⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain ChaosThe Hacker News·May 26, 04:39 UTC · May 26, 2026Malware in the wildCVE-2026-46333CVE-2026-41091CVE-2026-45498+31 CVEs60
ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool InstallersThe Hacker News·Mar 31, 11:33 UTC · Mar 31, 2026Malware42
Global law enforcement operation targets AISURU, Kimwolf, JackSkid botnet operatorsSecurity Affairs·Mar 20, 10:34 UTC · Mar 20, 2026Malware30
China-Linked DKnife AitM Framework Targets Routers for Traffic Hijacking, Malware DeliveryThe Hacker News·Feb 7, 06:54 UTC · Feb 7, 2026Malware55
Record-breaking 31.4 Tbps DDoS attack hits in November 2025, stopped by CloudflareSecurity Affairs·Feb 6, 15:05 UTC · Feb 6, 2026Malware30
New Advanced Linux VoidLink Malware Targets Cloud and container EnvironmentsThe Hacker News·Jan 19, 08:54 UTC · Jan 19, 2026Malware55
Never-before-seen Linux malware is “far more advanced than typical”Ars Technica · Security·Jan 15, 00:00 UTC · Jan 15, 2026Malware30
⚡ Weekly Recap: MongoDB Attacks, Wallet Breaches, Android Spyware, Insider Crime & MoreThe Hacker News·Dec 31, 05:07 UTC · Dec 31, 2025Malware in the wildCVE-2025-14847CVE-2020-12812CVE-2025-68664+7 CVEs260
Evasive Panda cyberespionage campaign uses DNS poisoning to install MgBot backdoorSecurity Affairs·Dec 29, 08:51 UTC · Dec 29, 2025Malware42
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & MoreThe Hacker News·Nov 24, 12:32 UTC · Nov 24, 2025Malware in the wildCVE-2025-58034CVE-2025-64446CVE-2025-13223+12 CVEs60
Friday Squid Blogging: Squid Game: The Challenge, Season TwoSchneier on Security·Nov 7, 22:01 UTC · Nov 7, 2025Malware130
Unmasking the new XorDDoS controller and infrastructureCisco Talos·Apr 17, 10:00 UTC · Apr 17, 2025Malware30
Malicious PyPI Packages Stole Cloud Tokens—Over 14,100 Downloads Before RemovalThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025Malware42
PLAYFULGHOST supports multiple information stealing featuresSecurity Affairs·Jan 6, 00:30 UTC · Jan 6, 2025Malware42
Hackers Target Uyghurs and Tibetans with MOONSHINE Exploit and DarkNimbus BackdoorThe Hacker News·Dec 5, 14:46 UTC · Dec 5, 2024MalwareCVE-2020-641860
New LightSpy spyware version targets iPhonesSecurity Affairs·Nov 1, 19:51 UTC · Nov 1, 2024MalwareCVE-2018-4233CVE-2018-4404CVE-2020-9802+1 CVEs35
New LightSpy Spyware Version Targets iPhones with Increased Surveillance TacticsThe Hacker News·Oct 31, 15:00 UTC · Oct 31, 2024MalwareCVE-2020-383735
New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade DetectionThe Hacker News·Oct 25, 05:11 UTC · Oct 25, 2024Malware42
Grandoreiro banking trojan: overview of recent versions and new tricksKaspersky Securelist·Oct 22, 18:00 UTC · Oct 22, 2024Malware30
We can try to bridge the cybersecurity skills gap, but that doesn’t necessarily mean more jobs for defendersCisco Talos·Sep 12, 18:00 UTC · Sep 12, 2024Malware55
Multi-Stage ValleyRAT Targets Chinese Users with Advanced TacticsThe Hacker News·Aug 20, 03:56 UTC · Aug 20, 2024MalwareCVE-2017-019947
Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome SiteThe Hacker News·Jul 29, 04:56 UTC · Jul 29, 2024Malware42
China-linked Daggerfly hackers update their toolset, likely after exposureThe Record·Jul 23, 14:36 UTC · Jul 23, 2024Malware42
Beware: Fake Browser Updates Deliver BitRAT and Lumma Stealer MalwareThe Hacker News·Jun 3, 03:51 UTC · Jun 3, 2024Malware30
Kinsing Hacker Group Exploits More Flaws to Expand Botnet for CryptojackingThe Hacker News·May 22, 03:20 UTC · May 22, 2024Malware30
Tibetans targeted by China-linked supply chain attacks using malicious language translatorsThe Record·Mar 7, 17:14 UTC · Mar 7, 2024Malware42
Linux Malware Targets Docker, Apache Hadoop, Redis and ConfluenceInfosecurity Magazine·Mar 6, 16:15 UTC · Mar 6, 2024MalwareCVE-2022-26134147
China-backed Hackers Hijack Software Updates to Implant "NSPX30" SpywareThe Hacker News·Jan 25, 13:45 UTC · Jan 25, 2024MalwareCVE-2019-1652CVE-2019-165347
Vishing Goes High-Tech: New 'Letscall' Malware Employs Voice Traffic RoutingThe Hacker News·Jul 7, 18:17 UTC · Jul 7, 2023Malware30
Google Suspends Chinese E-Commerce App Pinduoduo Over MalwareKrebs on Security·Mar 23, 00:22 UTC · Mar 23, 2023MalwareCVE-2023-2096360
New Abcbot botnet goes after Chinese cloud providersThe Record·Jan 4, 00:00 UTC · Jan 4, 2023Malware42
New FontOnLake Linux malware used in targeted attacksThe Record·Dec 21, 00:00 UTC · Dec 21, 2022Malware42
DirtyMoe malware has infected more than 100,000 Windows systemsThe Record·Dec 17, 00:00 UTC · Dec 17, 2022Malware30
Banning TikTok won’t protect Americans’ sensitive dataCyberScoop·Oct 4, 20:32 UTC · Oct 4, 2022Malware42
Chinese Hackers Using New Manjusaka Hacking Framework Similar to Cobalt StrikeThe Hacker News·Aug 5, 08:41 UTC · Aug 5, 2022Malware42
Manjusaka, a new attack tool similar to Sliver and Cobalt StrikeSecurity Affairs·Aug 3, 17:15 UTC · Aug 3, 2022Malware42
Manjusaka: A Chinese sibling of Sliver and Cobalt StrikeCisco Talos·Aug 2, 12:00 UTC · Aug 2, 2022Malware55
ZuoRAT Malware Hijacking Home-Office Routers to Spy on Targeted NetworksThe Hacker News·Jun 29, 07:40 UTC · Jun 29, 2022Malware42