3 stories · “ransomware”.
Group-IB and NyxLab tie the k0t campaign against FortiGate and GlobalProtect appliances to 70,000 credentials, and to VPN sessions patching cannot close.
Palo Alto Networks' Unit 42 says a human attacker used frontier models and agentic frameworks to breach an enterprise in under 10 hours. No zero-day required.
Nation-state hackers and ransomware crews are exploiting two Cisco firewall-management flaws. Cisco Talos detailed three intrusion clusters this week; federal agencies must patch by September 12.
