🏷️ ransomware

7 articles tagged ransomware.

Smart Office Security Month in Review: The Eight Things That Defined May 2026

Smart Office Security Month in Review: The Eight Things That Defined May 2026

May 2026 produced a CVSS 10.0 Cisco firewall zero-day exploited by ransomware for weeks before disclosure, two active botnet campaigns against industrial routers, a dark web ICS malware toolkit, a critical telnet RCE in legacy OT devices, CISA advisories across five major vendors, a supply chain attack targeting AI developers, and joint government guidance explicitly prohibiting LLMs in safety-critical OT systems. Here is what the month meant for organizations running connected office environments.

 CVSS 10.0: Interlock Ransomware Exploited Cisco's Firewall Zero-Day for Weeks Before Cisco Knew

CVSS 10.0: Interlock Ransomware Exploited Cisco's Firewall Zero-Day for Weeks Before Cisco Knew

CVE-2026-20131 in Cisco Secure Firewall Management Center carries the maximum possible CVSS score of 10.0 and allows unauthenticated remote attackers to execute arbitrary Java code as root via an insecure deserialization flaw. The Interlock ransomware group was exploiting it as a zero-day from January 26, 2026 — more than a month before Cisco disclosed the vulnerability publicly — using memory-resident web shells, custom JavaScript and Java remote access trojans, and Active Directory certificate abuse to move through victim networks.

 Manufacturing Ransomware's 'New Normal': 800 Victims, Data Extortion, and Four Groups Running the Show

Manufacturing Ransomware's 'New Normal': 800 Victims, Data Extortion, and Four Groups Running the Show

Q1 2026 ransomware data confirms manufacturing's sustained crisis: 800+ victims across all sectors, attack volumes holding steady quarter-over-quarter, and a structural shift toward data extortion replacing traditional encryption. Four groups — RansomHub, SafePay, Akira, and Qilin — are running the industrial targeting playbook.

 Bedside to Breach: 7 Million Medical IoT Devices, One Crisis, and the Ransomware Groups Targeting Them

Bedside to Breach: 7 Million Medical IoT Devices, One Crisis, and the Ransomware Groups Targeting Them

22% of healthcare organizations have experienced cyberattacks that directly impacted medical devices, with three-quarters of those incidents disrupting patient care. As IoMT deployments surpass 7 million devices in smart hospitals, the attack surface is growing faster than the defenses.

 80% of UK Manufacturers Hit by Cyberattacks: The Boardroom Gap Putting Your Business at Risk

80% of UK Manufacturers Hit by Cyberattacks: The Boardroom Gap Putting Your Business at Risk

New research quantifies the scale of the manufacturing cyber crisis — and reveals the single most dangerous gap: leadership treating cybersecurity as an IT problem rather than a business risk. Here's what business leaders and IT managers need to understand, and what to do about it.

 Manufacturing Under Siege: 89 Ransomware Attacks in 30 Days Signal Industry's Most Dangerous Era

Manufacturing Under Siege: 89 Ransomware Attacks in 30 Days Signal Industry's Most Dangerous Era

Manufacturing is now the #1 ransomware target for five consecutive years. 89 confirmed attacks in 30 days reveals a structural shift — attackers are going after OT/ICS systems, not just IT infrastructure.

 K-12 Cyber Attacks: The Growing Threat to Our Schools and Children's Privacy

K-12 Cyber Attacks: The Growing Threat to Our Schools and Children's Privacy

Cyberattacks on K-12 institutions are on the rise, putting student information and educational processes at risk.

← All topics

Ask Sage 🤖