BianLian: Cybercrime Group Exploiting SAP Vulnerabilities
BianLian is a cybercrime group that has been observed exploiting SAP vulnerabilities, including CVE-2025-31324, for ransomware and other malicious activities.
Tag: Ransomware
RansomExx: Ransomware Group Exploiting SAP Flaws
RansomExx is a ransomware group that has exploited SAP vulnerabilities such as CVE-2025-31324 to gain access to victim networks.
HiddenTear: Ransomware Signatures Found in Sable Squirrel Campaigns
HiddenTear is a ransomware family whose signatures have been found in artifacts communicating with Sable Squirrel's infrastructure, indicating potential ransomware activity within…
Trump Memo Authorizes U.S. Firms to Hack and Disrupt Foreign Crime Groups
A new White House memo signed by U.S. President Donald Trump directs the National Coordination Center (NCC) to establish a program allowing…
Transnational Criminal Organizations (TCOs) Targeted by New U.S. Offensive Cyber Program
Transnational Criminal Organizations (TCOs) are foreign groups that conduct cyber-enabled crimes such as ransomware, phishing, financial fraud, sextortion, and pig butchering scams…
Ransomware as a Key Cybercrime Tool Used by Transnational Criminal Organizations
Ransomware is a type of malware deployed by Transnational Criminal Organizations to extort victims. The White House memo highlights ransomware as one…
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 13 More Stories
This week's ThreatsDay Bulletin covers a wide range of cybersecurity developments, including new attack techniques, data breaches, and product updates. Key highlights…
Play Ransomware: Prevention Rates Collapse in 2026
Play ransomware is a notorious ransomware family. According to the Blue Report 2026, prevention effectiveness against Play dropped from 50% to 13%,…
Enterprise Defenses Recover at the Edge but Collapse Inside: Picus Blue Report 2026
The Picus Blue Report 2026, based on over 338 million attack simulations in production environments, reveals a split in enterprise defense effectiveness.…
DeadLock Ransomware Abuses Polygon Smart Contracts for Resilient Extortion Infrastructure
Microsoft Threat Intelligence has uncovered that the DeadLock ransomware group is leveraging decentralized infrastructure, including Polygon smart contracts and the Session messaging…