Threat Intelligence – Vetted Secops Dev

DeadLock ransomware: detection opportunities before encryption

October 28, 2026 by Vetted SecOps

Vetted SecOps diagram showing DeadLock ransomware activity from execution preparation through evidence suppression and encryption

A defender-focused reading of DeadLock behavior: the service disruption, evidence suppression and operational signals that can justify containment before encrypted files appear.

CVE-2025-66376: Detect and Contain LAUNDRY BEAR in Zimbra

July 27, 2026 by Vetted SecOps

CISA and international partners warn of Russian state-sponsored APT LAUNDRY BEAR actively exploiting CVE-2025-66376 in Zimbra Collaboration Suite to exfiltrate email data, Global Address Lists, and credentials.