Cybercrime
Ryuk Suspect Extradited From Ukraine Pleads Guilty to US Ransomware Charges
Another Ryuk-operator plea lands — the ransomware-operator prosecution pattern continues this week.
Cybercrime
Armenian National Karen Vardanyan Pleads Guilty to Ryuk Ransomware Operations
Another individual-conviction milestone against a ransomware operation — law-enforcement coverage this week.
Ransomware
Unit 42 Details “The Gentlemen” Ransomware and the Affiliate Model Driving Its Growth
Another ransomware-affiliate-model profile lands on defenders’ desks — detection-engineering work this week.
Cybercrime
Third US Security Professional Sentenced to 70 Months for Aiding BlackCat Ransomware
A pointed law-enforcement pattern — the third US security professional sentenced for aiding ransomware operations lands this week.
Ransomware
Sysdig Documents "JadePuffer," Reportedly the First Fully Agentic-AI-Driven Ransomware Case
The first documented agentic-AI ransomware analysis lands — cloud-defender teams review posture and the human-in-the-loop nuance this week.
Ransomware
FortiBleed-Linked Actors Reportedly Collaborating With INC and Lynx Ransomware Operations
Threat-cluster convergence between FortiBleed and two ransomware families — defender teams stay in credential-verification posture this week.
Vulnerabilities
Microsoft Defender Flaw CVE-2026-33825, 'BlueHammer,' Tied to Ransomware Activity
Another Defender zero-day for defender teams to verify — patch cycle plus KEV watch this week.
Ransomware
Researchers Publish Findings on INC Ransomware-as-a-Service Activity: 830+ Victims
Another RaaS profile lands on defenders' desks — detection-engineering review for the week.
Ransomware
Europol Announces Takedown of AudiA6 Crypto Laundering Service
Breaking the financial pipes of the ransomware economy — Europol's latest structural disruption.
Ransomware
Ukrainian National Pleads Guilty in Conti Ransomware Case
Another individual conviction in the long-running US law-enforcement effort against the Conti operation.
Ransomware
"The Gentlemen" Ransomware Claims 478 Victims and Spreads Like a Worm
A ransomware group that spreads like a worm and counts 478 victims — and the Krebs investigation now identifying the people running it.
Vulnerabilities
Veeam Discloses Veeam Backup & Replication Remote Code Execution Vulnerability
A patch cycle on the backup-of-record for the enterprise — high-priority, given the ransomware-response context.