In 2024, Cyjax observed the emergence of 72 extortion and ransomware group data-leak sites (DLSs). As of late March 2025, Cyjax has identified DLSs for 19 new groups this year, as noted in recent blogs on extortion groups Morpheus, GD LockerSec, Babuk2, Linkc, and Anubis.

Maintaining compliance and minimizing security risks has become more complex than ever before. Regulatory frameworks such as GDPR, HIPAA, and SOC 2 require organizations to implement strict measures to protect customer data, secure their network and systems, and respond to audit investigations.

Assume starting your weekday with a cup of coffee and being prepared to take on the tasks of the day. Suddenly you notice something unusual as the machine starts. The previously accessed files disappear, and the screen flickers. A red notice appears stating the files have been encrypted and the data would be permanently deleted unless a total of ten million dollars in Bitcoin is paid within 48 hours.

Depending on the size of your organization, its needs, industry regulations and security risks, how often you review privileged access can vary. However, a best practice for most organizations is to review privileged access quarterly to maintain a strong security posture. Continue reading to learn more about the importance of reviewing privileged access regularly, best practices and how KeeperPAM streamlines privileged access reviews.

In March 2025, several US federal agencies issued a joint warning on the phishing-based, ransomware-as-a-service (RaaS) threat group Medusa and are encouraging organizations to implement mitigations to reduce the likelihood of being impacted by an attack.

The Monetary Authority of Singapore (MAS) is both the central bank and chief financial regulator of Singapore. As such, they publish best practices (“Guidelines”) and legally binding regulations (“Notices”) regarding technology risk management and cyber hygiene.

A major supply chain attack has exposed sensitive CI/CD secrets in GitHub Action tj-actions/changed-files, known as CVE-2025-30066, across 218 repositories. This incident has raised significant concerns about security and is connected to an earlier attack on the other GitHub Action, reviewdog/action-setup@v1, tracked as CVE-2025-30154. While only 4% of the 5,416 repositories that were affected had secrets leaked, the damage is severe.

The internet can be divided into three primary layers, each with its specific traits and ranges of accessibility as Surface, Deep and Dark web.Each layer serves a purpose in the structure of the internet; the former is easily accessible to users; the intermediate phase houses a large amount of Information and the latter is a space for both illegal and legitimate anonymous activities. When Privacy Information is leaked such as medical records, it completely ruins someone's reputation and personal life.