Technology ❯ Cybersecurity ❯ Threat Actors

Malware

Exploitation Techniques Remote Access Tools Social Engineering Remote Access Trojans Trojanized Software Payment Skimmers PHP Backdoors Overstep ImageIO Vulnerability ClickFix Supershell Proof of Concept TeamPCP Credential Theft VShell Zero-Day Exploits Privilege Escalation Infostealers Backdoors Web Shells APT29 AI-Generated Malware Midnight Blizzard Remote Code Execution Ransomware Webshells Lazarus Group Linux Toolkits

7 ARTICLES

3w ago

Critical Cisco Email‑Gateway Zero‑Day Lets Attackers Gain Root

Unauthenticated SQL in crafted emails can give attackers root control of Cisco Secure Email Gateway, creating risks to mail flow and internal networks.

3 ARTICLES

4w ago

HAProxy Compromised by Embedded 'Ted' Backdoor Used to Spy on South Korean Firms

6 ARTICLES

last mo.

Russian-Linked Hackers Hijack Hotel Wi‑Fi to Steal Microsoft 365 Logins and Deliver Malware

3 ARTICLES

2mo ago

AI-Generated PowerShell Script Mapped Active Directory and Staged Data Exfiltration

5 ARTICLES

4mo ago

Attackers Poison More Than 700 Ghost CMS Sites to Push ClickFix Malware

3 ARTICLES

5mo ago

cPanel Flaw Under Active Attack by Long-Running Group Deploying 'Filemanager'

8 ARTICLES

5mo ago

Microsoft Defender Zero-Days Are Being Exploited as Two Remain Unpatched

3 ARTICLES

6mo ago

LiteLLM Supply-Chain Breach Put Backdoored PyPI Releases in Developers’ Workflows

3 ARTICLES

7mo ago

CISA Flags BeyondTrust RCE as Used in Ransomware Attacks

3 ARTICLES

8mo ago

Mandiant Links AI-Driven Crypto Theft to North Korea’s UNC1069 With Seven macOS Malware Families

4 ARTICLES

8mo ago

North Korea–Linked Group Uses Deepfake Calls to Infect Crypto Workers’ Macs

4 ARTICLES

9mo ago

Trust Wallet Ties $8.5 Million Chrome Extension Theft to Shai-Hulud Supply-Chain Breach

5 ARTICLES

9mo ago

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

5 ARTICLES

10mo ago

Unpatched Gogs Zero-Day Is Under Active Exploitation, 700+ Servers Compromised

5 ARTICLES

11mo ago

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

3 ARTICLES

last yr.

AI Pentest Tool 'Villager' Nears 11,000 PyPI Downloads as Researchers Flag Abuse Risk

5 ARTICLES

last yr.

HexStrike‑AI Attracts Criminal Use as Citrix NetScaler Zero‑Days Face Rapid Exploitation

Malware

Critical Cisco Email‑Gateway Zero‑Day Lets Attackers Gain Root

HAProxy Compromised by Embedded 'Ted' Backdoor Used to Spy on South Korean Firms

SonicWall: Two SMA1000 Zero‑Days Actively Exploited

BdThemes Promotional Feed Hijacked to Seed Rogue WordPress Administrators

SQL Injection Used to Compile Khunt Toolkit Inside Oracle Database

Russian-Linked Hackers Hijack Hotel Wi‑Fi to Steal Microsoft 365 Logins and Deliver Malware

AI-Generated PowerShell Script Mapped Active Directory and Staged Data Exfiltration

Attackers Poison More Than 700 Ghost CMS Sites to Push ClickFix Malware

cPanel Flaw Under Active Attack by Long-Running Group Deploying 'Filemanager'

Microsoft Defender Zero-Days Are Being Exploited as Two Remain Unpatched

Never miss stories about

Malware

LiteLLM Supply-Chain Breach Put Backdoored PyPI Releases in Developers’ Workflows

CISA Flags BeyondTrust RCE as Used in Ransomware Attacks

Mandiant Links AI-Driven Crypto Theft to North Korea’s UNC1069 With Seven macOS Malware Families

North Korea–Linked Group Uses Deepfake Calls to Infect Crypto Workers’ Macs

Trust Wallet Ties $8.5 Million Chrome Extension Theft to Shai-Hulud Supply-Chain Breach

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

Unpatched Gogs Zero-Day Is Under Active Exploitation, 700+ Servers Compromised

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

AI Pentest Tool 'Villager' Nears 11,000 PyPI Downloads as Researchers Flag Abuse Risk

HexStrike‑AI Attracts Criminal Use as Citrix NetScaler Zero‑Days Face Rapid Exploitation

Never miss stories about

Malware