Espresso

Sign in Subscribe

Cybersecurity

Ransomware Payments Hit 19% Low as 76% of Attacks Target Data Theft

Ransomware Payments Hit 19% Low as 76% of Attacks Target Data Theft

TL;DR * Ransomware payments hit record low of 19% in Q3 2025 (down from 28% in 2024), with median payouts dropping 63% to $140K amid hardened defenses. * Data exfiltration now dominates 76% of attacks (up from <60% in 2023), enabling extortion via leak threats even without ransom payment. The

Microsoft Patches Critical Windows Server RCE, Zero-Day Edge Device Breaches Rise

Microsoft Patches Critical Windows Server RCE, Zero-Day Edge Device Breaches Rise

TL;DR * Microsoft patches CVE‑2025‑59287, a critical Windows Server RCE exploited in 2 high‑profile attacks * Zero‑day abuse of network edge devices now top enterprise breach vector, with 75 CVEs tracked in 2024 * AI browser agents expose credentials via indirect prompt injection, prompting industry‑wide security review

Microsoft CVE Exploits Drive Global Cyber Attacks, Red Hat Breach, UK JLR Outages, and Ransomware Spree

Microsoft CVE Exploits Drive Global Cyber Attacks, Red Hat Breach, UK JLR Outages, and Ransomware Spree

TL;DR * Microsoft CVE vulnerabilities, from SharePoint to WinRE regressions, lead to widespread exploitation across defense contractors and consumer services. * Red Hat GitLab and Medusa ransomware breaches expose 33,000 code repos, 5,000 client reports, and 186 GB stolen data, highlighting supply chain flaws. * ShinyHunters and Medusa rogue groups

AWS DNS Outage, Ransomware Surge, Edge Device Vulnerabilities, Windows Update Issues, AI‑Driven Identity Theft

AWS DNS Outage, Ransomware Surge, Edge Device Vulnerabilities, Windows Update Issues, AI‑Driven Identity Theft

AWS DNS‑Centric Outage – Operational Implications The 20 Oct 2025 AWS disruption originated from a DNS resolution failure for the DynamoDB endpoint in US‑EAST‑1, causing error spikes across 78+ services. The outage persisted for roughly four hours, with residual latency for up to six hours in some regions.

Phishing Malware, State Breaches, AI Ransomware, and Windows 10 EOL Drive Rising Cyber Threats

Phishing Malware, State Breaches, AI Ransomware, and Windows 10 EOL Drive Rising Cyber Threats

Phishing‑Driven Malware Campaigns (Winos 4.0, CAPI Backdoor, ClickFix) The campaign uses TikTok videos that advertise “free activation” guides for high‑value SaaS products. The videos embed a ClickFix pattern that instructs users to paste a single PowerShell command into any shell. The command executes iex (irm …), downloading the

Recent Forensic Findings Reshape Cybersecurity Priorities

Recent Forensic Findings Reshape Cybersecurity Priorities

State‑Level Crypto Forfeiture and Its Systemic Impact The Department of Justice announced the seizure of 127 271 BTC (≈ $15 bn) on 14 Oct 2025, the largest crypto forfeiture in U.S. history. The assets originated from Chen Zhi’s forced‑labor “pig‑butchering” syndicate. On‑chain analysis shows a

US DOJ Seizes $15B Bitcoin, Amplifies Dark‑Web NDR Adoption

US DOJ Seizes $15B Bitcoin, Amplifies Dark‑Web NDR Adoption

In the past month the cyber‑security landscape has produced a convergence of three high‑impact developments that illustrate the escalating speed, scale, and sophistication of digital threats: a historic $15 billion Bitcoin forfeiture tied to a transnational fraud and forced‑labor ring, a rapid‑deployment wave of Network Detection