Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Play Ransomware Is Back: FBI Warning for Growing Enterprise Risk

In June 2025, the FBI, CISA, and the Australian Cyber Security Centre (ACSC) issued a joint cybersecurity advisory warning of a significant resurgence in Play ransomware attacks. This rare alert flagged over 900 confirmed victims across the public sector, healthcare, and SMBs – many of whom were targeted through deceptive email addresses like @web.de and @gmx.de.

Ransomware Attack Simulation: Did They Survive? #cybersecurity #ransomware

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Stories from the SOC - ClickFix and Chill, Now Here's the Ransomware Bill

ClickFix has quickly become a rampant social-engineering tactic. First observed back in October 2023, it aims to trick users into pasting commands into the run dialog box under the guise of verifying the user’s connection and authenticity to the domain. Given its ease of use and ability to bypass technical security measures, adoption of ClickFix has been growing at an alarming rate.

Cato CTRL Threat Research: WormGPT Variants Powered by Grok and Mixtral

When large language models (LLMs) became popular following OpenAI’s public release of ChatGPT in November 2022, threat actors understood the potential of such systems and how they can be used in their malicious operations. However, the main challenge that threat actors encountered a couple of years ago is that the LLMs were censored and didn’t allow the creation of malicious content. Enter WormGPT.

What Our Ransomware Simulation Taught Us #cybersecurity #ransomware

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

We're Building Cars While Driving Them" - AI's Wild West Problem

Is anyone setting standards for AI? Researcher Gabriele Hibbert delivers the perfect metaphor for our current AI moment: "We're building the cars while driving them." Her solution? Creating standardized "nutrition labels" for AI tools that can evolve with the technology. The first step toward taming the AI Wild West.

Detecting Ransomware on Networks at Scale Using Traffic Analysis

Ransomware attacks are still causing serious financial and reputational damage to organizations. In May 2024, they made up 32% of all reported cyber incidents, and 92% of industries saw them as a major threat. These attacks lock important data and ask organizations for payment to regain access. Even after paying, attackers might have already gone through the whole system and left loopholes for future attacks. In some cases, ransomware hides in a network for a long time before being noticed.