Over 130,000 documents and other files from Ejército del Perú (Peruvian Army). The data was originally hacked and released by the ransomware group RansomEXX. Reference Peruvian Army (Wikipedia…

Microsoft says the RansomEXX ransomware gang has been exploiting a high-severity zero-day flaw in the Windows Common Log File System to gain SYSTEM privileges on victims' systems.

Microsoft says the RansomEXX ransomware gang has been exploiting a high-severity zero-day flaw in the Windows Common Log File System to gain SYSTEM privileges on victims' systems.

empresa farmacéutica venezolana con base en Caracas fue atacada por el grupo ransomexx

affiliated command-and-control (C2) server read more about BianLian and RansomExx Exploit SAP NetWeaver Flaw to Deploy PipeMagic Trojan

PipeMagic exploits CVE-2025-29824 in Windows, enabling RansomExx attacks in Saudi Arabia and Brazil.

PipeMagic exploits CVE-2025-29824 in Windows, enabling RansomExx attacks in Saudi Arabia and Brazil.

Cybersecurity researchers have lifted the lid on the threat actors' exploitation of a now-patched security flaw in Microsoft Windows to deploy the PipeMagic malware in RansomExx ransomware attacks. The attacks involve the exploitation of CVE-2025-29824, a privilege escalation vulnerability impacting the Windows Common Log File System (CLFS) that was addressed by Microsoft in April 2025,

Microsoft says the RansomEXX ransomware gang has been exploiting a high-severity zero-day flaw in the Windows Common Log File System to gain SYSTEM privileges on victims' systems.

Microsoft says the RansomEXX ransomware gang has been exploiting a high-severity zero-day flaw in the Windows Common Log File System to gain SYSTEM privileges on victims' systems. [...]

Microsoft says the RansomEXX ransomware gang has been exploiting a high-severity zero-day flaw in the Windows Common Log File System to gain SYSTEM privileges on victims' systems.

AI has collapsed the disclosure-to-exploit window from months to hours, making traditional vulnerability management and patch-first approaches too slow to keep up. The article argues for TTP-chain validation and control-aware testing to determine what is actually exploitable in an environment, with Picus Security positioning this as a better way to prove risk than live exploitation alone. #PicusSecurity #CVE-2025-29824 #OpenBSD #Storm2460 #RansomEXX #Anthropic #Mythos

Microsoft says the RansomEXX ransomware gang has been exploiting a high-severity zero-day flaw in the Windows Common Log File System to gain SYSTEM privileges on victims' systems.