BlackFog
@blackfog.com
BlackFog is an AI based cybersecurity company that focuses on stopping ransomware using anti data exfiltration or ADX.
Here’s what ransomware looked like in July. We recorded 111 publicly disclosed ransomware attacks in July, a 6.7% increase over July 2025. Our latest State of Ransomware blog rounds up every attack reported this month. 🔗 www.blackfog.com/the-state-of... #Ransomware #CyberSecurity
The State of Ransomware: July 2026 | BlackFog
BlackFog's state of ransomware July 2026 report measures publicly disclosed and non-disclosed attacks globally.
blackfog.com
Customer records. Intellectual property. Financial information. These are the assets cybercriminals are ultimately after. In Episode 2, Darren discusses why protecting data, and not simply detecting threats, requires a different security mindset: vimeo.com/1208397819?s...
BlackFog Origins: Forget the Device, It's the Data
Part of BlackFog Decoded, our ongoing series exploring the ideas and technologies shaping modern cybersecurity. A conversation over lunch with a digital forensics team changed everything. In this…
vimeo.com
ExfilSquad. The name says it all. Data theft isn’t the outcome. It’s the attack. www.telegraph.co.uk/news/2026/08... #DataExfiltration #CyberSecurity #BlackFog
telegraph.co.uk
AI is changing how we work, but it’s also increasing the risk of data leaks. Learn why AI governance, data masking, and real-time data protection are now essential. www.blackfog.com/ai-data-prot... #CyberSecurity #AI #DataProtection
BlackFog’s Q2 2026 State of Ransomware Report is out. 40% more undisclosed attacks YoY. 97% involved data exfiltration. 28 new ransomware groups. Services attacks +221% QoQ. www.blackfog.com/2026-q2-rans... #CyberSecurity #Ransomware
2026 Q2 Ransomware Report | BlackFog
BlackFog’s 2026 Q2 Ransomware Report - Beneath The Surface: Why Stable Attack Numbers Hide A Rapidly Escalating Data Theft Crisis
blackfog.com
Thanks to @SecurityWeek for covering our latest research into MedusaHVNC, a malware family that hijacks authenticated browser sessions using hidden Windows desktops. 🔗 www.securityweek.com/medusahvnc-m...
MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection
The malware-as-a-service operation launches legitimate browsers on an invisible desktop, giving attackers persistent and covert remote access to compromised Windows systems.
securityweek.com
Who's Watching the Back Door? For decades, cybersecurity has focused on keeping attackers out. BlackFog took a different approach. Instead of concentrating solely on the perimeter, we focused on preventing what every attacker is trying to achieve: data exfiltration. vimeo.com/1208350290?s...
BlackFog Origins: Who's Watching the Back Door?
Part of BlackFog Decoded, an ongoing series exploring the ideas, technologies, and emerging threats shaping the future of cybersecurity. Everyone in cybersecurity was focused on keeping attackers…
vimeo.com
What if attackers didn’t need your password? Our latest research examines MedusaHVNC, a malware family that abuses live browser sessions using a hidden Windows desktop. www.blackfog.com/medusahvnc-a... #CyberSecurity #InfoSec #ThreatResearch #ThreatIntelligence
MedusaHVNC: A Hidden Desktop That Steals Live Windows Sessions | BlackFog
MedusaHVNC is a newly uncovered hidden desktop malware giving operators access to live, logged-in browser sessions on Windows devices.
blackfog.com
Your printer shouldn’t be delivering ransom notes. 🖨️ A recent ransomware campaign used network printers to print ransom demands, proving attackers will use any method to get your attention. 🔗 www.techradar.com/pro/security... #CyberSecurity #Ransomware #ThreatIntelligence
A bizarre new malware campaign hacks your printer and forces it to print out ransomware demands
Researchers detail odd incidents affecting printers
techradar.com
New Case Study American Alarm spent 6 months independently evaluating BlackFog before deploying it across every endpoint to proactively protect against data exfiltration. Read their story: www.blackfog.com/american-ala... #CyberSecurity #EndpointProtection #AI #ADX
American Alarm Moves From Reactive Security To Proactive Data Protection With BlackFog | BlackFog
Discover how American Alarm strengthened cybersecurity with BlackFog, preventing data exfiltration, improving AI governance, and reducing cyber risk.
blackfog.com
AI is making ransomware faster, but data exfiltration is still the end game. BlackFog CEO Darren Williams shares his insights with International Security Journal: internationalsecurityjournal.com/ai-ransomwar... #Cybersecurity #Ransomware #A
How AI and ransomware are reshaping cybersecurity
ISJ hears exclusively with Dr Darren Williams, Founder and CEO of BlackFog about AI, ransomware and cybersecurity challenges.
internationalsecurityjournal.com
INC ransomware group’s reported exploitation of SonicWall zero-days shows where the real battle begins: initial access. Ransomware is the final stage, not the first. www.darkreading.com/vulnerabilit... #CyberSecurity #Ransomware
Inc Ransomware Exploits SonicWall SMA Zero-Days
When chained together, the two vulnerabilities allow threat actors to gain root-level capabilities on SonicWall's mobile access appliances.
darkreading.com
The reported Hugging Face breach could be an early look at the future of cyberattacks. Autonomous AI agents are no longer just boosting productivity. They're becoming an offensive capability. www.bleepingcomputer.com/news/securit... #CyberSecurity #AIAgents #InfoSec
Hugging Face warns an autonomous AI agent hacked its network
The Hugging Face artificial intelligence repository disclosed that attackers gained access to internal datasets and credentials after breaching its production infrastructure using an autonomous AI…
bleepingcomputer.com
AI hasn’t created a new data protection problem. It’s simply become another destination for sensitive data. The question isn’t just “How do we secure ChatGPT?” It’s “Do we know where our data is going?” www.blackfog.com/chatgpt-secu... #CyberSecurity
The ChatGPT Security Risks Enterprise Teams Need To Know About | BlackFog
Explore ChatGPT security risks in enterprises, including data leakage, shadow AI exposure and unsanctioned AI usage.
blackfog.com
Attackers aren’t relying on exploits as much as they used to. Malicious email and phishing now account for more ransomware attacks than vulnerability exploitation. The attack path is changing. Is your security strategy changing with it? www.darkreading.com/identity-acc... #CyberSecurity
Identity Attacks Overtake Exploits as Top Ransomware Cause
Phishing and malicious email now cause half of all ransomware attacks, overtaking vulnerabilities. MFA was deployed in 97% of credential-based attacks.
darkreading.com
The U.S. has charged three alleged operators of a Russian bulletproof hosting service, targeting infrastructure that supports ransomware and other cybercrime. www.bleepingcomputer.com/news/securit... #CyberSecurity #DataExfiltration
US charges alleged operators of Russian bulletproof hosting service
U.S. federal prosecutors have unsealed charges against three Russian nationals, accusing them of providing bulletproof hosting (BPH) services to ransomware gangs that caused over $62 million in…
bleepingcomputer.com
Preparing for the EU AI Act? Don’t overlook Shadow AI. You can’t govern, audit, or secure AI you don’t know is being used. BlackFog CEO & Founder Darren Williams explains why visibility is the foundation of AI compliance. www.europeanfinancialreview.com/is-shadow-ai... #EUAIAct #ShadowAI
Shadow AI and EU AI Act Compliance Risks - The European Financial Review
Discover how shadow AI threatens EU AI Act compliance and learn strategies to strengthen AI governance and risk management.
europeanfinancialreview.com
The success of EDR has made it a target. EDR killers are designed to disable endpoint security before ransomware is deployed, giving attackers a head start. More: www.blackfog.com/how-edr-kill... #CyberSecurity #Ransomware #EDR
How EDR Killers Work: BYOVD, Kernel Access, And The Pre-Encryption Window | BlackFog
EDR killers now sell as SaaS-style products with dashboards and credit balances. Here's how the market works and what to harden first.
blackfog.com
Nearly 7 million driver’s license records exposed. Cybercriminals don’t just want credentials. They want data. cybernews.com/news/assuran... #CyberSecurity #DataExfiltration
7 million US driver's license records exposed after insurance phishing attack
Hackers breached AssuranceAmerica in a phishing attack, exposing nearly 7 million driver's license records and other sensitive insurance data across more than a dozen US states.
cybernews.com
Most organizations have an AI policy. Far fewer have visibility into how AI is being used. Shadow AI detection is quickly becoming an essential security capability. www.blackfog.com/effective-sh... #ShadowAI #DataSecurity #CyberSecurity
The Importance Of Effective Shadow AI Detection In Enterprise Security | BlackFog
Learn why traditional DLP tools miss shadow AI activity and how shadow AI detection improves enterprise AI visibility and security.
blackfog.com
AI’s biggest cyber impact may not be writing malware. It may be discovering new attack paths. As AI accelerates threat innovation, one thing hasn’t changed: the target is still your data. www.techradar.com/pro/security... #CyberSecurity #AI
DeepSeek designed a browser attack that steals photos without installing any app
Chrome browsers on Android are quietly exposed to a ransomware trick AI figured out alone
techradar.com
The first AI-run ransomware attack has arrived. The real story? AI is making cyberattacks faster, cheaper, and easier to scale. Data exfiltration will only become more important. techcrunch.com/2026/07/06/t...
The 'first' AI-run ransomware attack still needed a human | TechCrunch
An AI agent carried out the technical execution of a real-world ransomware attack for the first known time, but new details show a human still chose the victim, set up the infrastructure, and…
techcrunch.com
AI is changing the ransomware business model. BlackFog research shows 96% of ransomware attacks now involve data exfiltration. As AI accelerates cybercrime, preventing data loss is more critical than ever. Read more: www.cybersecurityintelligence.com/blog/the-ran... #Ransomware #CyberSecurity #AI
The Ransomware Business Model Just Got An AI Upgrade
Ransomware Always Evolves: What's new in 2026 is the speed of that evolution & the sheer number of people driving it. By Darren Williams
cybersecurityintelligence.com
June saw 102 publicly disclosed ransomware attacks across 21 countries. Healthcare remained the top target, while the new 2019 ransomware group led the month with 12 claimed victims. Our latest blog breaks down the key trends from June. www.blackfog.com/the-state-of... #Ransomware #CyberSecurity
The State of Ransomware: June 2026 | BlackFog
BlackFog's state of ransomware June 2026 report measures publicly disclosed and non-disclosed attacks globally.
blackfog.com
🏆 Proud to share that BlackFog ADX Protect has won the 2026 AI in Cybersecurity Innovation Award from TMC. More: www.blackfog.com/2026-ai-in-c... #Cybersecurity #AI #ADXProtect
BlackFog Receives 2026 AI in Cybersecurity Innovation Award from TMCnet | BlackFog
BlackFog wins the 2026 AI in Cybersecurity Innovation Award for ADX Protect, recognizing innovation in preventing data exfiltration and AI threats.
blackfog.com
Nearly half of ransomware victims (49%) had data stolen before they detected the attack. Preventative cybersecurity solutions like BlackFog help stop data exfiltration before attackers can profit. www.msn.com/en-us/news/t... #CyberSecurity #Ransomware #BlackFog
A reported ransomware attack on Apple supplier Tata Electronics has exposed confidential iPhone 18 Pro information. Another reminder that today’s ransomware attacks are about data exfiltration, not just encryption. www.newsbytesapp.com/news/science...
Operation Endgame targeted the cybercrime supply chain by disrupting SocGholish, Amadey, and StealC. Stopping initial access and credential theft malware before ransomware is deployed can have a much bigger impact. thecyberexpress.com/operation-en... #CyberSecurity #ThreatIntel
Operation Endgame Seizes €41M, Disrupts Malware
Operation Endgame has disrupted the SocGholish, Amadey, and StealC malware infrastructure, seizing EUR 41 million in crypto assets.
thecyberexpress.com
Most conversations about AI poisoning stop at the model. They shouldn’t. www.blackfog.com/managing-the... #AISecurity #AgenticAI #CyberSecurity
Managing The Risks Of AI Poisoning In Agentic AI | BlackFog
Learn how AI poisoning risks scale in agentic AI systems and what organizations can do to reduce exposure and secure autonomous workflows.
blackfog.com
“Shadow AI is no longer confined to web browsers.” SC Media recently highlighted this shift in its coverage of BlackFog’s AI detection capabilities for macOS. www.scworld.com/brief/blackf... #ShadowAI #CyberSecurity
BlackFog launches AI detection for macOS
The new ADX Vision for macOS targets the increasing use of unsanctioned generative AI tools within organizations.
scworld.com