Ransomware attackers are more likely to be paid, and receive higher amounts, if they exfiltrate data from victims, according to a study by the University of Twente. The research found that 40% of organisations paid in cases of exfiltration, compared to just 25% where no exfiltration occurred. Companies were more likely to pay if they enlisted the help of an incident response company and less likely to pay if they had recoverable backups.

Critical Samba RCE Vulnerability Enables Arbitrary Code Execution
Samba has disclosed a severe remote code execution (RCE) flaw that could allow attackers to hijack Active Directory domain controllers. Tracked as CVE-2025-10230, the vulnerability