4-year campaign backdoored iPhones using possibly the most advanced exploit everArs Technica · Security·Dec 27, 17:03 UTC · Dec 27, 2023MalwareCVE-2023-32434CVE-2023-32435CVE-2023-38606+1 CVEs160
Researchers Fingerprint Exploit Developers Who Help Several Malware AuthorsThe Hacker News·Oct 2, 10:18 UTC · Oct 2, 2020MalwareCVE-2019-0859CVE-2016-725560
⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and MoreThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Malware in the wildCVE-2026-11645CVE-2026-2441CVE-2026-3909+23 CVEs160
Google TAG shares details about exploit chains used to install commercial spywareSecurity Affairs·Mar 29, 14:20 UTC · Mar 29, 2023MalwareCVE-2022-42856CVE-2021-30900CVE-2022-3723+7 CVEs60
2016 Updates to Shifu Banking TrojanPalo Alto Unit 42·Jan 6, 20:00 UTC · Jan 6, 2017MalwareCVE-2016-0167CVE-2015-0003160
ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More StoriesThe Hacker News·Jan 10, 14:25 UTC · Jan 10, 2026MalwareCVE-2025-59295CVE-2025-10294CVE-2025-5923060
Google: 75 zero-days seen in 2024 as nations, spyware vendors continue exploitationThe Record·Apr 30, 01:05 UTC · Apr 30, 2025Malware in the wild60
BianLian and RansomExx Exploit SAP NetWeaver Flaw to Deploy PipeMagic TrojanThe Hacker News·May 15, 00:00 UTC · May 15, 2025Malware in the wildCVE-2025-31324CVE-2025-29824CVE-2025-4299960
Candiru surveillance spyware DevilsTongue exploited Chrome ZeroSecurity Affairs·Jul 22, 08:32 UTC · Jul 22, 2022MalwareCVE-2022-229460
⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and MoreThe Hacker News·Apr 6, 12:46 UTC · Apr 6, 2026Malware in the wildCVE-2026-5281CVE-2026-3502CVE-2026-35616+1 CVEs60
Raspberry Robin Malware Upgrades with Discord Spread and New ExploitsThe Hacker News·Feb 9, 16:32 UTC · Feb 9, 2024Malware in the wildCVE-2020-1054CVE-2021-1732CVE-2023-36802+1 CVEs60
Google links three exploitation frameworks to Spanish commercial spyware vendor VaristonSecurity Affairs·Nov 30, 21:35 UTC · Nov 30, 2022MalwareCVE-2021-42298CVE-2022-2648560
Monthly Malware Statistics: August 2010Kaspersky Securelist·Sep 1, 14:05 UTC · Sep 1, 2010MalwareCVE-2010-2568CVE-2010-1885CVE-2010-0886+3 CVEs60
⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain ChaosThe Hacker News·May 26, 04:39 UTC · May 26, 2026Malware in the wildCVE-2026-46333CVE-2026-41091CVE-2026-45498+31 CVEs60
Google accuses Spanish spyware company of ties to zeroThe Record·Jan 9, 00:00 UTC · Jan 9, 2023Malware in the wildCVE-2021-42298CVE-2022-2648560
New ThreadKit exploit builder used to spread banking Trojan and RATsSecurity Affairs·Mar 28, 12:38 UTC · Mar 28, 2018MalwareCVE-2017-0199CVE-2017-8759CVE-2018-4878+2 CVEs60
⚡ Weekly Recap: Hyper-V Malware, Malicious AI Bots, RDP Exploits, WhatsApp Lockdown and MoreThe Hacker News·Nov 10, 12:51 UTC · Nov 10, 2025MalwareCVE-2025-21042160
Commercial spyware vendor exploits used by KremlinArs Technica · Security·Aug 29, 21:05 UTC · Aug 29, 2024MalwareCVE-2023-41993CVE-2024-5274CVE-2024-4671+1 CVEs60
Threat actors actively exploit JetBrains TeamCity flaws to deliver malwareSecurity Affairs·Mar 20, 15:06 UTC · Mar 20, 2024Malware in the wildCVE-2024-27198CVE-2024-27199CVE-2024-2391760
Botnet exploits recent vBulletin flaw to protect its botsSecurity Affairs·Sep 26, 20:00 UTC · Sep 26, 2019MalwareCVE-2019-1675960
First Android Malware Found Exploiting Dirty COW Linux Flaw to Gain Root PrivilegesThe Hacker News·Sep 26, 13:57 UTC · Sep 26, 2017Malware in the wildCVE-2016-5195CVE-2015-180560
⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & MoreThe Hacker News·Mar 26, 15:38 UTC · Mar 26, 2026Malware in the wildCVE-2026-33017CVE-2026-2013160
RondoDox botnet expands arsenal targeting 174 flaws, and hits 15,000 daily exploit attemptsSecurity Affairs·Mar 17, 15:02 UTC · Mar 17, 2026Malware in the wildCVE-2023-1389CVE-2024-3721CVE-2024-12856+2 CVEs60
⚡ Weekly Recap: iOS Zero-Days, 4Chan Breach, NTLM Exploits, WhatsApp Spyware & MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025Malware in the wildCVE-2025-24054CVE-2024-43451CVE-2025-31200+7 CVEs60
PipeMagic Trojan Exploits Windows ZeroThe Hacker News·Apr 9, 09:04 UTC · Apr 9, 2025MalwareCVE-2025-29824CVE-2025-24983CVE-2023-2825260
Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE MalwareThe Hacker News·Apr 7, 06:39 UTC · Apr 7, 2025Malware in the wildCVE-2025-22457CVE-2024-38657CVE-2025-22467+2 CVEs60
Widespread exploitation by botnet operators of Zyxel firewall flawSecurity Affairs·Jun 1, 07:24 UTC · Jun 1, 2023Malware in the wildCVE-2023-2877160
React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple SectorsThe Hacker News·Dec 11, 04:19 UTC · Dec 11, 2025MalwareCVE-2025-5518260
CISA and FBI Raise Alerts on Exploited Flaws and Expanding HiatusRAT CampaignThe Hacker News·Dec 17, 06:34 UTC · Dec 17, 2024Malware in the wildCVE-2024-20767CVE-2024-35250CVE-2017-7921+6 CVEs60
Mirai botnet also spreads through the exploitation of Ivanti Connect Secure bugsSecurity Affairs·May 9, 13:42 UTC · May 9, 2024MalwareCVE-2023-46805CVE-2024-2188760
Threat actors exploit Ivanti VPN bugs to deploy KrustyLoader MalwareSecurity Affairs·Jan 31, 11:45 UTC · Jan 31, 2024MalwareCVE-2023-46805CVE-2024-2188760
Candiru Spyware Caught Exploiting Google Chrome ZeroThe Hacker News·Aug 3, 08:33 UTC · Aug 3, 2022Malware in the wildCVE-2022-229460
SHELLBIND IoT malware targets NAS devices exploiting SambaCry flawSecurity Affairs·Dec 6, 20:50 UTC · Dec 6, 2017MalwareCVE-2017-749460
Monthly Malware Statistics, March 2011Kaspersky Securelist·Apr 5, 12:57 UTC · Apr 5, 2011MalwareCVE-2010-0840CVE-2011-060960
ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New StoriesThe Hacker News·Jun 4, 14:00 UTC · Jun 4, 2026Malware in the wildCVE-2026-20230160
Week in review: Self-spreading npm malware hits developers, Cisco SD-WAN 0-day exploited since 2023Help Net Security·Mar 1, 00:00 UTC · Mar 1, 2026Malware in the wildCVE-2026-25108CVE-2026-20127160
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & MoreThe Hacker News·Nov 24, 12:32 UTC · Nov 24, 2025Malware in the wildCVE-2025-58034CVE-2025-64446CVE-2025-13223+12 CVEs60
Hackers Exploit Samsung MagicINFO, GeoVision IoT Flaws to Deploy Mirai BotnetThe Hacker News·May 9, 03:55 UTC · May 9, 2025Malware in the wildCVE-2024-6047CVE-2024-11120CVE-2018-10561+1 CVEs60
Multiple malware families delivered exploiting GeoServer GeoTools flaw CVE-2024Security Affairs·Sep 9, 06:41 UTC · Sep 9, 2024Malware in the wildCVE-2024-3640160
13 Critical flaws and exploitable backdoors found in various AMD chipsSecurity Affairs·Mar 14, 08:03 UTC · Mar 14, 2018Malware in the wild60