Europe Evolves Into Ransomware's Favorite Region

DarkReading digest (June 2026) highlights a broad surge in high-impact activity: ransomware actors shifting focus to Europe; multiple actively exploited vulnerabilities and zero-days (notably Cisco SD‑WAN, Ivanti, and Oracle ERP); massive credential-harvesting campaigns against FortiGate/Fortinet devices (including the FortiBleed campaign) with tens of thousands of devices and millions of credentials exposed; supply‑chain and account‑theft incidents (Klue OAuth abuse impacting Salesforce customers, malicious OpenClaw skills, and Cordyceps malicious pull requests targeting developer workflows);