From Android TVs to routers: the xlabs_v1 MiraiSecurity Affairs·May 7, 10:15 UTC · May 7, 2026Vulnerability30
Who Benefited from the Aisuru and Kimwolf Botnets?Krebs on Security·Jan 9, 08:46 UTC · Jan 9, 2026Malware30
Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid DisruptionThe Hacker News·Jul 27, 17:16 UTC · Jul 27, 2026MalwareCVE-2025-952835
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes TokensThe Hacker News·Jul 17, 17:12 UTC · Jul 17, 2026MalwareCVE-2026-39987CVE-2026-41176CVE-2022-22947+1 CVEs47
4,300+ Outdated Routers Hijacked in Stealthy Spy Infrastructure by AryStinger malwareSecurity Affairs·Jun 22, 08:27 UTC · Jun 22, 2026MalwareCVE-2013-3307CVE-2016-5681CVE-2025-1183760
Mirai-Based xlabs_v1 Botnet Exploits ADB to Hijack IoT Devices for DDoS AttacksThe Hacker News·May 6, 20:21 UTC · May 6, 2026Malware30
AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy NetworkThe Hacker News·Jun 22, 06:57 UTC · Jun 22, 2026MalwareCVE-2013-3307CVE-2016-5681CVE-2025-1183735
RustDuck: The Botnet That's Still Small but Engineering Like It Plans to GrowSecurity Affairs·Jul 1, 10:25 UTC · Jul 1, 2026Malware in the wildCVE-2025-29635CVE-2017-17215CVE-2024-1781+1 CVEs160
Kimwolf Botnet Hijacks 1.8 Million Android TVs, Launches LargeThe Hacker News·Dec 22, 04:46 UTC · Dec 22, 2025Malware30
RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoSThe Hacker News·Jun 30, 17:45 UTC · Jun 30, 2026Malware in the wildCVE-2017-17215CVE-2025-29635CVE-2024-1781+1 CVEs160
Dysphoria Botnet Uses Blockchain Domains to Hide C2 InfrastructureSecurity Affairs·Jul 28, 19:08 UTC · Jul 28, 2026MalwareCVE-2025-55182CVE-2017-1721535
The Kimwolf Botnet is Stalking Your Local NetworkKrebs on Security·Jan 2, 15:06 UTC · Jan 2, 2026Malware42
DDoS Botnet Aisuru Blankets US ISPs in Record DDoSKrebs on Security·Oct 10, 17:41 UTC · Oct 10, 2025Malware30
PHP backdoor looks to be work of ChineseCyberScoop·Dec 16, 19:15 UTC · Dec 16, 2024Malware in the wild60
Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix AttacksThe Hacker News·Jun 26, 07:33 UTC · Jun 26, 2026VulnerabilityCVE-2026-2698060
cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager BackdoorThe Hacker News·May 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2026-41940160
Stealthy hackers exploit cPanel flaw in active backdoor campaign (CVE-2026-41940)Help Net Security·May 12, 00:00 UTC · May 12, 2026VulnerabilityCVE-2026-4194047
Massive Android botnet Kimwolf infects millions, strikes with DDoSSecurity Affairs·Dec 21, 08:09 UTC · Dec 21, 2025Malware30
Vo1d Botnet's Peak Surpasses 1.59M Infected Android TVs, Spanning 226 CountriesThe Hacker News·Mar 10, 04:01 UTC · Mar 10, 2025Malware42
Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS BotnetThe Hacker News·Jan 23, 05:18 UTC · Jan 23, 2025Exploit / PoCCVE-2013-3307CVE-2016-20016CVE-2017-5259+7 CVEs160
New Mirai Botnet Exploits ZeroInfosecurity Magazine·Jan 8, 10:45 UTC · Jan 8, 2025MalwareCVE-2024-1285660
New Glutton Malware Exploits Popular PHP Frameworks Like Laravel and ThinkPHPThe Hacker News·Dec 17, 04:40 UTC · Dec 17, 2024Malware155
May 2026 CVE LandscapeRecorded Future·Jun 15, 00:00 UTC · Jun 15, 2026Exploit / PoC in the wildCVE-2008-4250CVE-2009-1537CVE-2009-3459+19 CVEs60
Attackers exploit cPanel CVE-2026Security Affairs·May 12, 11:41 UTC · May 12, 2026Ransomware in the wildCVE-2026-41940160
DoJ Disrupts 3 Million-Device IoT Botnets Behind Record 31.4 Tbps Global DDoS AttacksThe Hacker News·Mar 20, 16:10 UTC · Mar 20, 2026Malware30
APT36 Targets Indian Government with GolangThe Hacker News·Oct 27, 08:18 UTC · Oct 27, 2025Threat actorCVE-2025-808860
Researchers Warn of MystRodX Backdoor Using DNS and ICMP Triggers for Stealthy ControlThe Hacker News·Sep 8, 14:09 UTC · Sep 8, 2025Malware42
Brazil expert discovers Oracle flaw that allows massive DDoS attacksSecurity Affairs·Oct 17, 12:39 UTC · Oct 17, 2018Exploit / PoC45
Lumen disrupts AISURU and Kimwolf botnet by blocking over 550 C2 serversSecurity Affairs·Jan 15, 09:25 UTC · Jan 15, 2026Malware30
Kimwolf botnet leverages residential proxies to hijack 2M+ Android devicesSecurity Affairs·Jan 5, 15:11 UTC · Jan 5, 2026Malware55
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & MoreThe Hacker News·Nov 24, 12:32 UTC · Nov 24, 2025Malware in the wildCVE-2025-58034CVE-2025-64446CVE-2025-13223+12 CVEs60
ShadowV2 Botnet Exploits Misconfigured AWS Docker Containers for DDoS-forThe Hacker News·Sep 23, 12:30 UTC · Sep 23, 2025Malware130
KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoSKrebs on Security·May 20, 22:27 UTC · May 20, 2025Exploit / PoC60
Gayfemboy Botnet targets FourSecurity Affairs·Jan 8, 19:14 UTC · Jan 8, 2025MalwareCVE-2024-12856CVE-2013-3307CVE-2021-35394+1 CVEs60
Mirai Botnet Variant Exploits Four-Faith Router Vulnerability for DDoS AttacksThe Hacker News·Jan 8, 10:30 UTC · Jan 8, 2025Vulnerability in the wildCVE-2024-12856CVE-2013-3307CVE-2013-7471+11 CVEs60
Iran-Linked IOCONTROL Malware Targets SCADA and LinuxThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2024Malware55
New Golang-Based Zergeca Botnet Capable of Powerful DDoS AttacksThe Hacker News·Jul 7, 16:51 UTC · Jul 7, 2024Malware42
New Golang Zergeca Botnet appeared in the threat landscapeSecurity Affairs·Jul 5, 09:39 UTC · Jul 5, 2024Malware30
Hackers Exploit Legitimate Packer Software to Spread Malware UndetectedThe Hacker News·Jun 6, 09:54 UTC · Jun 6, 2024Malware30