GotPentesting Blog
Ransomware, AI threats, supply chain attacks and the security programs that hold up against them.
Since its emergence in December 2020, Everest has claimed responsibility for breaching more than 200 organizations across five years of operations. Seventy-three percent of those victims are located in the United States. But the group's evolution from traditional ransomware operator to a hybrid…
Read moreThe operation, led by the notorious ShinyHunters cybercrime syndicate in collaboration with Scattered Spider and remnants of the Lapsus$ group, has compromised at least 39 companies across multiple industries in recent months. Among the victims are household names.
The ransomware economy has operated on a simple premise for the better part of two decades: attackers encrypt corporate data, victims pay for the decryption key, and business eventually resumes. That implicit contract, as distasteful as it may be, has at least offered organizations a path to…
Since emerging last July, Lynx has claimed nearly 300 victims across 20 countries, with U.S. companies bearing the brunt of the assault. According to threat intelligence from FortiGuard Labs, more than 60 percent of confirmed victims operate within American borders, where manufacturing firms and…
What unfolded over the next ten days represents what security experts are calling the inflection point in cybersecurity. A Chinese state-sponsored group had successfully transformed an AI coding assistant into an autonomous attack platform, one capable of conducting espionage operations that would…
As ransomware continues to evolve from opportunistic crime to targeted operations against high-value entities, security leaders face a sobering reality: the threat actors are professional, persistent, and continuously improving their craft. The question for enterprise security programs is no…
When a ransomware group breached a Fortune 500 financial services company last spring, executives were blindsided. The attackers exploited a vulnerability in the company's remote access infrastructure, moving laterally through the network for weeks before encrypting critical systems and demanding…
We're seeing organizations rush to implement AI tools across their operations, treating them as the silver bullet for productivity and efficiency. But here's what they're missing: the security playbook changes completely when AI enters your workflow.
When a Fortune 500 financial services company deployed a state-of-the-art Security Orchestration, Automation, and Response (SOAR) platform last year, executives expected to see immediate relief for their overwhelmed security operations center. Instead, six months and $1.8 million later, analyst…
The Sinobi attack represents a troubling evolution in ransomware operations. Rather than targeting companies directly, criminal groups are increasingly compromising the trusted third parties that maintain corporate networks. These managed service providers often hold privileged access to dozens or…
What they couldn't see was GlassWorm, a self-propagating malware so sophisticated that it represents a fundamental shift in supply chain attacks. Within days, the malware had infected at least 35,800 developer workstations across the OpenVSX and Microsoft Visual Studio marketplaces, turning each…
The group responsible, Qilin ransomware, represented something new in the criminal ecosystem: a ransomware operation so sophisticated and profitable that it now offers its affiliates access to legal counsel for ransom negotiations. By 2025, the group has logged more than 700 victims and…
As cyberattacks increasingly target municipalities and mid-sized businesses, security experts warn that preparation, not just prevention, is the difference between recovery and ruin.
Most organizations don't realize they're paying for monitoring when they actually need a security partner.
Ransomware attacks exploded in the first quarter of 2025, surging 126% compared to the previous year and claiming over 2,000 victims globally. Yet even as total ransom payments declined, the average demand climbed to between $1 million and $2 million per incident, while recovery costs reached $1.5…
The cybersecurity landscape has fundamentally shifted. Recent months have demonstrated that sophisticated threats are no longer theoretical concerns reserved for enterprise security conferences.
On September 15, 2025, the npm ecosystem faced one of its most severe supply chain attacks to date. The "Shai Hulud" worm represents the first successful self-propagating attack in the npm registry, compromising over 180 packages and demonstrating a new level of sophistication in supply…
The threat landscape has evolved with alarming speed and sophistication. Research from leading cybersecurity firms shows that nation-state actors in five countries are using AI operationally for cyber operations, while criminal organizations are using AI tools to generate sophisticated malware in…
Get in touch
Interested in working together? Fill out some info and we will be in touch shortly. We can’t wait to hear from you!
