A Linux version of the Cl0p ransomware has been identified, but it has a flaw in its encryption routine that allowed researchers to build a decryptor for it.
The FBI and international alw enforcement agencies have taken down the Hive ransomware infrastructure.
BitDefender has released a decryption tool for the MegaCortex ransomware variant.
Play ransomware actors have been using a previously undocumented exploitation method for the ProxyNotShell Exchange flaws.
Researchers have found a malicious driver signed by Microsoft used in the lead up to Hive and Cuba ransomware deployments.