RANSOMWARE & CYBERSECURITY BLOG
new posts weekly
Insights on data exfiltration.
Original research, analysis, and commentary from the BlackFog team on the exfiltration vectors reshaping enterprise security, from ransomware double extortion to Shadow AI to the agentic AI threats already emerging.
AWARD-WINNING BLOG SERIES
The State Of Ransomware, published every month.
Between the quarterly reports, our award-winning monthly series tracks ransomware as it happens: a global count of both publicly disclosed attacks and the undisclosed incidents surfacing on dark web leak sites, with the sectors, countries and groups behind them.
No form, no download. Read it on the blog the day it publishes.

featured posts
BlackFog wins the 2026 TMC AI in Cybersecurity Innovation Award for ADX Protect, recognizing innovation in preventing data exfiltration and AI threats.
BlackFog's state of ransomware August 2026 measures publicly disclosed and non-disclosed attacks globally.
threat intelligence brief · medusa ransomware Sector Medical · Education · Legal · Insurance · Technology · Manufacturing Brief ⟶
BlackFog Q2 2026 Ransomware Report: Undisclosed Ransomware Attacks Surge 40% Year on Year
BlackFog researchers uncover Bee Stealer, a Windows infostealer targeting Codex and Claude data with AI-powered victim profiling.
from the blog
- Categories: Ransomware
The True Cost of Ransomware Attacks highlights the downtime costs, reputational damage and the cost of new security implementations when trying to recover from a ransomware attack.
- Categories: Data Exfiltration
Data exfiltration 101 describes the types of attacks that lead to data exfiltration and why 83% of all attacks rely on it as the primary vector.
- Categories: Ransomware
Ransomware groups are using increasingly sophisticated technology and infrastructure to carry out attacks while adopting new tactics to pressurize their victims such as recruiting your employees.
- Categories: Ransomware, Variants
The cybercrime landscape is changing, and ransomware group tactics are shifting accordingly On January 14th, 2022, Russian authorities announced they had dismantled REvil, ⟶
- Categories: Ransomware
Industrialized cybercrime, critical infrastructure attacks and sky-high ransoms are just the beginning of ransomware as a service business models.
- Categories: Data Exfiltration
Where traditional Endpoint Security relies on sensitive data matching algorithms, Anti Data Exfiltration uses a more sophisticated approach and monitors outbound traffic on endpoints, and restricts data from leaving the network.
free 14 days
AI Discovery & Data Exposure Assessment
See the Shadow AI and exfiltration paths active across your endpoints, in your own environment, in under two weeks.
