Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
AKIRA Ransomware: 2 New Victims in Hospitality & Arts — Critical Firewall & RCE Exploits
AKIRA Ransomware: 2 New Victims in Hospitality & Arts — Critical Firewall & RCE Exploits Threat Actor Profile — AKIRA AKIRA is a prominent r...
TERMITE Ransomware: Cross-Border Healthcare Targeting & VPN Exploitation Surge
Threat Actor Profile — TERMITE Aliases: Termite Team, Termite Encryptor Operational Model: Emerging RaaS (Ransomware-as-a-Service) operator ...
BOOBA PROJECT: Critical Infrastructure Targeting & Check Point Firewall Exploitation Analysis
Threat Actor Profile — BOOBA PROJECT Aliases: None publicly confirmed / Independent operation. Model: Private RaaS or closed-group operation...
M3RX Ransomware Gang: 3 New Victims Posted — Manufacturing & Professional Services Under Siege
Threat Actor Profile — M3RX Aliases & Affiliation: M3RX operates as a relatively new but aggressive Ransomware-as-a-Service (RaaS) entity. W...
SAFEPAY Ransomware: DACH Region Blitz — Retail & Education Sectors Under Siege via Critical VPN Flaws
Threat Actor Profile — SAFEPAY Aliases & Attribution: SAFEPAY is a relatively new but aggressive Ransomware-as-a-Service (RaaS) operation th...
GENESIS Ransomware Gang: 6 New Victims Posted — Critical Infrastructure & Manufacturing Targeted via Firewall Exploits
Threat Actor Profile — GENESIS Aliases: No significant aliases confirmed; operates strictly under the GENESIS moniker. Operational Model: GE...
CRPXO Ransomware: Cross-Sector Surge & Firewall Exploitation — Detection Engineering Brief
Threat Actor Profile — CRPXO Identity & Operations CRPXO operates as a Ransomware-as-a-Service (RaaS) entity with a high operational tempo. ...
SECTION9 Ransomware: Surge in LATAM & Global Attacks — Check Point & ScreenConnect Exploitation
Executive Summary Security Arsenal Threat Intelligence Team has detected a significant spike in activity by the SECTION9 ransomware group. A...
GLOBAL SECRET GROUP: 2026-07-26 Mass Victim Posting — Tech & Finance Sector Targeting via Critical VPN & RMM Exploits
Threat Intelligence Briefing: GLOBAL SECRET GROUP Date: 2026-07-27 Source: Ransomware.live / Dark Web Leak Site Monitoring Analyst: Security...