Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
QILIN Ransomware: Global Surge in Business Services & Construction — Detection Rules & CVE Exploitation
Threat Actor Profile — QILIN Aliases: Agenda, Quill Model: Ransomware-as-a-Service (RaaS) utilizing a Rust-based encryptor (Go/Rust). Ransom...
QILIN Ransomware: Cross-Sector Surge & Critical Infrastructure Targeting — Detection Engineering Brief
Threat Actor Profile — QILIN Aliases: Agenda, Qilin.B Model: Ransomware-as-a-Service (RaaS) Ransomware Type: Rust/Go-based encryptor Qilin i...
QILIN Ransomware: Aggressive Surge in Manufacturing & Healthcare — Critical Vulnerabilities Exploited
QILIN Ransomware: Aggressive Surge in Manufacturing & Healthcare — Critical Vulnerabilities Exploited Date: 2026-05-17 Analyst: Security Ars...
QILIN Ransomware: US & AU Healthcare/Manufacturing Surge — ScreenConnect & Exchange Exploitation
QILIN Ransomware Campaign Intelligence Briefing Date: 2026-05-16 Source: Security Arsenal Dark Web Intelligence Unit Threat Level: CRITICAL ...
QILIN Ransomware Gang: 15 New Victims in 4 Days — Cross-Sector Campaign & Critical Vulnerability Exploitation
QILIN Ransomware Gang: 15 New Victims in 4 Days — Cross-Sector Campaign & Critical Vulnerability Exploitation Threat Actor Profile — QILIN Q...
QILIN Ransomware: Global Campaign Targets Manufacturing & Services — Exploitation of ConnectWise & Cisco Flaws
Threat Actor Profile — QILIN Aliases: Agenda, Bashe Model: Ransomware-as-a-Service (RaaS) Tactics: Qilin (formerly Bashe) operates a sophist...
QILIN Ransomware Gang: High-Volume Global Campaign Targeting Finance & Manufacturing — CVE Analysis & Detection
Threat Actor Profile — QILIN Aliases: Agenda (formerly), Qilin. Operational Model: Ransomware-as-a-Service (RaaS). Qilin operates an affilia...
THegentlemen Ransomware: Aggressive Campaign Targets Manufacturing & Critical Infrastructure — 19 New Victims Analyzed
Intelligence Briefing: THegentlemen Ransomware Campaign Date: 2026-05-11 Source: Dark Web Leak Site Monitor | Ransomware.live Threat Actor P...
THEGENTLEMEN Ransomware: 15 New Victims Posted — Manufacturing & Telecom Targeting Spike
Threat Actor Profile — THEGENTLEMEN Aliases: Unknown / No public rebrands observed. Model: Closed-group operation (suspected RaaS-offshoot)....