Ransomware economics, malware-free attacks and threat intelligence. What attackers are doing now and what it means for your defences.
Zaheer Ikbal, Founder, CyHelm I would not sit on this one waiting for a patch note. Fortinet published FG-IR-26-175 on 1 October. CVE-2026-104286. Someone who is not logged in can write files onto the FortiMail system through the GUI, over HTTP or HTTPS. They describe it as path traversal plus a null byte, score it
The mail gateway is already being exploited. The patch is still upcoming. Read More »
Ransomware isn’t just malware anymore — it’s a service-driven, affiliate-based business. See how to defend and respond in 2025. Introduction Alright — we all know about classic ransomware: you’re locked out, bad actor demands payment. But what many miss is the evolution: ransomware has become a fully-fledged industry model known as Ransomware-as-a-Service (RaaS). There are
Ransomware-as-a-Service & the Professionalisation of Extortion Read More »
Fileless attacks, living-off-the-land and ultra-fast lateral movement are changing detection and response priorities. Introduction The era of noisy ransomware binaries is being supplemented (and sometimes replaced) by malware-free techniques: attackers leverage legitimate admin tools, stolen credentials, and automation to move quickly and quietly — making early detection critical. Trend explanation & data Recent threat reports
Malware-Free Attacks & Lightning Fast Breakouts: The New Normal Read More »
