Skip to content
RANSOMWARE & CYBERSECURITY BLOG
new posts weekly
Insights on data exfiltration.
Original research, analysis, and commentary from the BlackFog team on the exfiltration vectors reshaping enterprise security, from ransomware double extortion to Shadow AI to the agentic AI threats already emerging.
AWARD-WINNING BLOG SERIES
The State Of Ransomware, published every month.
Between the quarterly reports, our award-winning monthly series tracks ransomware as it happens: a global count of both publicly disclosed attacks and the undisclosed incidents surfacing on dark web leak sites, with the sectors, countries and groups behind them.
No form, no download. Read it on the blog the day it publishes.
featured posts
BlackFog wins the 2026 TMC AI in Cybersecurity Innovation Award for ADX Protect, recognizing innovation in preventing data exfiltration and AI threats.
BlackFog's state of ransomware August 2026 measures publicly disclosed and non-disclosed attacks globally.
threat intelligence brief · medusa ransomware Sector Medical · Education · Legal · Insurance · Technology · Manufacturing Brief ⟶
BlackFog Q2 2026 Ransomware Report: Undisclosed Ransomware Attacks Surge 40% Year on Year
BlackFog researchers uncover Bee Stealer, a Windows infostealer targeting Codex and Claude data with AI-powered victim profiling.
from the blog
- Categories: Ransomware
We look at how organized cybercrime groups are formed and structured and how cybercriminals first connect online through hacking forums and dark web marketplaces, where they build reputations and specialize in roles like penetration testing, malware development, ransomware operations and money laundering. Over time, trusted partnerships and ad hoc "crews" emerge, which can formalize into defined criminal enterprises.
- Categories: Cybersecurity
Find out everything you need to know about how to recover from ransomware attacks
- Categories: Exploits
We look at the fully undetectable (FUD) cryptography and encryption market which is frequently used by cybercriminals to enable malware to evade common endpoint solutions and antiviruses.
- Categories: Ransomware
Ransomware gangs often go underground, only to resurface later, more formidable than before. Explore five reasons behind this dormancy, from evading law enforcement to upgrading attack techniques and adapting to market dynamics.
- Categories: Ransomware
Our ransomware roundup Q1 2024 broke new records with 192 publicly disclosed ransomware attacks, an increase of 48% over 2023.
- Categories: MSP, Ransomware
In 2023 and 2024, several high-profile cyberattacks targeted managed service providers (MSPs), disrupting services for their clients. Learn about the top 5 MSP attacks during this period, including incidents at CTS, Tietoevry, Lumen Technologies, HTC Global Services, and Südwestfalen IT.
free 14 days
AI Discovery & Data Exposure Assessment
See the Shadow AI and exfiltration paths active across your endpoints, in your own environment, in under two weeks.