World watch

Payload added three German firms to a victim list in one report from Ransomware.live over the last hours.

The report comes from Malware News. 1 outlet reported this event inside 18 hours. Here is what happened, why it matters, and what to do next.

Malware News reports a discussion of quantum mechanics and law with focus on uncertainty in quantum evidence for legal professionals.

Four ransomware groups listed new victims in one reporting period with no stated details on attack scope or data loss.

An out-of-bounds write in .NET affects the Brotli decoder and allows an unauthorized attacker to elevate privileges over a network.

MSRC updated product information for two .NET and ASP.NET Core vulnerabilities with no change to exploit or patch status noted.

Whitearmor has listed Brazil's Partido Liberal as a new ransomware victim with no attack details or response stated in the source.

Falcon has listed law firm Weitz & Luxenberg as a new victim after an 82 GB extraction of confidential legal documents.

Two separate firms appear as new ransomware victims with reported data theft or encryption claims.

CERT-AGID found 650 PHP URLs in IPA potentially vulnerable to PHP2Shell, equal to 3.2 percent of reachable addresses.

The report comes from Ransomware.live. 1 outlet reported this event inside 18 hours. Here is what happened, why it matters, and what to do next.

Tel Aviv startup Mave raised $34 million to use AI agents for alert investigation across existing security stacks in 2025.

A ransomware group listed an Argentine IT and security firm as a new victim with alleged customer and employee data disclosed online.

Qilin added ETO to a public victim list, with one report from Ransomware.live noting the action without further stated details.

N0n published six new victims on Ransomware.live with data sets from sectors in four countries in one report window.

Emperador added AB InBev to a published victim list, citing internal data sets without stating access or release timing now.

Two ransomware groups listed separate victims on one outlet with no details on data scope or response to either claim at the time of reporting.

A Malware News report notes common passwords for malicious archives based on a past query about default archive protection.

Lamashtu has listed Vins Viallet as a new victim on Ransomware.live with no further details stated for this attack event.

A researcher found a backdoor and flaws in more encrypted USB drives after prior work on time-travel debugging methods.