WannaRen Returns As Life Ransomware
WannaRen ransomware appeared on the threat landscape reemerged in 2022 as Life ransomware.
The new variant switched from using a PowerShell downloader to using a batch file to download and execute WINWORD.exe.
Victims are required to contact the threat actor within one week or stolen data will be published on the Internet.
Featured Resources
View More Resources
blog
Kerberos Authentication Relay Via CNAME Abuse
Originally published January 15, 2026. Updated January 21, 2026, with new attack scenarios in Cymulate Exposure Validation. Cymulate Research Labs
blog
CVE-2026-20965: Cymulate Research Labs Discovers Token Validation Flaw that Leads to Tenant-Wide RCE in Azure Windows Admin Center
A subtle Azure SSO token validation flaw allowed attackers to escalate privileges and move laterally across WAC-managed systems.
blog
Evolving Vulnerability Management to Continuous Threat Exposure Management
Shift from reactive vulnerability management to continuous, threat-validated exposure management for real risk resilience.