In April 2025, Marks & Spencer was hit by a major ransomware attack that exposed how modern cyber threats truly work. A year later, it stands as a clear example of the risks posed by data exfiltration, social engineering, and third-party compromise.
The DaVita ransomware attack exposed 2.7 million patient records. Learn what happened, what data was stolen, and how the Interlock gang pulled it off.
Confronting INC Ransom, BlackFog’s Prevention-First Strategy for Affiliate-Driven Ransomware.
CamoLeak (CVE-2025-59145) turned GitHub Copilot into a silent data exfiltration channel via prompt injection and GitHub's own image proxy. CVSS 9.6.
BlackFog's state of ransomware March 2026 measures publicly disclosed and non-disclosed attacks globally.
What happens when attackers use your approved AI tools as a data exfiltration channel? New research reveals how the LotAI technique turns Copilot and Grok into covert C2 relays.
BlackFog's state of ransomware February 2026 measures publicly disclosed and non-disclosed attacks globally.
BlackFog’s 2025 State of Ransomware Annual Report reveals a 49% surge in attacks, AI-driven threats, and why 86% of ransomware incidents go undisclosed.
BlackFog's state of ransomware January 2026 measures publicly disclosed and non-disclosed attacks globally.
Two fake AI extensions hit 900k Chrome users, stealing chats, code and data – a stark example of Prompt Poaching.
Find out how Model Context Protocol (MCP) could be abused as a covert channel for data theft: five real risks, examples, and mitigations.
BlackFog’s 2025 Q4 Ransomware Report - The Unrelenting Surge: Ransomware Closes Q4 at Record Levels
Skip to content
