← Back

Wire · technology

CISA: SafePay ransomware hit over 600 critical infrastructure orgs

Published

21 October 2026

Topic

technology

◆ Sectors

Cybersecurity

◆ Geography

Global

◆ Source

Read at bleepingcomputer.com →

◆ Verified

Fusion42 · 21 October 2026 · Fusion42 review

The SafePay ransomware group has breached over 600 critical infrastructure organizations worldwide since 2024, exploiting VPN vulnerabilities, stolen credentials, and deploying double-extortion tactics. Security agencies recommend multifactor authentication, limiting administrative privileges, and patching known vulnerabilities to defend against these attacks.

This Wire brief sits within Fusion42's coverage of Cybersecurity, and 7 sources have reported it between 20 Oct 2026 and 22 Oct 2026.

◆ ◆ The Wire takeaway

SafePay's ramped attacks open a growing market for security tools that lock down VPNs and tighten account controls. You must act now to block access points or risk being an easy target once credentials leak.

◆ Coverage

7 sources · first reported 20 Oct 2026 · latest 22 Oct 2026

◆ Related on Wire

◆ Topics

Cybersecurityransomwarecybersecuritycritical-infrastructurevpn-exploitationmultifactor-authentication