Ivanti was added to CISA's Known Exploited Vulnerab
Vulnerability 2026-10-30
CVE-2026-118527 (Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability) affecting Ivanti was added to CISA's Known Exploited Vuln
Ransomware 2026-10-30
31 organizations were newly listed on ransomware leak sites, with the most active groups being Booba Project, qilin, Shiba. Figures are aggregated from public l
Vulnerability 2026-10-29
CVE-2026-76418 (Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability) affecting Cis
Vulnerability 2026-10-29
CVE-2026-97229 (GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability) affecting GitLab was added to CISA's Known Exploit
Ransomware 2026-10-29
25 organizations were newly listed on ransomware leak sites, with the most active groups being SilentRansomGroup, akira, Whitearmor. Figures are aggregated from
Vulnerability 2026-10-28
CVE-2026-46300 (Linux Kernel Missing Initialization of a Variable Vulnerability) affecting Linux was added to CISA's Known Exploited Vulnerabilities catalog, in
Vulnerability 2026-10-28
CVE-2026-41709 (Broadcom VMWare ESX Insufficient Logging Vulnerability) affecting Broadcom was added to CISA's Known Exploited Vulnerabilities catalog, indicati
Ransomware 2026-10-28
42 organizations were newly listed on ransomware leak sites, with the most active groups being Booba Project, everest, play. Figures are aggregated from public
Vulnerability 2026-10-27
CVE-2026-111497 (Google Brotli Unchecked Return Value Vulnerability) affecting Google was added to CISA's Known Exploited Vulnerabilities catalog, indicating ac
Vulnerability 2026-10-27
CVE-2026-48356 (Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability) affecting Adobe was added to CISA's Known Exploited Vu
Ransomware 2026-10-27
33 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, Whitearmor, dragonforce. Figures are aggregated from publi
Vulnerability 2026-10-26
CVE-2026-109619 (PHP Stale Internal Request-State Vulnerability) affecting PHP Group was added to CISA's Known Exploited Vulnerabilities catalog, indicating act
Vulnerability 2026-10-26
CVE-2026-109618 (PHP Memory Corruption Vulnerability) affecting PHP Group was added to CISA's Known Exploited Vulnerabilities catalog, indicating active exploit
Ransomware 2026-10-26
25 organizations were newly listed on ransomware leak sites, with the most active groups being N0n, qilin, payload. Figures are aggregated from public leak-site
Ransomware 2026-10-25
33 organizations were newly listed on ransomware leak sites, with the most active groups being krybit, Majinahanashi, N0n. Figures are aggregated from public le
Ransomware 2026-10-24
43 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, N0n, lockbit5. Figures are aggregated from public leak-sit
Vulnerability 2026-10-23
CVE-2026-110447 (Collabora Online – Built-in CODE Server OS Command Injection Vulnerability) affecting Collabora was added to CISA's Known Exploited Vulnerabili
Vulnerability 2026-10-23
CVE-2026-114625 (Arista VeloCloud Orchestrator SQL Injection Vulnerability) affecting Arista was added to CISA's Known Exploited Vulnerabilities catalog, indica
Ransomware 2026-10-23
30 organizations were newly listed on ransomware leak sites, with the most active groups being N0n, qilin, SilentRansomGroup. Figures are aggregated from public
Ransomware 2026-10-22
40 organizations were newly listed on ransomware leak sites, with the most active groups being N0n, BrainCipher, lamashtu. Figures are aggregated from public le
Ransomware 2026-10-21
25 organizations were newly listed on ransomware leak sites, with the most active groups being Booba Project, N0n, SilentRansomGroup. Figures are aggregated fro
Vulnerability 2026-10-20
CVE-2026-110936 (Siemens Software Center Uncontrolled Search Path Element Vulnerability) affecting Siemens was added to CISA's Known Exploited Vulnerabilities c
Vulnerability 2026-10-20
CVE-2026-96652 (Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability) affecting Plex was added to CISA's Known Exploited Vulnerabilities catalog,
Vulnerability 2026-10-20
CVE-2026-96654 (Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability) affecting Plex was added to CISA's Known Exploited
Vulnerability 2026-10-20
CVE-2026-96655 (Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability) affecting Plex was added to CISA's Known Exploited Vulnerabilities catalog,
Vulnerability 2026-10-20
CVE-2026-96656 (Plex Media Server External Control of File Name or Path Vulnerability) affecting Plex was added to CISA's Known Exploited Vulnerabilities catalo
Vulnerability 2026-10-20
CVE-2026-106931 (EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability) affecting EG Secure Solutions was added to CISA's Known Exploi
Ransomware 2026-10-20
31 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, N0n, Storm. Figures are aggregated from public leak-site m
Ransomware 2026-10-19
32 organizations were newly listed on ransomware leak sites, with the most active groups being N0n, settra, qilin. Figures are aggregated from public leak-site
Ransomware 2026-10-18
23 organizations were newly listed on ransomware leak sites, with the most active groups being everest, Helix, N0n. Figures are aggregated from public leak-site
Ransomware 2026-10-17
74 organizations were newly listed on ransomware leak sites, with the most active groups being thegentlemen, N0n, THE SEVEN DEADLY SINS. Figures are aggregated
Vulnerability 2026-10-16
CVE-2025-61624 (Fortinet Multiple Products Path Traversal Vulnerability) affecting Fortinet was added to CISA's Known Exploited Vulnerabilities catalog, indicat
Vulnerability 2026-10-16
CVE-2026-102764 (BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability) affecting BeyondTrust was added to CISA's Known Exploited Vulnerabi
Ransomware 2026-10-16
45 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, iah6477, N0n. Figures are aggregated from public leak-site
Vulnerability 2026-10-15
CVE-2026-21589 (Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability) affecting Atlassian was added to CISA's Known Exp
Ransomware 2026-10-15
22 organizations were newly listed on ransomware leak sites, with the most active groups being lockbit5, akira, nightspire. Figures are aggregated from public l
Vulnerability 2026-10-14
CVE-2026-0322 (Palo Alto Networks PAN-OS Code Injection Vulnerability) affecting Palo Alto Networks was added to CISA's Known Exploited Vulnerabilities catalog,
Vulnerability 2026-10-14
CVE-2026-105133 (Ahsay AhsayCBS Improper Authentication Vulnerability) affecting Ahsay was added to CISA's Known Exploited Vulnerabilities catalog, indicating a
Vulnerability 2026-10-14
CVE-2026-76519 (Cisco Secure Email Gateway Relative Path Traversal Vulnerability) affecting Cisco was added to CISA's Known Exploited Vulnerabilities catalog, i
Vulnerability 2026-10-14
CVE-2026-105134 (Ahsay AhsayCBS Command Injection Vulnerability) affecting Ahsay was added to CISA's Known Exploited Vulnerabilities catalog, indicating active
Ransomware 2026-10-14
59 organizations were newly listed on ransomware leak sites, with the most active groups being Wallstreet, HYFLOCK, Orova. Figures are aggregated from public le
Vulnerability 2026-10-13
CVE-2026-96951 (Microsoft Windows Command Injection Vulnerability) affecting Microsoft was added to CISA's Known Exploited Vulnerabilities catalog, indicating a
Vulnerability 2026-10-13
CVE-2026-104935 (Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability) affecting Ivanti was added to CISA's Known Exploited Vulnerabilities cat
Ransomware 2026-10-13
71 organizations were newly listed on ransomware leak sites, with the most active groups being N0n, interlock, thegentlemen. Figures are aggregated from public
Ransomware 2026-10-12
21 organizations were newly listed on ransomware leak sites, with the most active groups being N0n, qilin, rhysida. Figures are aggregated from public leak-site
Ransomware 2026-10-11
29 organizations were newly listed on ransomware leak sites, with the most active groups being Majinahanashi, qilin, thegentlemen. Figures are aggregated from p
Ransomware 2026-10-10
82 organizations were newly listed on ransomware leak sites, with the most active groups being thegentlemen, nightspire, qilin. Figures are aggregated from publ
Ransomware 2026-10-09
34 organizations were newly listed on ransomware leak sites, with the most active groups being nightspire, Eclipse, SilentRansomGroup. Figures are aggregated fr
Vulnerability 2026-10-08
CVE-2015-3306 (ProFTPD Improper Access Control Vulnerability) affecting ProFTPD was added to CISA's Known Exploited Vulnerabilities catalog, indicating active e
Vulnerability 2026-10-08
CVE-2021-3199 (ONLYOFFICE Docs Server Path Traversal Vulnerability) affecting ONLYOFFICE was added to CISA's Known Exploited Vulnerabilities catalog, indicating
Vulnerability 2026-10-08
CVE-2023-22894 (Strapi Cleartext Storage of Sensitive Information Vulnerability) affecting Strapi was added to CISA's Known Exploited Vulnerabilities catalog, i
Vulnerability 2026-10-08
CVE-2016-3081 (Apache Struts Command Injection Vulnerability) affecting Apache was added to CISA's Known Exploited Vulnerabilities catalog, indicating active ex
Vulnerability 2026-10-08
CVE-2015-5477 ( ISC BIND Data Processing Errors Vulnerability) affecting ISC was added to CISA's Known Exploited Vulnerabilities catalog, indicating active expl
Ransomware 2026-10-08
24 organizations were newly listed on ransomware leak sites, with the most active groups being incransom, UmBra, qilin. Figures are aggregated from public leak-
Ransomware 2026-10-07
20 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, everest, akira. Figures are aggregated from public leak-si
Ransomware 2026-10-06
51 organizations were newly listed on ransomware leak sites, with the most active groups being safepay, VYPR, BYOD. Figures are aggregated from public leak-site
Ransomware 2026-10-05
16 organizations were newly listed on ransomware leak sites, with the most active groups being qilin, krybit, play. Figures are aggregated from public leak-site
Vulnerability 2026-10-04
CVE-2026-88779 (Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability) affecting Citrix was added to CISA's Kno
Run a free security report for any domain.
Get your free report