Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

splunk

Detecting Suspicious ESXi Activity Before Ransomware Happens

Aug 11, 2025 By Raven Tait In Splunk
Cybersecurity teams worldwide have been fighting against ransomware attacks on ESXi infrastructure for years. ESXi is a lightweight, bare-metal hypervisor developed by VMware that allows multiple virtual machines to run on a single physical server. ESXi is widely used in enterprise environments, often hosting virtual machines that support essential services for an entire organization.
Read Post
splunk

Picture Paints a Thousand Codes: Dissecting Image-Based Steganography in a .NET (Quasar) RAT Loader

Aug 11, 2025 By Teoderick Contreras In Splunk
Steganography is the art of hiding information inside a seemingly ordinary, legitimate object so that no one suspects anything is hidden. The technique T1027.003 has been around for a long time and is increasingly used by malware authors and threat actors to avoid detection. This involves hiding malicious payloads inside innocent-looking files such as images, audio, or documents. By embedding malware in these files, attackers can bypass traditional security tools that scan for obvious threats.
Read Post
Arctic Wolf

Ransomware Evolution: The Changing Landscape of Cyber Extortion

Aug 8, 2025 By Arctic Wolf In Arctic Wolf
Cybercriminals are shifting tactics. Rather than relying solely on ransomware’s tried-and-true method of using encryption to lock files and demand payment to decrypt, many are now instead embracing exfiltration and extortion, with encryption as a secondary tactic. This marks a significant evolution in ransom-based attack methods, one where encryption is optional, but leverage is mandatory.
Read Post

Rubrik Preemptive Recovery: Explained!

Aug 7, 2025 By Rubrik In Rubrik
In the fight against ransomware, every second counts—if you're manually responding only after an attack, you could already be too late. In this video, we'll explore Rubrik's Preemptive Recovery Engine, a groundbreaking capability designed to proactively detect threats and speed up your recovery response. Unlike traditional, reactive solutions, Rubrik automatically identifies clean snapshots, pinpoints the optimal recovery points, and prepares your critical data ahead of threats—dramatically shrinking your recovery window and minimizing disruption.
View Video
cyberark

'Plague' malware exploits Pluggable Authentication Module to breach Linux systems

Aug 7, 2025 By Malware Research Team In CyberArk
‘Plague’ represents a newly identified Linux backdoor that has quietly evaded detection by traditional antivirus solutions for over a year. Its primary mechanism involves operating as a malicious PAM, allowing attackers to silently bypass system authentication and establish persistent SSH access to compromised Linux systems.
Read Post
jumpsec

UK Ransomware Payment Ban Implications

Aug 7, 2025 By Donna Stobart-Hook In JUMPSEC
The UK will ban public bodies from paying ransoms and introduce new reporting rules for ransomware incidents. Public sector organisations must prepare to recover without paying. Private firms must notify the government if they plan to pay. Attackers may shift focus to private targets and use data leaks over encryption. Organisations need better visibility, response readiness, and tested recovery plans. Payment is no longer a fallback.
Read Post
WatchGuard

What Akira Ransomware Gang Taught This Company

Aug 6, 2025 By Adam Winston In WatchGuard
What is ransomware? Ransomware is a form of malicious software that encrypts an organization’s files or systems, effectively locking users out until a ransom is paid, usually in cryptocurrency. But in 2025, ransomware is more than just malware. It’s a multi-billion-dollar criminal business. So far this year, 4,441 organizations have been publicly listed as ransomware victims.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.