A wave of ransomware attacks is targeting VMware ESXi servers that are vulnerable to CVE-2021-21974.
A Linux version of the Cl0p ransomware has been identified, but it has a flaw in its encryption routine that allowed researchers to build a decryptor for it.
The FBI and international alw enforcement agencies have taken down the Hive ransomware infrastructure.
BitDefender has released a decryption tool for the MegaCortex ransomware variant.
Play ransomware actors have been using a previously undocumented exploitation method for the ProxyNotShell Exchange flaws.