Discussions, questions and news about Ransomware from cybersecurity professionals on Cyberr.
0 members · 47 posts
Laurent Halimi — CEO & Founder CYBERR & HEELR
Nearly 11,000 cybercrime networks dismantled in major international operation across Africa Twenty-one countries took part in Operation Serengeti III, which led to 1,462 arrests and the recovery of more than $105 million linked to criminal activities. The operation, codenamed Se…
· 9 reactions · 1 comments
Mario Matkovski — Independent Threat Researcher | Ransomware Intelligence & OSINT
When Ransomware Operators Become Buyers Underground markets are not only places where compromised access is offered for sale. They are also places where demand becomes visible. When ransomware actors seek access to corporate networks, the requirements themselves can provide usef…
· 6 reactions · 1 comments
Mario Matkovski — Independent Threat Researcher | Ransomware Intelligence & OSINT
Before the Ransomware Attack: The Initial Access Broker Economy Not every ransomware operation begins with the ransomware group gaining initial access. In some cases, that access may already be available through an Initial Access Broker (IAB). Compromised VPN credentials, expose…
· 8 reactions · 5 comments
Samuele Sparno
I've been working on a personal project called Foxscan 🦊, and I wanted to share it with the cybersecurity community and get some feedback. The idea came from a problem I kept running into: different news outlets covering the same cybersecurity incident, each reporting different…
· 8 reactions · 3 comments
Mario Matkovski — Independent Threat Researcher | Ransomware Intelligence & OSINT
Beyond the Leak Site: What the Azazel Case Reveals About Ransomware Attribution Independent Threat Research | 12 October 2026 Introduction Ransomware data leak sites are a valuable source of threat intelligence. They provide visibility into victim claims, extortion activity, and…
· 5 reactions · 8 comments
Schomer — Principal Security Solutions Architect & Founder
Critical Security Advisory: Unauthenticated Remote OS Command Injection in AhsayCBS (CVSS 10.0) A maximum-severity vulnerability tracking as EUVD-2026-92078 (CVE-2026-105134 / GHSA-mxj3-2x8q-2rh9) is actively being targeted by threat actors. This flaw grants unauthenticated atta…
· 3 reactions · 0 comments
samuel watua Soita — Full Stack Software Engineer
A cyberattack doesn't always begin with an alert. Sometimes, it begins with silence. An attacker gets access today. Nothing crashes. No ransomware appears. No obvious malware is detected. The business continues operating normally. Meanwhile, the attacker may be: → Mapping the en…
· 1 reactions · 0 comments
Quinton Plaatjies — SOC Engineer
If a reported AnyDesk Linux exploit exposes root access, the shareholder-value implications can be significant because it potentially gives attackers complete control over affected systems. 1. Operational Disruption Attackers with root privileges can disable systems, deploy rans…
· 1 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
Look at the emergence of the new x47.c botnet architecture currently evading standard endpoint monitoring. Instead of relying on static, hardcoded C2 instructions that legacy systems easily flag, this malware dynamically queries the xAI Grok API in real time to adaptively mutate…
· 3 reactions · 0 comments
Laurent Halimi — CEO & Founder CYBERR & HEELR
Buried in a routine cybersecurity digest this week was a line that should've stopped everyone scrolling: Meta confirmed one of its own AI models hacked another company during testing. Anthropic reportedly had a model create fake identities to fool humans during an incident ( CNB…
· 5 reactions · 2 comments
Ben Nguyen — Data Scientist
AI is transforming IT from software engineering to cybersecurity. It’s becoming a powerful tool for detecting malware, ransomware, and anomalous activity. It boosts productivity, supports coding, and acts as an intelligent assistant that can flag incidents for investigation. But…
· 2 reactions · 0 comments
Kameron — IT Support Technician
I work in a college town not terribly far from a major city, and there is very little cyber security presence outside of the major metropolitan area. Security is not just for big companies doing business in the city. Often times, it's smaller businesses that are prone to vulnera…
· 2 reactions · 0 comments
Zane Anderson — Security Consultant
Google's Gemini AI Autonomously Hacked Three Real Companies During a Security Test: Google has confirmed that its Gemini AI model gained unauthorized access to the systems of three real companies during a cybersecurity evaluation conducted by an independent firm in May 2026. The…
· 2 reactions · 0 comments
Schomer — Principal Security Solutions Architect & Founder
GLOBAL THREAT INTEL FLASH: Structural Failures, Wallet Drains, & Autonomous AgentsThe last 48 hours have put the fundamental flaws of legacy perimeter defenses on full display. When the solution to a threat is pulling the physical plug, or when static code validation fails again…
· 1 reactions · 0 comments
Zane Anderson — Security Consultant
Understanding TOR Operations: An Anonymity & Dark Web Intelligence Framework. TOR remains one of the most misunderstood tools in modern cybersecurity. While many view it solely as a privacy browser, it functions more accurately as an anonymity infrastructure layer that enables b…
· 3 reactions · 0 comments
Zane Anderson — Security Consultant
Compliance is Not Security: Security teams often treat laws and standards as administrative overhead. Adversaries treat them as a map of where the real gaps are. The delta between "audit theater" and operational reality is where most successful attacks live. The Core Distinction…
· 1 reactions · 2 comments
Zane Anderson — Security Consultant
IoT Search Engines: The Attack Surface You Can't See. The Bottom Line: If you're not hunting your own infrastructure on Shodan, someone else is. And they're probably doing it faster. IoT search engines have evolved from curiosity to core adversary infrastructure. IABs, ransomwar…
· 2 reactions · 0 comments
Zane Anderson — Security Consultant
Security controls are not products you buy. They are intentional design decisions that translate threat understanding into protective, detective, and responsive capabilities. Too many organizations treat security like a shopping list: "We bought an EDR, we have a firewall, we're…
· 3 reactions · 0 comments
Zane Anderson — Security Consultant
The Quiet War: Why Footprinting Is the Most Underrated Phase of Modern Cyber Operations Every major breach you have read about in the last five years started with someone simply paying attention. Before the ransomware deployment, before the MFA bypass, before the data exfiltrati…
· 1 reactions · 0 comments
Zane Anderson — Security Consultant
Edge appliances remain the front door. SonicWall confirmed active wild exploitation of two new SMA 1000 flaws today: CVE-2026-83548 (pre-auth SSRF, CVSS 10.0) and CVE-2026-83549 (command injection, CVSS 7.8). Chained together, they allow unauthenticated remote code execution. •…
· 1 reactions · 0 comments
PETER DESFIGIES — Cybersecurity / Threat Researcher / Breaker of All Things / Discovered a 563-Node Global Botnet
I wasn't going to post anything more today, but this one really sunk in and I reaped the rewards.. Friday afternoon. Mid-session. Alert fires. Live IAB operator. Healthcare credential harvesting. Caught in the act. But here's the part that matters — I've been tracking this guy f…
· 3 reactions · 3 comments
SHERIF SALAH EL-DIN — Cyber Security Analyst
https://youtu.be/rSeVOJaqRfg?si=reeSVtMe8VTaBHSR #CyberSecurity #CyberAttacks #ThreatLandscape #EthicalHacking #Phishing #Ransomware #Malware #DDoS #Botnet #SocialEngineering #Spyware #Trojan #BruteForce #BlueTeam #SOC #PenetrationTesting #CyberSecurityCourse #CyberSecurityForBe…
· 3 reactions · 0 comments
Zane Anderson — Security Consultant
If your organization still views security as a perimeter problem, the adversary has already moved two stages to the right in the MITRE ATT&CK matrix. The modern kill chain is no longer defined by noisy port scans and service malware droppers. Today's adversarial methodologies ar…
· 2 reactions · 0 comments
KOUE DOURWE JOSUE — Analyste Cybersécurité junior
⛔️ How do hackers compromise organizations... and more importantly, how can businesses protect themselves? When people think about hacking, they often imagine an attacker breaking into a system within minutes. In reality, most cyberattacks take advantage of human errors, known v…
· 2 reactions · 0 comments
Zane Anderson — Security Consultant
FTP Search: The Overlooked OSINT Goldmine: FTP search is the practice of locating files, directories, and indexed content on publicly reachable FTP servers. These indexes frequently contain installers, backups, documents, or configuration files never intended to be widely discov…
· 1 reactions · 0 comments