Stay ahead with intelligence-driven cyberthreat research and reporting

Buying protection is not the same as being protected. What decides the outcome is how the protection is configured and used every day. This report looks at that gap. It uses the live configuration records behind a large managed fleet, more than 1.6 million active endpoints, to see how protection plans are actually set up, how administrators and the providers who manage them choose to structure plans and what those choices tel

Qilin, also known as Agenda, is a Russian-speaking ransomware-as-a-service (RaaS) operation that first appeared in 2022.

The Gentlemen uses a double-extortion model. In addition to encrypting files, the ransomware can exfiltrate data from compromised systems. This puts additional pressure on victims to pay the ransom to restore access to their files and prevent the stolen data from being publicly leaked.

See how users are turning to the AI assistant in Acronis Cyber Platform to get answers and complete tasks using plain-language prompts.

An AI tool that produces only text carries roughly the risk of a badly worded email. A tool that can reach into systems and change things carries the risk of whatever those systems hold. The security question is not how clever the model is. It is which systems and data the model is authorized to access.

Acronis Threat Research Unit (TRU) uncovered a multinational campaign in which a Chinese-speaking threat actor, tracked as Red Heron, rapidly weaponized CVE-2026-60004 to compromise internet-facing instances of Gitea, a self-hosted source-code management platform. The activity progressed from source-code theft to persistent access, credential collection, and lateral movement.