Search: “Cobalt Strike”

73 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 449 Malware 300 Threat actor 125 Vulnerability 115 Exploit / PoC 73 Data breach 36 Policy & legal 13 Phishing & fraud 12 AI safety & security 8 Advisory 7 Research 2 AI tools & infra 2 Industry 1 Tools 1

SeverityAll critical 374 high 635 medium 116 low 13 info 6

IndigoDrop spreads via military

Cisco TalosJun 22, 17:40 UTC · Jun 22, 2020Exploit / PoC

45

Google provides rules to detect tens of cracked versions of Cobalt Strike

Security AffairsNov 21, 11:41 UTC · Nov 21, 2022Exploit / PoC

45

Building a bypass with MSBuild

Cisco TalosFeb 18, 16:01 UTC · Feb 18, 2020Exploit / PoC

45

KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

The Hacker NewsMay 26, 05:19 UTC · May 26, 2026Exploit / PoC CVE-2026-5426

60

Hackers Deploy Open-Source Tool Sliver C2, Replacing Cobalt Strike, Metasploit

Infosecurity MagazineJan 23, 18:00 UTC · Jan 23, 2023Exploit / PoC

45

RedNovember Targets Government, Defense, and Technology Organizations

Recorded FutureNov 14, 00:00 UTC · Nov 14, 2024Exploit / PoC in the wild

60

Hackers Targeting Myanmar Use Domain Fronting to Hide Malicious Activities

The Hacker NewsNov 17, 15:13 UTC · Nov 17, 2021Exploit / PoC

45

Using an agent for the Mythic framework: pros and cons in pentesting

Kaspersky SecurelistMay 13, 10:00 UTC · May 13, 2025Exploit / PoC

60

Threat Source newsletter (Aug. 4, 2022) — BlackHat 2022 preview

Cisco TalosAug 4, 18:00 UTC · Aug 4, 2022Exploit / PoC in the wildCVE-2022-26138

60

Lemon Duck spreads its wings: Actors target Microsoft Exchange servers, incorporate new TTPs

Cisco TalosMay 7, 19:50 UTC · May 7, 2021Exploit / PoC CVE-2021-26855 CVE-2021-26857 CVE-2021-26858+1 CVEs1

60

Cybercriminals capitalize on poorly configured cloud environments

Help Net SecurityOct 4, 00:00 UTC · Oct 4, 2024Exploit / PoC

60

FireEye Breach Detection Guidance

Cisco TalosDec 14, 14:15 UTC · Dec 14, 2020Exploit / PoC

60

Notepad++ infrastructure hack likely tied to China

Security AffairsFeb 3, 09:35 UTC · Feb 3, 2026Exploit / PoC

60

2025 Year in Review: Malicious, Infrastructure

Recorded FutureMar 20, 00:00 UTC · Mar 20, 2026Exploit / PoC

57

Adversarial groups adapt to exploit systems in new ways

Help Net SecurityOct 28, 00:00 UTC · Oct 28, 2024Exploit / PoC

45

CISA adds bugs exploited by commercial surveillance spyware to Known Exploited Vulnerabilities catalog

Security AffairsApr 1, 18:06 UTC · Apr 1, 2023Exploit / PoC in the wildCVE-2021-30900 CVE-2022-38181 CVE-2023-0266+6 CVEs

60

Notepad++ supply chain attack: Researchers reveal details, IoCs, targets

Help Net SecurityFeb 17, 10:13 UTC · Feb 17, 2026Exploit / PoC

60

OPERA1ER APT Hackers Targeted Dozens of Financial Organizations in Africa

The Hacker NewsJan 5, 12:22 UTC · Jan 5, 2023Exploit / PoC

60

Log4Shell was in the wild at least nine days before public disclosure

Security AffairsDec 13, 09:47 UTC · Dec 13, 2021Exploit / PoC in the wildCVE-2021-22448 CVE-2021-44228

60

Asian State-Backed Group TGR-STA-1030 Breaches 70 Government, Infrastructure Entities

The Hacker NewsFeb 7, 11:03 UTC · Feb 7, 2026Exploit / PoC

60

Rust Payloads Exploiting Ivanti 0

Infosecurity MagazineJan 30, 15:00 UTC · Jan 30, 2024Exploit / PoC CVE-2024-21887 CVE-2023-46805

60

Bank heist with FIN7 traits went down while leaders were on the run, research suggests

CyberScoopJun 4, 12:55 UTC · Jun 4, 2019Exploit / PoC in the wild

60

Russian cyberspies targeted the Slovak government for months

The RecordDec 13, 00:00 UTC · Dec 13, 2022Exploit / PoC

60

ShadowSilk Hits 35 Organizations in Central Asia and APAC Using Telegram Bots

The Hacker NewsAug 28, 03:59 UTC · Aug 28, 2025Exploit / PoC CVE-2018-7600 CVE-2018-76020 CVE-2024-27956

50

Chinese Hackers Exploit Trimble Cityworks Flaw to Infiltrate U.S. Government Networks

The Hacker NewsMay 23, 04:01 UTC · May 23, 2025Exploit / PoC in the wildCVE-2025-0944

60

Threat actors target the infoSec community with fake PoC exploits

Security AffairsMay 23, 18:21 UTC · May 23, 2022Exploit / PoC CVE-2022-26809 CVE-2022-24500

60

⚡ Weekly Recap: Fortinet Exploits, RedLine Clipjack, NTLM Crack, Copilot Attack & More

The Hacker NewsJan 20, 07:01 UTC · Jan 20, 2026Exploit / PoC in the wildCVE-2025-64155

60

Financial hacking teams FIN7, Cobalt Group update tactics to haunt banks and retail

CyberScoopAug 14, 15:18 UTC · Aug 14, 2019Exploit / PoC in the wild

60

ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device

The Hacker NewsJun 18, 15:29 UTC · Jun 18, 2026Exploit / PoC CVE-2026-20127

60

Ongoing exploitation of Cisco Catalyst SD

Cisco TalosMay 14, 16:02 UTC · May 14, 2026Exploit / PoC in the wildCVE-2026-20182 CVE-2026-20133 CVE-2026-20128+2 CVEs1

60

One Missed Threat Per Week: What 25M Alerts Reveal About Low

The Hacker NewsMay 8, 10:30 UTC · May 8, 2026Exploit / PoC

60

UAT-7290 targets high value telecommunications infrastructure in South Asia

Cisco TalosJan 8, 11:00 UTC · Jan 8, 2026Exploit / PoC

60

React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2025Exploit / PoC in the wildCVE-2025-55182 CVE-2021-44228

60

Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation

The Hacker NewsDec 9, 06:18 UTC · Dec 9, 2025Exploit / PoC in the wildCVE-2025-55182

60

Underground AI models promise to be hackers ‘cyber pentesting waifu’

CyberScoopNov 26, 01:13 UTC · Nov 26, 2025Exploit / PoC in the wild

60

CISA Adds Four Critical Vulnerabilities to KEV Catalog Due to Active Exploitation

The Hacker NewsJul 8, 05:08 UTC · Jul 8, 2025Exploit / PoC in the wildCVE-2014-3931 CVE-2016-10033 CVE-2019-5418+3 CVEs

60

Log4Shell: How It’s Exploited and Mitigating Damage

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Exploit / PoC in the wildCVE-2021-44228

60

Google Chrome Zero-Day CVE-2025-2783 Exploited by TaxOff to Deploy Trinper Backdoor

The Hacker NewsJun 18, 10:32 UTC · Jun 18, 2025Exploit / PoC in the wildCVE-2025-2783 CVE-2024-6473

60

U.S. CISA adds Trimble Cityworks flaw to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 7, 21:54 UTC · Feb 7, 2025Exploit / PoC in the wildCVE-2025-0994

60

Mandiant devised a technique to bypass browser isolation using QR codes

Security AffairsDec 9, 12:12 UTC · Dec 9, 2024Exploit / PoC

45