Silent Ransom Group Hits US Law Firms in Escalating Extortion Attacks

DarkReading batch (early June 2026) highlights multiple active, high-impact threats: a financially motivated extortion campaign (Silent Ransom Group) targeting U.S. law firms using vishing, IT impersonation and in-person intrusions; at least one critical VPN zero-day in Check Point appliances under active exploitation (linked to a Qilin ransomware affiliate); and an actively exploited Palo Alto PAN‑OS GlobalProtect authentication bypass. Software supply‑chain attacks continue (Hades campaign on PyPI, IronWorm on NPM, Shai‑Hulud variants) alongside broad malware/RAT activity (BTMOB, Xeno) and T