Ransomware

The State of Ransomware: June 2026

BlackFog's state of ransomware June 2026 measures publicly disclosed and non-disclosed attacks globally.

Lazarus Group Cyber Attacks: What Businesses Need To Know

Learn who the Lazarus Group is, the major cyberattacks linked to it, and how your organization can defend against this nation-state threat.

The Canvas Ransomware Attack: How ShinyHunters Exposed a Global Education Security Crisis

ShinyHunters’ Canvas ransomware attack exposed millions of student records, highlighting growing risks of data exfiltration in education.

The State of Ransomware: May 2026

BlackFog's state of ransomware May 2026 measures publicly disclosed and non-disclosed attacks globally.

The State of Ransomware: April 2026

BlackFog's state of ransomware April 2026 measures publicly disclosed and non-disclosed attacks globally.

2026 Q1 Ransomware Report

BlackFog’s 2026 Q1 Ransomware Report - Ransomware Remains Relentless with Data Exfiltration Holding at 96%

Ransomware in Energy and Utilities: The Real Story Behind the Attacks

Ransomware in energy and utilities is rising, combining disruption, data theft, and extortion across critical infrastructure.

Agentic AI: The Data Exfiltration Risk Hiding Inside Your AI Agent

Agentic AI is creating unsupervised data exfiltration paths that traditional security tools struggle to detect. This blog examines the attack surface and how to address it.

DaVita Ransomware Attack: 2.7M Affected in Major Data Breach

The DaVita ransomware attack exposed 2.7 million patient records. Learn what happened, what data was stolen, and how the Interlock gang pulled it off.

The State of Ransomware: March 2026

BlackFog's state of ransomware March 2026 measures publicly disclosed and non-disclosed attacks globally.

The State of Ransomware: February 2026

BlackFog's state of ransomware February 2026 measures publicly disclosed and non-disclosed attacks globally.

Steaelite RAT Enables Double Extortion Attacks from a Single Panel

Steaelite is a newly emerging RAT that unifies credential theft, data exfiltration, and ransomware in a single web panel, accelerating double extortion attacks.