InfoSecBulletin Cybersecurity for mankind
2025 ends but in the first week of 2026 a handsome figure of victims have been listed a victims of ransomware attack. Nearly about 10 groups are active for the very first week. Quin, play, direwolf, handala are some notable ones.
Accroding to ransomware.live as of 5 january of 2026, 42 organizations are in the queue of victims by 308 ransomware groups. Recent analysis reveals that a few threat groups account for most ransomware attacks, with Qilin being the most active and having the highest number of victims.
Daily Cyber security update for 26.10. 2026
The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Qilin is the main threat actor, responsible for around 14 victims, making it the most active group during this time.
Play and Direwolf are secondary threats, each causing about 7 victims, showing less activity compared to Qilin.
Handala has moderate activity, with around 5 victims, making it a mid-tier threat.
DragonForce and Incransom show some activity, with about 3 victims each, indicating they may be engaging in opportunistic or targeted attacks.
LockBit5, Sinobi, and Everest show minimal activity around 1 victim each.
