Cybercrime
Third US Security Professional Sentenced to 70 Months for Aiding BlackCat Ransomware
A pointed law-enforcement pattern — the third US security professional sentenced for aiding ransomware operations lands this week.
Ransomware
Sysdig Documents "JadePuffer," Reportedly the First Fully Agentic-AI-Driven Ransomware Case
The first documented agentic-AI ransomware analysis lands — cloud-defender teams review posture and the human-in-the-loop nuance this week.
Ransomware
FortiBleed-Linked Actors Reportedly Collaborating With INC and Lynx Ransomware Operations
Threat-cluster convergence between FortiBleed and two ransomware families — defender teams stay in credential-verification posture this week.
Vulnerabilities
Microsoft Defender Flaw CVE-2026-33825, 'BlueHammer,' Tied to Ransomware Activity
Another Defender zero-day for defender teams to verify — patch cycle plus KEV watch this week.
Ransomware
Researchers Publish Findings on INC Ransomware-as-a-Service Activity: 830+ Victims
Another RaaS profile lands on defenders' desks — detection-engineering review for the week.
Ransomware
Europol Announces Takedown of AudiA6 Crypto Laundering Service
Breaking the financial pipes of the ransomware economy — Europol's latest structural disruption.
Ransomware
Ukrainian National Pleads Guilty in Conti Ransomware Case
Another individual conviction in the long-running US law-enforcement effort against the Conti operation.
Ransomware
"The Gentlemen" Ransomware Claims 478 Victims and Spreads Like a Worm
A ransomware group that spreads like a worm and counts 478 victims — and the Krebs investigation now identifying the people running it.
Vulnerabilities
Veeam Discloses Veeam Backup & Replication Remote Code Execution Vulnerability
A patch cycle on the backup-of-record for the enterprise — high-priority, given the ransomware-response context.
Vulnerabilities
Check Point VPN Zero-Day CVE-2026-50751 Exploited for a Month Before Patch; Qilin Ransomware Involved
A logic-flow weakness in Check Point's Remote Access VPN gave a Qilin ransomware affiliate and other attackers a month to operate before a patch arrived.
Threat Intelligence
Mandiant Documents UNC3753 Extortion Campaign Against US Legal-Services Firms
Mandiant's published findings on a financially motivated campaign give defenders in legal and financial services a sector advisory to act on.
Artificial Intelligence (AI)
Sophos Uncovers an AI-Orchestrated Lab Built to Test and Refine EDR-Evasion Malware
Sophos documented a threat actor using AI agents — including a Claude Opus 4.5 coordinator — to run a lab testing malware against Sophos, CrowdStrike and Microsoft Defender. Notably, the lab's own claims of rising evasion success were not borne out by Sophos's data.