Ransomware Pay Cuts, Linux Targeting, and the Tooling Gap

Charm · July 18, 2026 · 1 min read · 4 sources

News

Ransomware Payments Drop as Victims Refuse to Pay

Ransomware payments are down. This isn't just luck; victims are getting better at recovering and negotiating. It signals a shift in the economics of extortion.

New Golang-Based Malware Targets Linux Systems

Attackers are investing in cross-platform tools written in Go. This new Linux malware family highlights the growing focus on server and cloud workloads, not just endpoints.

Tools

New Open-Source Tool Helps Defenders Automate Threat Hunting

A fresh open-source tool lands to help defenders automate threat hunting. Automation is leverage, and this kind of tooling helps close the gap between attackers' speed and defenders' capacity.

Analysis

Cloud Misconfigurations Remain a Top Initial Attack Vector

Cloud misconfigs are still a primary way attackers get in. This isn't new, but the persistence shows that foundational security hygiene is still the highest-leverage fix for most organizations.

Stay Ahead

Delivered each morning.