[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

9 clusters · 32 sources · 41 days · First seen · Last updated

Cyber threats and ransomware attacks escalate in 2026

Overview

Cyber activity and ransomware attacks saw significant acceleration through mid-2026. While earlier reports noted a rise in malicious domain registrations and AI-assisted exploitation, new data from Q2 2026 highlights a 40% year-on-year increase in undisclosed ransomware attacks. This period saw 93 active groups, including 28 newly formed entities, with the group Settra emerging as a new actor. Data exfiltration reached a record 97% of disclosed cases, averaging 508 GB stolen per undisclosed incident.

Leading threat actors such as Qilin, The Gentlemen, and DragonForce continue to dominate the landscape. In July 2026, global cyberattacks rose to 83,456, a 16.5% increase from June, with ransomware accounting for 61.4% of all incidents. Concurrently, DDoS threats escalated, with hyper-volumetric attacks exceeding 1 Tbps growing by 519% between the first and second quarters of 2026.

Geographically, the United States remains the most targeted nation, followed by Germany, France, and Italy. In Latin America, Colombia’s Ministry of Justice confirmed a ransomware breach that disrupted IT infrastructure, highlighting the vulnerability of public institutions. The professionalization of the ransomware-as-a-service (RaaS) model remains a primary driver of this global surge, impacting sectors such as manufacturing, technology, and business services.

Entities

The Gentlemen · Qilin · Colombian Ministry of Justice · Bitdefender Total Security · Dragon Force

Timeline

  1. 11 days ago

    [TECHNOLOGY] 4 sources
    Ransomware attacks rise 16% globally, targeting Colombia's Justice Ministry

    ESET reports a 16.5% global rise in ransomware attacks, led by groups Qilin, The Gentlemen and Akira, while Colombia's Justice Ministry suffers a ransomware breach, prompting emergency response.

  2. 16 days ago

    [TECHNOLOGY] 2 sources
    Ransomware attacks up 40% in Q2 2026 as 28 new groups emerge

    Q2 2026 saw ransomware attacks rise 40%, with 28 new groups and the US as top target; Bitdefender Total Security was rated the best Windows antivirus against the surge.

  3. 20 days ago

    [TECHNOLOGY] 6 sources
    Global Ransomware Attacks Rise in Q2 2026, Led by Qilin and The Gentlemen

    Ransomware incidents rose in Q2 2026, led by four major groups. Manufacturing and tech firms were hit hardest, with the US (40%) and Germany (32%) most affected; AI use remains limited.

  4. 27 days ago

    [TECHNOLOGY] 2 sources
    The Gentlemen ransomware group overtakes Qilin as top threat in June 2026

    The Gentlemen ransomware gang topped June 2026 with 94 victims, overtaking Qilin, while Q2 saw 2,581 attacks mainly on US SMBs, driven by gang rivalry.

  5. 28 days ago

    [TECHNOLOGY] 5 sources
    Gen publishes 2026 cybersecurity threat report as digital attacks surge

    Gen’s 2026 threat report shows a surge in trust‑based cyber attacks, while experts urge stronger AI‑driven defenses and multi‑factor security to protect digital services.

  6. about 1 month ago

    [TECHNOLOGY] 2 sources
    Check Point Software Technologies sees investor stake growth and surge in Italian cyber attacks

    Check Point Software Technologies saw investors increase stakes, reporting $668 M revenue and $2.50 EPS, while its research warned of an 11.5% rise in weekly cyber attacks in Italy, reaching 2,602 per week in J

  7. about 1 month ago

    [TECHNOLOGY] 2 sources
    Check Point reports 17% rise in global cyberattacks, ransomware group The Gentlemen tops leaderboard

    Check Point's June 2026 report shows a 17% rise in global cyberattacks to 2,270 weekly per organization, a 33% jump in ransomware with The Gentlemen now leading, and heightened GenAI data‑leak risks.

  8. about 1 month ago

    [TECHNOLOGY] 8 sources
    Check Point Report Finds Critical Vulnerabilities Doubled in 2026

    Check Point's 2026 report finds critical vulnerabilities more than doubled, with only 7.8% requiring urgent action and phishing exposures rising to 10.5%. Organizations remediated 85.9% of fixes. ASEC logged 20

  9. about 2 months ago

    [TECHNOLOGY] 2 sources
    Check Point reports travel sector cyber attacks double in three years

    Check Point says travel‑sector cyber attacks have more than doubled, with companies facing 2,291 weekly attacks in May and thousands of malicious travel domains registered.

Sources

aliciaguo.com · allegrini.it · apcmag.com · arabianreseller.com · bitmat.it · blog.segurostv.es · comparethecloud.net · diariodelcauca.com.co · diariodelsur.com.co · elespectador.com · guidespot.com · iiot-world.com · ilcorrieredellasicurezza.it · itnerd.blog · judiciales.net · mommygearest.com · nationalcybersecurity.com · newswire.telecomramblings.com · noticiasdemalaga.es · que.com · radiosantafe.com · saferworld.org.uk · seccionnoticias.net.pe · securityaffairs.com · smartmania.cz · sofokleousin.gr · techarena.co.ke · technobaboy.com · technologydecisions.com.au · techobserver.in · thecyberexpress.com · ttg.cz

This summary has been updated 3 times: see revision history