Cybersecurity threats escalate with post-quantum ransomware and record healthcare attacks

The cybersecurity landscape is facing new challenges as criminal groups begin weaponizing post-quantum cryptography (PQC). The Kyber ransomware group has been identified as the first to deploy NIST-standardized PQC in active attacks, specifically targeting a multibillion-dollar American defense contractor in early 2026. The group utilized a sophisticated Windows encryptor written in Rust, implementing a hybrid key encapsulation scheme that combines Kyber1024 and X25519 to protect symmetric key material.

Simultaneously, the healthcare sector is experiencing a surge in cyberattacks. According to a report from the Health Information Sharing and Analysis Center (Health-ISAC), ransomware attacks against the global health sector reached a record high of 317 events in the third quarter of 2026. This represents 9.72% of all ransomware events across critical infrastructure, exceeding the historical average of 7.5%.

Health-ISAC also noted an increase in activity from ShinyHunters, a group specializing in identity and SaaS-access extortion. Rather than encrypting files, ShinyHunters utilizes domain impersonation and voice phishing to steal credentials and cloud-scale data, often pressuring victims through the threat of data publication.