Ransomware rapid extortion & backup sabotage

BlueHammer MS Defender zero-day now exploited in ransomware attacks (CISA KEV). Check Point VPN zero-day linked to Qilin ransomware. ShinyHunters exploiting Oracle PeopleSoft zero-day to breach 100+ orgs (third mass campaign in 18 months). Silent Ransom Group uses physical extortion. Ransomware groups using Microsoft Teams relays for initial access. Jadepuffer autonomous ransomware attack demonstrates AI agent-driven full lifecycle automation. New: Fairlife ransomware incident shows supply chain disruption. Controls: immutable backups/MFA/EDR/ZT.