--- title: "#ransomware articles | Hashnode" description: "Explore 237 articles tagged #ransomware on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/ransomware" --- Tag # #ransomware 237 posts · 8 followers [Cyber Knight](https://hashnode.com/@cyberknight2479) · [6h ago](https://hashnode.com/posts/the-ransom-note-that-read-like-a-business-case/6af565a602b1675373aba4f7) ### [The Ransom Note That Read Like a Business Case](https://nulltrace.hashnode.dev/the-ransom-note-that-read-like-a-business-case?utm_source=hashnode&utm_medium=feed) Maersk confirmed a breach in a warehouse system it bought four years ago. The gang demanding $5 million did the maths out loud — and that's the part worth reading twice. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/the-ransom-note-that-read-like-a-business-case?utm_source=hashnode&utm_medium=feed) [Mario Fang](https://hashnode.com/@mariosfong) · [2d ago](https://hashnode.com/posts/why-a-backup-drive-that-stays-plugged-in-isn-t-a-backup/6af2b332437635cf15989c01) ### [Why a backup drive that stays plugged in isn't a backup](https://mariosfong.hashnode.dev/why-a-backup-drive-that-stays-plugged-in-isn-t-a-backup?utm_source=hashnode&utm_medium=feed) Most people I know do have a backup. It's an external drive, it's plugged into the PC, and some software copies files to it every night. On paper, they're covered. Then ransomware runs once, and they 3 min read · [mariosfong.hashnode.dev](https://mariosfong.hashnode.dev/why-a-backup-drive-that-stays-plugged-in-isn-t-a-backup?utm_source=hashnode&utm_medium=feed) [Mario Fang](https://hashnode.com/@mariosfong) · [2d ago](https://hashnode.com/posts/i-run-servers-for-a-living-i-still-couldn-t-buy-the-backup-i-wanted-so-i-built-it/6af2931faf886c1927cef345) ### [I run servers for a living. I still couldn't buy the backup I wanted, so I built it.](https://mariosfong.hashnode.dev/i-run-servers-for-a-living-i-still-couldn-t-buy-the-backup-i-wanted-so-i-built-it?utm_source=hashnode&utm_medium=feed) I look after servers for a company. OA systems, databases, NAS boxes, the lot. Backups at work are boring in the good way: proper software, proper rotation, somebody's job to check the logs. Mine. The 3 min read · [mariosfong.hashnode.dev](https://mariosfong.hashnode.dev/i-run-servers-for-a-living-i-still-couldn-t-buy-the-backup-i-wanted-so-i-built-it?utm_source=hashnode&utm_medium=feed) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [6d ago](https://hashnode.com/posts/the-doors-are-open-the-books-can-t-leave/6aed7b84f38cd693f38cadd5) ### [The Doors Are Open. The Books Can't Leave.](https://nulltrace.hashnode.dev/the-doors-are-open-the-books-can-t-leave?utm_source=hashnode&utm_medium=feed) Ransomware hit New York's Queens Public Library this week — 66 branches open, every system dark. The ransom was never the point. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/the-doors-are-open-the-books-can-t-leave?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Nov 3](https://hashnode.com/posts/synology-c3rb3r-ransomware-dsm/6aea05c2cc5c8405a1edfbf1) ### [Synology C3RB3R Ransomware: Old Patch, New DSM Victim](https://404-founders.com/blog/synology-c3rb3r-ransomware-dsm?utm_source=hashnode&utm_medium=feed) Synology C3RB3R ransomware: Synology blames a 2024 bug, yet one victim ran DSM 7.4.1. What SA-24:20 covers, what KEV misses, what to check on your NAS. 10 min read · [404-founders.com](https://404-founders.com/blog/synology-c3rb3r-ransomware-dsm?utm_source=hashnode&utm_medium=feed) [Tech Skill School](https://hashnode.com/@techskillschool) · [Nov 2](https://hashnode.com/posts/cyber-pulse-monthly-october-2026-edition/6ae81cc2d78b2b6e45758405) ### [Cyber Pulse Monthly : October 2026 Edition](https://techskillschool.hashnode.dev/cyber-pulse-monthly-october-2026-edition?utm_source=hashnode&utm_medium=feed) 𝗣𝗛𝗣𝟮𝗦𝗵𝗲𝗹𝗹 𝗖𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗧𝗿𝗶𝗴𝗴𝗲𝗿 𝗪𝗶𝗱𝗲𝘀𝗽𝗿𝗲𝗮𝗱 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗮𝘁𝗶𝗼𝗻 𝗔𝘁𝘁𝗲𝗺𝗽𝘁𝘀 PHP2Shell vulnerabilities exposed PHP-based web applica 4 min read · [techskillschool.hashnode.dev](https://techskillschool.hashnode.dev/cyber-pulse-monthly-october-2026-edition?utm_source=hashnode&utm_medium=feed) [Ryan Beglau](https://hashnode.com/@ryanbeglau) · [Oct 30](https://hashnode.com/posts/your-door-badges-are-on-the-network/6ae4d7c434709fa18fcbcf65) ### [Your Door Badges Are on the Network](https://ryanoninfrastructure.hashnode.dev/your-door-badges-are-on-the-network?utm_source=hashnode&utm_medium=feed) Ransomware shut three school districts and hit two hospitals in ten days. Why door locks go first, and five recovery moves before the next one. 13 min read · [ryanoninfrastructure.hashnode.dev](https://ryanoninfrastructure.hashnode.dev/your-door-badges-are-on-the-network?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Oct 29](https://hashnode.com/posts/alert-veeam-cve-2026-108142-cdp-bypass/6ae38cd8a5e76bc443fe0dd8) ### [Veeam CVE-2026-108142: Unauthenticated CDP Service Bypass](https://404-founders.com/blog/alert-veeam-cve-2026-108142-cdp-bypass?utm_source=hashnode&utm_medium=feed) Veeam CVE-2026-108142 (CVSS 9.1) is an unauthenticated CDP Coordinator bypass. Fix: VBR 13.1.2.57 or 13.0.3.63. Backup for M365 needs 8.6.0.5011. 10 min read · [404-founders.com](https://404-founders.com/blog/alert-veeam-cve-2026-108142-cdp-bypass?utm_source=hashnode&utm_medium=feed) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [Oct 27](https://hashnode.com/posts/the-help-desk-that-wasn-t-there-how-a-teams-message-became-ransomware-in-under-17-hours/6ae0958b2ec3c926a0bcb543) ### [The Help Desk That Wasn't There: How a Teams Message Became Ransomware in Under 17 Hours](https://nulltrace.hashnode.dev/the-help-desk-that-wasn-t-there-how-a-teams-message-became-ransomware-in-under-17-hours?utm_source=hashnode&utm_medium=feed) No vulnerability. No malicious link. Just a chat window, a friendly name, and a six-digit code — and Arctic Wolf counted more than 400 cases. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/the-help-desk-that-wasn-t-there-how-a-teams-message-became-ransomware-in-under-17-hours?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/the-help-desk-that-wasn-t-there-how-a-teams-message-became-ransomware-in-under-17-hours/6ae0958b2ec3c926a0bcb543) [404 Founders](https://hashnode.com/@404-founders) · [Oct 26](https://hashnode.com/posts/globalprotect-cve-2026-0257-cookie-forgery-ransomware/6adf605f2498241548000f54) ### [GlobalProtect CVE-2026-0257: Your VPN's TLS Certificate Is the Key to Its Own Bypass](https://404-founders.com/blog/globalprotect-cve-2026-0257-cookie-forgery-ransomware?utm_source=hashnode&utm_medium=feed) A forged cookie, a public key anyone can read, and three ransomware groups walking through firewalls patched five months ago 8 min read · [404-founders.com](https://404-founders.com/blog/globalprotect-cve-2026-0257-cookie-forgery-ransomware?utm_source=hashnode&utm_medium=feed)