Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Medusa Ransomware Hits 500+ Critical Infrastructure Orgs
FBI advisory reports Medusa ransomware has impacted over 500 critical infrastructure organizations as of April 2026, highlighting ongoing threat.
Medusa ransomware hits 500+ orgs, CISA warns
Medusa ransomware has breached over 500 organizations since June 2021, according to an updated advisory from the FBI, CISA, and HHS.
Medusa ransomware hit 500+ US critical orgs
CISA, FBI, and HHS report Medusa ransomware breached over 500 US critical infrastructure organizations since June 2021, up from 300 in March 2025.
Ransom Busters Offers Data Deletion for Fees
A ransomware affiliate, Ransom Busters, emails victims offering to delete stolen data from ransomware servers for $20,000-$60,000, a suspicious scheme
HHS Joins Federal Medusa Ransomware Advisory
HHS joins a federal advisory on Medusa ransomware, highlighting healthcare as a frequent target due to exploited remote access tools and antivirus wea
Ransomware Actor Poses as Recovery Service
A ransomware affiliate poses as an incident-recovery service to trick victims into paying ransoms to the attacker instead of legitimate responders.
Windows 7 Ransomware: Decrypt Files Without Ransom Note
A Windows 7 user seeks help decrypting files after a ransomware attack, with no ransom note available. Experts suggest recovery options.
Ransomware Targets Mid-Market Firms, Not Enterprises
Black Kite's study reveals 73% of ransomware attacks from 2023 to H1 2026 hit mid-market companies with $10M-$1B revenue, challenging assumptions.
75% of Ransomware Attacks Hit Mid-Market Firms
A Black Kite study of 13,336 incidents since 2023 found nearly three-quarters of ransomware victims were mid-sized firms with $10m to $1bn in revenue.
User Seeks Help Identifying Ransomware Strain
A forum user reports a ransomware infection and asks for assistance in identifying the strain. No details provided yet.
Ransomware Adds .payday Extension; Decryptor Fake
A ransomware infection encrypts files with .payday extension. ID Ransomware couldn't identify the strain, and a fake decrypt.
Weekly Update 517: Cyber Ransoms
Ransomware attacks, often pure extortion, are increasingly carried out by young individuals who profit but struggle to launder money without detection