Ransomware

Ransomware gang talked AI agents into doing much of its dirty work

New RAID-AI framework focuses on ransomware resilience for AI systems

Infosecurity Magazine reports on RAID-AI, a new framework intended to help organisations assess their security preparation for ransomware attacks that target AI systems. The article excerpt gives no further detail on its structure, authors or requirements.

Hackers Use Cursor and Claude AI to Automate Attacks in Aur0ra Ransomware Operations

Aur0ra Ransomware Hackers Use Cursor AI Agents to Gain Domain Admin Access and Steal Data

UNM Health addresses cyberattack in New Mexico after ransomware group claims responsibility

Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems

Talos IR Q3 2026: Help desk vishing grows, ransomware rises to 27 percent of engagements

Talos IR found phishing was the top initial access method at just over one-third of engagements, down from over 50 percent, with vishing and help desk impersonation used to get victims to allow remote access via legitimate RMM tools. Exploitation of public-facing applications, mainly edge devices, accounted for one-third. Ransomware and pre-ransomware activity reached 27 percent, involving The Gentlemen, Qilin, Rhysida, Interlock and the newer VYPR, with EDR disabled via vulnerable drivers or WDAC.

Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles

Ukrainian National Sentenced for Role in Hacking Hospitals, Businesses, and Governments as Part of Ransomware Conspiracies Causing Over $100 Million in Losses

Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat

What happens when security tools go dark before the ransomware

University of New Mexico Health Sciences Center hit by cyberattack, classes and clinics disrupted

The University of New Mexico Health Sciences Center, which includes UNM Health, reported a 'cybersecurity event' on Monday 26 October 2026. Systems were shut down, clinics and appointments were cancelled, ambulances were diverted to facilities in Albuquerque and Santa Fe, and classes in medicine, nursing and pharmacy were cancelled for a second day. Hospital appointments and clinics return to normal on the second day, though nonessential staff were asked to stay at home. The university notified state and federal law enforcement, brought in external partners and activated an Emergency Operations Center, but has not described the nature of the attack.

Ukrainian Hive and Nefilim ransomware affiliate Artem Stryzhak sentenced to 70 months in prison

Artem Aleksandrovych Stryzhak, a 36-year-old Ukrainian national, was sentenced in federal court in Brooklyn to 70 months for his role as an affiliate of the Nefilim and Hive ransomware operations between mid-2018 and late 2021. He pleaded guilty in December 2025 after being arrested in Spain in June 2024 and extradited in April 2025. Victims included hospitals, government entities, law firms and an oil and gas transportation company, and his alleged co-conspirator Volodymyr Tymoshchuk remains at large with an $11 million reward on offer.