ransomware
11 live · 20 on record · last incident 1 day ago
Live11
- liveUniversity of Texas at Arlington discloses data breach from cyberattack
Breaches & attacks · Exploited · since 13 Nov 2026
The University of Texas at Arlington confirmed that personal information was stolen during a recent cyberattack. An investigation verified the data theft, though specific details on the compromised records remain undisclosed.
- liveActiveCloud Ransomware attack on ActiveCloud disrupts Belarusian businesses
Breaches & attacks · Exploited · since 13 Nov 2026
Hackers breached ActiveCloud and encrypted parts of its cloud infrastructure, causing multi-day service outages for customers. The company confirmed the intrusion and worked to restore affected systems.
Do:Verify cloud backups and review access controls.
- liveWhiteArmor ransomware Maersk confirms data breach as WhiteArmor ransomware demands $5 million
Breaches & attacks · Exploited · since 11 Nov 2026 · updated 12 Nov 2026
Maersk confirmed that attackers gained unauthorized access to an acquired legacy system and extracted internal data. The WhiteArmor ransomware group subsequently issued a $5 million extortion demand.
- liveVanderbilt University networks Vanderbilt University targeted in ransomware attack by BYOD gang
Breaches & attacks · Exploited · since 9 Nov 2026 · updated 10 Nov 2026
Vanderbilt University is investigating a cyberattack orchestrated by the BYOD ransomware group. The attackers assert that they have encrypted university databases and exfiltrated sensitive data.
Do:Follow institutional incident response guidelines and monitor for compromised credentials.
- liveBeget cloud infrastructure Russian Cloud Firm Beget Rebuilds After Data Wiper Attack
Breaches & attacks · Real loss · since 9 Nov 2026
A data-wiping malware attack struck Russian cloud services provider Beget, forcing the company to rebuild its entire cloud infrastructure from scratch. Operations were severely impacted as the organization recovered from the wiper event.
Do:Isolate affected cloud infrastructure and verify backup integrity.
- liveQueens Public Library network Queens Public Library Suffers Ransomware Attack Disrupting Services
Breaches & attacks · Real loss · since 5 Nov 2026 · updated 10 Nov 2026
A ransomware attack disrupted Wi-Fi and on-site computers across multiple branches of the Queens Public Library system. The library confirmed the attack through public alerts.
- live3AM ransomware tooling 3AM Affiliate Uses AI-Assisted Loops in European School Attack
Breaches & attacks · Real loss · since 3 Nov 2026
Evidence suggests a ransomware affiliate leveraged AI models to generate and refine commands during an attack on a European school. Researchers noted automated looping behavior during the intrusion.
AI - liveSynology NAS Synology Warns of C3RB3R Ransomware Attacks Targeting NAS Devices
Breaches & attacks · Exploited · since 2 Nov 2026 · updated 3 Nov 2026
Synology issued an urgent warning to customers regarding a surge in C3RB3r ransomware attacks hitting its network-attached storage devices. Users are advised to update their systems immediately to prevent exploitation.
Do:Update your Synology NAS devices immediately.
- liveMichigan State University network Michigan State Cyber Incident Claimed by Ransomware Gang
Breaches & attacks · Exploited · since 2 Nov 2026
The BYOD ransomware gang claimed responsibility for a security incident at Michigan State University. The attack prompted campus-wide action following similar activity against other universities.
- liveCursor AI Aur0ra ransomware operators used AI coding agents for intrusion workflows
Breaches & attacks · Real loss · since Aug 2026 (approx.)
The Aur0ra ransomware gang utilized AI coding assistants during network intrusions to harvest credentials and navigate victim environments. Researchers recovered artifacts showing attackers delegating reconnaissance tasks to the agents.
AI - liveMicrosoft Teams Help desk impersonation attack campaign leads to enterprise ransomware
Breaches & attacks · Real loss · since 30 Sep 2026 · updated 2 Nov 2026
Attackers posing as IT help desk staff contacted employees by phone, email, and Microsoft Teams to trick them into remote access sessions. In at least one engagement, this intrusion ultimately resulted in ransomware deployment.
Earlier9
- closedBAE Systems federal bankruptcy courts systems BAE Systems reports no data stolen in federal bankruptcy courts cyber incident
Breaches & attacks · Exploited · since 29 Oct 2026
- closedOnamae Desktop Cloud GMO Group urges customer system shutdowns following Onamae breach
Breaches & attacks · Exploited · since 27 Oct 2026 · updated 28 Oct 2026
- closedUniversity of New Mexico hospitals systems Cyberattack disrupts University of New Mexico hospitals
Breaches & attacks · Exploited · since 27 Oct 2026 · updated 29 Oct 2026
- closedMicrosoft Teams Microsoft Teams IT Support Scams Deploy Malware and Ransomware
Breaches & attacks · Exploited · since 26 Oct 2026 · updated 27 Oct 2026
- closedPhantom Ransomware Affiliates Execute Intrusions Using Autonomous AI Agent Framework
Breaches & attacks · Exploited · since 23 Oct 2026
AI - closedLangflow LLM-Driven Ransomware Operator JADEPUFFER Targeted Production Database
Breaches & attacks · Exploited · since 1 Jul 2026
AI - closedCursor Agent Aurora Ransomware Operator Reportedly Used Cursor Agent in Intrusions
Breaches & attacks · Exploited · since 8 Apr 2026
AI - closedClaude Anthropic Identifies AI Misuse in Extortion and Ransomware Campaigns
Breaches & attacks · Exploited · since 27 Aug 2025
AI - closedMiniapps chatbots FunkSec ransomware group allegedly leverages AI tools in attacks
Breaches & attacks · Real loss · since 10 Jan 2025
AI