
Synology NAS hit by ransomware due to old unpatched flaw
A tech-savvy user's internet-exposed Synology NAS got encrypted by ransomware after skipping security updates for 18 months.
Tag
The latest news, analysis and stories about Ransomware — TECC.UZ.
18 articles

A tech-savvy user's internet-exposed Synology NAS got encrypted by ransomware after skipping security updates for 18 months.

American authorities have seized the main domain of Virtualine, a bulletproof hosting service heavily used by ransomware operators and cybercriminals.

A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals and government entities.

The Cybersecurity and Infrastructure Security Agency (CISA) reports that the SafePay ransomware gang has breached over 600 critical infrastructure organizations globally since 2024.

Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and force victims to pay. Kaseya outlines key protection strategies.

A China-linked threat group has breached multiple critical sectors including water utilities and telecom providers using SharePoint exploits.

An international law enforcement operation named Operation KillSwitch successfully seized the KillSec ransomware gang's servers and data leak site.

The notorious Clop ransomware gang has migrated its data leak site to a new Tor address after hackers compromised their previous server via a Grav CMS vulnerability.

The US Cybersecurity Agency has warned federal agencies that ransomware groups are now exploiting a critical JetBrains TeamCity vulnerability.

The ShinyHunters extortion gang breached Clop ransomware's leak site, stealing server data and private keys.

The U.S. CISA has warned that ransomware gangs have joined ongoing attacks exploiting a critical VMware vCenter vulnerability.

A newly discovered Android threat named Mantax Otax combines ransomware and spyware features to compromise mobile devices.

Cisco Talos reveals that two recently patched Secure Firewall Management Center vulnerabilities have been actively exploited by three threat clusters.

Healthcare technology company Veradigm disclosed a data breach affecting patient personal information following a cybersecurity incident at a third-party vendor.

A suspected ransomware affiliate is pretending to be a data recovery service called "Ransom Busters" to extract payments from victims.

The FBI and CISA report that the Medusa ransomware gang has breached more than 500 critical infrastructure organizations in the US since June 2021.

Cybercriminals have developed a custom Java web shell targeting PTC Windchill and FlexPLM servers to decrypt credentials and steal sensitive data.

The U.S. CISA confirms that ransomware gangs are actively exploiting a high-severity Windows Task Host vulnerability.