Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches
Keio, a major Japanese railway operator, was hit by ransomware, disrupting business systems and forcing the company to shut down its network. Keio Corporation, one of Japan’s major private railway operators, was hit by a ransomware attack over the weekend, di
Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services
The public still doesn’t know who is abusing a critical Citrix vulnerability exploited as a zero-day weeks before disclosure, but we now know that the unknown digital intruders have used CVE-2026-88772 to break into government agencies, financial services firms, education organizations, and legal an
Fed’s Bowman Says AI Is Blessing and Threat to Bank Security
Federal Reserve Vice Chair for Supervision Michelle Bowman warned about the danger artificial intelligence poses to banks while also touting its benefits. “While banks continue to face a number of risks like ransomware, business email compromise and vendor da
Unknown Ransomware .1sl7EEcfl Extension - Case SHA1 67339bb214339852aa1ca8a69e73
Hello, Our server was accessed remotely via AnyDesk and files were encrypted with the extension .1sl7EEcfl. Details: Extension: .1sl7EEcfl Ransom Note File: 1sl7EEcfl.README.txt
EDPT Ransomware (.piz, !!!_README.txt) Support Topic
posted in Ransomware Help & Tech Support: I need help identifying ransomware affecting a Windows VM and assessing whether the latest encrypted SQL Server data can be recovered. Observed details: - Files h
Unknown .piz ransomware - !!!_README.txt - SQL Server files encrypted
I need help identifying ransomware affecting a Windows VM and assessing whether the latest encrypted SQL Server data can be recovered.Observed details:- Files have .piz appended, including .mdf, .ldf
JadePuffer crims hijacked Azure identities and used them to blow up cloud resources
The cyber criminal behind JadePuffer, the first known agentic ransomware infection reported over the summer, has also used stolen Azure identities to conduct destructive attacks on cloud storage and other resources, according to Microsoft. In July, Sysdig threat hunters uncovered JadePuffer, the fir
Japan's Keio confirms ransomware attack disrupted business systems
Keio Corporation (Keio), a major private railway operator in Japan, said its network was hit by a ransomware attack over the weekend, disrupting some of its business systems.
ransomware .[[email protected]].6Mj44xV4 (Proton/Shinra)
Chiming in. Not myself, a client of my work, they got hit with the same one too. Same note and email. OS Drive image created, and password encrypted. Client approved to pave the drive and reinstall
Dartmouth College Settles Data Breach Lawsuit for $750,000 Affecting 96,000 People
Dartmouth College reached a $750,000 class action settlement over a 2025 Oracle E-Business Suite data breach by the Clop ransomware group that exposed personal data of approximately 96,911 individuals. Eligible class members can claim up to $5,000 with docume
Ransomware ID help
posted in Ransomware Help & Tech Support: My pc got hit with a ransomware today. All the files have the email [email protected] and the extension .6Mj44xV4. No luck on ID Ransomware or cryptosheriff. Attached the Ransom note
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect’s arrest, remaining ShinyHunters members dramatically escalated their