The first cyber attacks timeline of July is finally out. In this fortnight I have collected 101 events, a number in line with the previous one (102), confirming a strong characterization by ransomware in the threat landscape, despite in sensible decrease compared to the previous one.

In this timeline, 23 out of 101 event (roughly 23%) are directly or indirectly characterized by ransomware, but the number per se don’t tell the whole story. The first week of July has seen one of the most devastating attacks (Kaseya) carried out by the REvil gang, and targeting more than 1,000 organizations at once. Curiously the group disappeared from the internet shortly after the attack. Unfortunately for one gang that disappears, many others emerge, so there have been many more incidents caused by ransomware actors such as Babuk (an unwelcome return), DarkSide, etc…

More high-profile targets in the list of victims of mega breaches including 91 million records leaked from the Mexican Electoral Institute. And similarly, the exploitation in the wild of 0-day vulnerabilities (including vulnerabilities targeting Microsoft and Google products) continues to play a primary role in the threat landscape driven by both cyber espionage and cyber criminal purposes.