'The Gentlemen' Rapidly Rises to Ransomware Prominence
2026-04-23T02:51:44Z•fa9734ab42b962dc56e358e239b6d4195540bd70ca2b286efe1d1c269d94f074
BYOVDCVE-2026-1731ai-securitybomgarcloud-securitycredential-theftdata-breachdevice-code-phishingedr-killerindustrial-control-systemsoauthot-icsphishingprompt-injectionransomwareransomware-gangsremote-code-executionsupply-chainwindows-defenderzero-day
What happened
DarkReading roundup: a surge in high-impact threats and systemic vulnerabilities. Ransomware actors (notably the 'Gentlemen' gang) are rapidly scaling operations while supply-chain and RMM risks (critical Bomgar RCE CVE-2026-1731) enable broad compromise. Attackers are actively exploiting/poC'ing Windows Defender and multiple zero-days (Adobe, Microsoft) and abusing OAuth tokens, device-code phishing, and developer/tooling access to harvest credentials and pivot in cloud environments. AI-related risks (prompt-injection, exploit-capable models) and BYOVD/EDR-killer techniques are amplifying old
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- fa9734ab42b962dc56e358e239b6d4195540bd70ca2b286efe1d1c269d94f074
- Enrichment time
- 2026-04-23T02:51:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.