Topic

Ransomware: news, advisories and analysis

25 articlesUpdated 14 Oct 2026

CyberSecureToday covers Ransomware across 25 articles published between 1 Sep 2026 and 14 Oct 2026. The coverage includes 2 vulnerability advisories, 18 incident or breach reports and 2 analysis or guidance pieces. 2 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Ransomware most often intersect with SEC Form 8-K, Data Breach and Item 1.05, with Technology, Cloud & SaaS the most affected sector. The most recent story, “SEC Form 8-K Item 1.05 Material Incident Rules: Ransomware Exfiltration Forensics & Board Disclosure Mandate”, was published 14 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

InsightsBanking & Fintech
SEC Form 8-K Item 1.05 Material Incident Rules: Ransomware Exfiltration Forensics & Board Disclosure Mandate
Forensic analysis of SEC Form 8-K Item 1.05 material cybersecurity incident disclosures: 4-day reporting timelines, root causes, and board oversight standards.
CST Editorial Desk14 Oct 20269 min read
Cyber AttackGov & Defence
Defense Aerospace Contractor Reports Ransomware Theft of Avionics Blueprints and Telemetry
A premier defense aerospace supplier files SEC Form 8-K Item 1.05 after ransomware actors compromise unclassified R&D enclaves and exfiltrate sensor avionics telemetry.
Priya Raman11 Oct 20268 min read
Cyber AttackCloud & SaaS
SEC Form 8-K Forensics: Multi-State Energy Utility Discloses Material Grid SCADA Telemetry Extortion Incident
A major North American energy utility discloses an SEC Form 8-K cyber incident involving extortion over exfiltrated regional transmission telemetry.
Priya Raman10 Oct 20268 min read
Cyber AttackCloud & SaaS
SEC Form 8-K Forensics: Global Logistics Freight Carrier Discloses Container Routing Telemetry Exfiltration
A major international container logistics carrier files SEC Form 8-K Item 1.05 after threat actors exfiltrate intermodal shipping manifests and customs manifests.
Priya Raman10 Oct 20268 min read
Cyber AttackCloud & SaaS
SEC Form 8-K Forensics: Healthcare Medical Device Manufacturer Discloses Ransomware Encryption of Cloud Diagnostic Telemetry
SEC Form 8-K filing reveals an extortion syndicate encrypted corporate cloud servers hosting diagnostic telemetry and proprietary firmware repositories for hospital medical devices.
Priya Raman9 Oct 20268 min read
NewsIndustrial & OT
SEC Form 8-K Forensics: Global Maritime Shipping Operator Reports Material Port Terminal Ransomware Attack
Global maritime shipping conglomerate files SEC Form 8-K disclosing a material ransomware intrusion freezing container terminal logistics across international ports.
Daniel Okafor7 Oct 20268 min read
NewsBanking & Fintech
Cloud Identity Theft and S3 Exfiltration Fuel Surge in SEC Cyber Disclosures
SEC Form 8-K disclosures reveal a surge in material cyber incidents driven by cloud identity theft and automated data lake exfiltration.
Daniel Okafor6 Oct 20268 min read
Cyber AttackGov & Defence
International Law Enforcement Operation Dismantles KillSec Ransomware Syndicate, Seizing 110TB of Stolen Data
A multinational law enforcement sweep led by German, Spanish, and Romanian police has dismantled KillSec, arresting three operators and seizing 110TB of data.
Daniel Okafor2 Oct 20268 min read
Cyber AttackBanking & Fintech
SEC Form 8-K Disclosures Reveal Cloud Storage Misconfigurations Fueling Surge in Material Data Breaches
An analysis of recent SEC Form 8-K Item 1.05 material cyber incident filings shows misconfigured cloud buckets and IAM token leaks driving corporate extortion.
Mei-Lin Chen27 Sep 20268 min read
Cyber AttackCloud & SaaS
Halliburton SEC Filing Details System Disconnections Across Global Energy Operations
Halliburton files SEC Form 8-K Item 1.05 detailing unauthorized corporate network access that forced critical energy infrastructure systems offline across global operations.
Daniel Okafor25 Sep 202619 min read
Cyber AttackHealthcare & Pharma
AdaptHealth Files SEC Form 8-K Disclosing Unauthorized Network Intrusion and Healthcare Data Exfiltration
AdaptHealth Corp files an SEC Form 8-K under Item 1.05 disclosing a cyberattack that disrupted internal systems and resulted in unauthorized patient data exfiltration.
Priya Raman24 Sep 202616 min read
Cyber AttackBanking & Fintech
River Financial Corporation Discloses SEC 8-K Banking Ransomware Extortion and Customer Account Records Exfiltration
River Financial discloses unauthorized ransomware intrusion and customer data exfiltration in SEC Form 8-K filings following network extortion demands.
Priya Raman24 Sep 202616 min read
Cyber AttackBanking & Fintech
Navient Corporation Files SEC Form 8-K After Third-Party Law Firm Ransomware Exfiltrates Borrower Records
Navient files SEC Form 8-K Item 1.05 after a ransomware attack on an external law firm exposed sensitive student loan borrower PII and Social Security numbers.
CST Editorial Desk23 Sep 202614 min read
Cyber AttackHealthcare & Pharma
Nutex Health 8-K Discloses Cyber Extortion After Patient PHI Exfiltration and Leak
Nutex Health files amended SEC Form 8-K Item 1.05 confirming patient PHI and provider records exfiltrated and published following ransomware double extortion.
Priya Raman23 Sep 202615 min read
Cyber AttackHealthcare & Pharma
West Pharmaceutical Services Discloses Material Cyberattack and Global Manufacturing Outage in SEC Form 8-K Filing
Injectable drug packaging leader West Pharmaceutical Services files SEC Form 8-K Item 1.05 disclosing data exfiltration and systems encryption halting global manufacturing.
CST Editorial Desk22 Sep 202616 min read
Cyber AttackHealthcare & Pharma
Park Dental Partners Discloses Network Intrusion and Patient Data Compromise in SEC Form 8-K Filing
Dental healthcare provider Park Dental Partners files SEC Form 8-K Item 1.05 following unauthorized network intrusion risking patient clinical records and sensitive PII.
CST Editorial Desk22 Sep 202616 min read
Cyber AttackHealthcare & Pharma
Boston Scientific SEC Form 8-K Discloses Global Medical Device Manufacturing Outage Following Material Cyberattack
Boston Scientific files SEC Form 8-K Item 1.05 disclosing a material cybersecurity incident that caused global manufacturing halts and disrupted medical device supply chains.
Priya Raman21 Sep 202615 min read
ThreatsCloud & SaaSHigh
Microsoft Windows WinSock Driver Zero-Day Flaw CVE-2026-68820 Exploited by Ransomware Groups for SYSTEM Takeover
CISA warns of in-the-wild exploitation of CVE-2026-68820, a use-after-free vulnerability in the Windows Ancillary Function Driver (afd.sys) granting SYSTEM privilege.
Daniel Okafor16 Sep 20269 min read
IndustryGov & Defence
CISA Finalizes CIRCIA Mandate: 72-Hour Incident and 24-Hour Ransomware Reporting Enforced
CISA issued its landmark final rule under CIRCIA, legally mandating critical infrastructure operators report major cyber incidents within 72 hours and ransom payments within 24 hours.
Tom Verhoeven14 Sep 20268 min read
ThreatsCloud & SaaSHigh
PaperCut issues superseding maintenance releases as attackers deploy AI agent swarms against 440+ servers
PaperCut shipped consolidated maintenance updates after automated AI agent swarms compromised over 440 print management servers, bypassing earlier emergency hotfixes.
Daniel Okafor11 Sep 20266 min read
ResearchEducation & Academia
Eight new ransomware brands in one week: why tracking group names has stopped working
One tracker logged 315 leak-site posts from 40 groups in a single August week, eight of them new. Brand-based detection cannot keep pace. Here is what to instrument instead.
Daniel Okafor10 Sep 20266 min read
Cyber AttackGov & Defence
Gunra ransomware: what AA26-222A actually gives your detection engineers
Six agencies detailed Gunra's Fortinet entry, its forticloud-sync backdoor and an MFA bypass planted in a VDI server. Here is how to turn that into detection coverage.
Daniel Okafor8 Sep 20266 min read
Cyber AttackHealthcare & Pharma
Healthcare ransomware wave: OVP Health and ProHealth Medical hit within weeks
Emerging crews Storm and Krybit claimed attacks on two healthcare providers, with a combined 244 GB of patient and employee data alleged stolen.
CST Editorial Desk6 Sep 20265 min read
Cyber AttackCloud & SaaS
HostDZire ransomware encrypts ESXi virtual disks across three countries
An August attack compromised multiple VMware ESXi nodes at hosting provider HostDZire, encrypting virtual disks beyond recovery across India, the Netherlands and the US.
Daniel Okafor2 Sep 20266 min read