Search

ASCII.jp: What Is “Ransomware,” the Term We Keep Hearing About Amid a Wave of Cyberattacks? Can You Explain It?

Translated title. Original: ASCII.jp：相次ぐサイバー攻撃で耳にする「ランサムウェア」って何？ あなたは説明できますか

Ransomware locks files to demand payment, and newer attacks may also steal information and threaten to publish it. The article explains how Ransomware as a Service has made attacks easier to carry out and why backups alone may not protect victims.

Beware the New AI-Fueled Ransomware Boom | WIRED

Ransomware activity remains high, with researchers reporting a recent rise in alleged attacks, especially internationally. Criminal groups are using AI for phishing and other tasks, though attacks remain mostly human-operated.

Intrinsic defenses of Google Workspace against ransomware (Part 1) — Understanding attackers' objectives —

Translated title. Original: ランサムウェアに対するGoogle Workspaceの本質的な防御策（前編）〜攻撃者の目的を理解する〜

This article explains how ransomware tactics have evolved from encrypting data to stealing and threatening to expose confidential information. It emphasizes that protecting against data exfiltration is essential, notes Google Drive's ransomware detection as a partial defense, and foreshadows rising no-encryption attacks driven by AI. A follow-up will discuss access controls, DLP, and other security measures in Google Workspace.

Synology NAS devices were hacked, C3RB3R ransomware is locking files with .LOCKED

Translated title. Original: Synology NAS cihazları hacklendi, C3RB3R fidye yazılımı dosyaları .L0CK3D yapıyor

Ransomware named C3RB3R is encrypting files on Synology NAS devices. Chinese firm 360 blames two critical DSM flaws that Synology patched in September; Solar cites a victim on DSM 7.4.1 and suggests a zero-day may be involved.

Wavering robots and ransomware artificial intelligence. - Blikk

Translated title. Original: Hibázó robotok és zsaroló mesterséges intelligencia. - Blikk

AI and robotics are increasingly integrated into daily life, sparking debate over safeguards and the potential for misuse. The discussion covers alarming AI behaviors, safety concerns in robotics, privacy implications of brain-data research, and the evolving relationship between technology and art, with calls for regulation and transparency.

GMO Internet hacked, CEO called for active cybersecurity defense

Translated title. Original: GMO Internet hacklendi, CEO aktif siber savunma talep etti

GMO Internet Group faced a cyberattack on Onamae.com's Desktop Cloud, potentially compromising up to 26,739 virtual servers and customer data. The firm refused a ransom, engaged authorities and external experts, and urged Japan to enact active cyber defense regulations to better protect critical infrastructure amid evolving threats.

PwnEscape Linux kernel vulnerability is rebooting Contabo VPSes

Translated title. Original: PwnEscape Linux çekirdeği güvenlik açığı, Contabo VPS'leri yeniden başlatıyor

A critical Linux kernel vulnerability (CVE-2026-99999, CVSS 9.3) affects Contabo VPS/VDS, allowing a guest to access host memory and potentially gain admin access. Contabo began patching all hosts with restarts around Oct 17–18; the issue centers on kernel networking code, not KVM. Red Hat released a fix; Vercel ran a bug bounty program, awarding $242k across 1,285 reports. The incident timeline spans from early September to mid-October, with varying evidence on memory leaks and host compromise; patches and reboot procedures are described for customers.

Palo Alto's firewall OS has been under attack from multiple ransomware groups since June

Ransomware groups are abusing CVE-2026-0257 in PAN-OS to bypass security and VPNs, enabling initial access and lateral movement across many industries; advisories indicate rapid exploitation after a May patch, with attackers targeting virtualization layers and domain credentials. Patch promptly and check indicators of compromise.

New biggest theft: Over 6 billion US dollars stolen from Binance | heise online

Translated title. Original: Neuer größter Diebstahl: Über 6 Milliarden US-Dollar bei Binance abgegriffen | heise online

A suspected North Korea–linked attack on Binance involved unauthorized withdrawals totaling about 6.3 billion USD, with roughly 3 billion frozen; Binance halted withdrawals and aims to resume them within 48 hours, while pledging SAFU coverage. Analysts call it possibly the largest crypto exchange heist, continuing a pattern of North Korean cybertheft.

Maersk confirms data breach: WhiteArmor ransomware demands US$5 million | TI INSIDE Online

Translated title. Original: Maersk confirma violação de dados: ransomware WhiteArmor exige US$ 5 milhões | TI INSIDE Online

Ransomware group WhiteArmor claims it stole about 100 GB of data from Maersk’s logistics platform and is demanding $5 million in bitcoin. Maersk says the incident is isolated, operations remain normal, and it has found no evidence that sensitive data was disclosed.