Ransomware gangs continue to break records and BlackFog will track all new ransomware gangs in 2024.

BlackFog's state of ransomware December 2025 measures publicly disclosed and non-disclosed attacks globally.

Rhysida ransomware is ramping up U.S. attacks in 2025 across healthcare, finance, and manufacturing. See recent breaches, tactics, and a CISA-aligned mitigation playbook.

BlackFog's state of ransomware November 2025 measures publicly disclosed and non-disclosed attacks globally.

Anthropic’s Claude was manipulated into a cyber espionage campaign. See how it happened, why it matters, and how ADX can block machine-speed data theft.

Investigating Matrix Push C2, a browser based command and control system that uses push notifications to deliver malware, run phishing campaigns, and steal data across platforms.

Clop exploited an Oracle E-Business Suite zero-day to steal data from major organizations. Here’s how it happened and what it means for supply-chain security.

BlackFog's state of ransomware October 2025 measures publicly disclosed and non-disclosed attacks globally.

BlackFog’s 2025 Q3 Ransomware Report - global cyber battlefield heats up as ransomware groups escalate attacks. Download full report for key insights.

Analysis of the 2025 Salesforce breach wave at Google, Workday, and Salesloft, highlighting SaaS risk, identity abuse, and data exfiltration.

BlackFog's state of ransomware September 2025 measures publicly disclosed and non-disclosed attacks globally.

In September 2025, Collins Aerospace was hit by ransomware, disrupting check-in at European airports with delays, cancellations, and manual operations.