Topic
Deployment of encrypting malware, including Babuk-derived payloads used as anti-forensic cover rather than for extortion alone.
Cynthia Kaiser says infrastructure operations have pushed some crews off US targets entirely. The numbers are the bureau's own, but the cadence is something defenders can plan around.
Reality
Nine agencies across four countries refreshed the #StopRansomware Akira advisory on Nov. 13 with indicators current to November 2025 and a three-item action list.
Reality
Check Point Research says a nonce bug in every public VECT build leaves files above 131,072 bytes unrecoverable, by the attacker as well. That turns extortion into destruction.
Reality
Coveware says four bytes of the per-file public key get overwritten on the stack, so no private key exists for anything Nitrogen encrypted on ESXi. Not even the attacker can undo it.
Reality
Black Kite's read of 13,336 disclosed incidents puts 73% of victims in the mid-market, a share that held while volume rose 44%. The upper band is the only one shrinking.
Reality
New York's regulator confirmed impact to licensed firms from the exploited N-central flaw. The product belongs to banks' IT providers, which answer to no financial supervisor.
Reality
QUIRSO says a suspected China-nexus actor turned CVE-2026-59310 into a backdoor, a reverse SSH binary and Babuk-derived ransomware, with 361 victim IPs across 47 countries.
Reality