[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

19 clusters · 60 sources · 87 days · First seen · Last updated

Escalating global ransomware and AI-driven cyber threats

Overview

Cyber activity and ransomware attacks saw significant acceleration through mid-2026. While earlier reports noted a rise in malicious domain registrations and AI-assisted exploitation, new data from Q2 2026 highlights a 40% year-on-year increase in undisclosed ransomware attacks. This period saw 93 active groups, including 28 newly formed entities, with the group Settra emerging as a new actor. Data exfiltration reached a record 97% of disclosed cases, averaging 508 GB stolen per undisclosed incident. Leading threat actors such as Qilin, The Gentlemen, and DragonForce continue to dominate the landscape.

In July 2026, ransomware activity reached a peak, with NCC Group recording 894 victim organization listings, a 22% increase from June. The industrials sector was the most targeted, accounting for 28% of attacks. A significant escalation in sophistication occurred with the emergence of JADEPUFFER, described as the “first known fully autonomous AI-driven attack agent” capable of executing entire attack chains without human intervention.

By September 2026, regional volatility continued to expand. Canada reported ransomware rates of 18.2% over a six-month period, which is more than double the global average of 9.0%. Canadian organizations averaged 1,664 weekly attacks, peaking at 2,196 in late August. In this region, Consumer Goods & Services faced the highest volumes. Web-based delivery served as the primary vector for nearly 60% of malicious files, while email accounted for approximately 40%, with PDFs identified as the most common malicious file type.

Entities

Qilin · Check Point Research · The Gentlemen · Rhysida · Germany

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. 11 days ago

    [TECHNOLOGY] 3 sources
    Canada experiences ransomware rates double the global average

    Ransomware attacks against Canadian organizations have reached 18.2%, more than double the global average of 9.0%, according to recent research.

  2. 16 days ago

    [TECHNOLOGY] 2 sources
    Check Point Research reports surge in global cyberattacks

    Global cyberattacks rose to an average of 2,422 per week in August 2026, driven by ransomware, phishing, and generative AI data exposure risks, according to Check Point Research.

  3. 21 days ago

    [TECHNOLOGY] 2 sources
    Ransomware attacks reach record highs globally in 2026

    Ransomware attacks reached record highs in 2026, with Qilin leading global activity. The US remains the top target, while Japan reported its highest half-year case count since 2020.

  4. 25 days ago

    [TECHNOLOGY] 2 sources
    Ransomware attacks affect 45% of German companies

    A Bitkom survey shows 45% of German companies faced ransomware attacks in the last year, with 20% of victims paying ransoms. The State of Berlin is currently refusing a €2 million extortion demand.

  5. about 1 month ago

    [TECHNOLOGY] 11 sources
    Ransomware attacks hit 2026 peak in July

    Ransomware attacks hit a 2026 peak in July with 894 cases, driven by the emergence of JADEPUFFER, the first fully autonomous AI-driven attack agent.

  6. about 1 month ago

    [TECHNOLOGY] 2 sources
    Qilin ransomware group targets multiple Italian companies

    The Qilin ransomware group has targeted several Italian companies across the manufacturing, agriculture, and service sectors, listing multiple victims on its leak site in rapid succession.

  7. about 1 month ago

    [TECHNOLOGY] 5 sources
    Germany ranks second globally in ransomware attacks

    Rapid7 Labs reports a surge in cyber threats, with Germany ranking second globally in ransomware attacks. SafePay has become a leading group, while zero-click vulnerabilities and state-sponsored actors increase

  8. about 1 month ago

    [TECHNOLOGY] 2 sources
    Ransomware attacks reach record numbers amid cloud security risks

    Ransomware victims rose 24.9% between 2025 and 2026, reaching record highs. Attacks are increasingly targeting cloud environments through identity exploitation and sophisticated extortion tactics.

  9. about 1 month ago

    [TECHNOLOGY] 2 sources
    Mid-market firms targeted in 73% of ransomware attacks

    Research shows 73% of ransomware attacks in North America and Europe now target mid-market firms, with manufacturing being the most affected sector as attackers exploit limited security resources.

  10. about 1 month ago

    [TECHNOLOGY] 4 sources
    Ransomware attacks rise globally with Germany among top targets

    Ransomware attacks rose globally in H1 2026, with Germany ranking fourth in victims. The Qilin group continues to target various sectors, including agriculture and manufacturing.

  11. about 2 months ago

    [TECHNOLOGY] 4 sources
    Ransomware attacks rise 16% globally, targeting Colombia's Justice Ministry

    ESET reports a 16.5% global rise in ransomware attacks, led by groups Qilin, The Gentlemen and Akira, while Colombia's Justice Ministry suffers a ransomware breach, prompting emergency response.

  12. 2 months ago

    [TECHNOLOGY] 2 sources
    Ransomware attacks up 40% in Q2 2026 as 28 new groups emerge

    Q2 2026 saw ransomware attacks rise 40%, with 28 new groups and the US as top target; Bitdefender Total Security was rated the best Windows antivirus against the surge.

  13. 2 months ago

    [TECHNOLOGY] 6 sources
    Global Ransomware Attacks Rise in Q2 2026, Led by Qilin and The Gentlemen

    Ransomware incidents rose in Q2 2026, led by four major groups. Manufacturing and tech firms were hit hardest, with the US (40%) and Germany (32%) most affected; AI use remains limited.

  14. 2 months ago

    [TECHNOLOGY] 2 sources
    The Gentlemen ransomware group overtakes Qilin as top threat in June 2026

    The Gentlemen ransomware gang topped June 2026 with 94 victims, overtaking Qilin, while Q2 saw 2,581 attacks mainly on US SMBs, driven by gang rivalry.

  15. 2 months ago

    [TECHNOLOGY] 5 sources
    Gen publishes 2026 cybersecurity threat report as digital attacks surge

    Gen’s 2026 threat report shows a surge in trust‑based cyber attacks, while experts urge stronger AI‑driven defenses and multi‑factor security to protect digital services.

  16. 3 months ago

    [TECHNOLOGY] 2 sources
    Check Point Software Technologies sees investor stake growth and surge in Italian cyber attacks

    Check Point Software Technologies saw investors increase stakes, reporting $668 M revenue and $2.50 EPS, while its research warned of an 11.5% rise in weekly cyber attacks in Italy, reaching 2,602 per week in J

  17. 3 months ago

    [TECHNOLOGY] 2 sources
    Check Point reports 17% rise in global cyberattacks, ransomware group The Gentlemen tops leaderboard

    Check Point's June 2026 report shows a 17% rise in global cyberattacks to 2,270 weekly per organization, a 33% jump in ransomware with The Gentlemen now leading, and heightened GenAI data‑leak risks.

  18. 3 months ago

    [TECHNOLOGY] 8 sources
    Check Point Report Finds Critical Vulnerabilities Doubled in 2026

    Check Point's 2026 report finds critical vulnerabilities more than doubled, with only 7.8% requiring urgent action and phishing exposures rising to 10.5%. Organizations remediated 85.9% of fixes. ASEC logged 20

  19. 3 months ago

    [TECHNOLOGY] 2 sources
    Check Point reports travel sector cyber attacks double in three years

    Check Point says travel‑sector cyber attacks have more than doubled, with companies facing 2,291 weekly attacks in May and thousands of malicious travel domains registered.

Sources

ad-hoc-news.de · aliciaguo.com · all-about-security.de · allegrini.it · ap-verlag.de · apcmag.com · arabianreseller.com · b2b-cyber-security.de · bitmat.it · blog.segurostv.es · borncity.com · businessnewsweek.in · cloudcomputing-insider.de · comparethecloud.net · cybernoz.com · cybersecuritynews.es · diariodelcauca.com.co · diariodelsur.com.co · elespectador.com · enterprisesecuritytech.com · experten.de · film-tv-video.de · finopotamus.com · futurumresearch.com · guidespot.com · iiot-world.com · ilcorrieredellasicurezza.it · it-boltwise.de · it-daily.net · it-finanzmagazin.de · itnerd.blog · itshow.com.br · japan.zdnet.com · judiciales.net · linux-magazin.de · logisticsit.com · minutodaseguranca.blog.br · mommygearest.com · nationalcybersecurity.com · newswire.telecomramblings.com · noticiasdemalaga.es · onlinemediacafe.com · prtimes.jp · que.com · radiosantafe.com · rocketnews.com · saferworld.org.uk · seccionnoticias.net.pe

This summary has been updated 12 times: see revision history