148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS BotnetThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Malware30
Binary Defense’s NightBeacon CMD helps enterprise SOC teams automate threat investigationsHelp Net Security·Jul 15, 00:00 UTC · Jul 15, 2026Malware30
RiskX interview video featuring Colin Mahony and Mastercard's Aditi SawhneyRecorded Future·Jul 10, 00:00 UTC · Jul 10, 2026Malware30
The fake report message that ends with a stolen Reddit accountHelp Net Security·Jul 9, 00:00 UTC · Jul 9, 2026Malware30
New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet MalwareThe Hacker News·Jul 8, 15:19 UTC · Jul 8, 2026Malware30
Phantom Squatting Uses AI-Hallucinated Domains for Phishing and MalwareThe Hacker News·Jul 1, 07:20 UTC · Jul 1, 2026Malware30
New SharkLoader Malware Deploys Cobalt Strike in StrikeShark CyberattacksThe Hacker News·Jun 27, 12:06 UTC · Jun 27, 2026MalwareCVE-2021-26855CVE-2023-32315CVE-2024-36401+10 CVEs60
StrikeShark: a new campaign involving a custom SharkLoader and Cobalt Strike BeaconKaspersky Securelist·Jun 24, 14:23 UTC · Jun 24, 2026MalwareCVE-2021-26855CVE-2023-32315CVE-2024-36401+10 CVEs47
⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and MoreThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Malware in the wildCVE-2026-11645CVE-2026-2441CVE-2026-3909+23 CVEs160
⚡ Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and moreThe Hacker News·Jun 10, 04:47 UTC · Jun 10, 2026Malware in the wildCVE-2025-6543CVE-2025-5777CVE-2025-49825+23 CVEs60
‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supplyCyberScoop·May 12, 21:38 UTC · May 12, 2026Malware155
⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and MoreThe Hacker News·May 11, 12:36 UTC · May 11, 2026Malware in the wildCVE-2026-6973CVE-2026-030060
Attackers don’t linger, they strike and move onHelp Net Security·Apr 23, 13:51 UTC · Apr 23, 2026Malware42
Predicting DDoS attacks: How deep learning could give defenders an early warningHelp Net Security·Apr 23, 13:30 UTC · Apr 23, 2026Malware30
Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet CampaignThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026MalwareCVE-2025-68613CVE-2025-7544CVE-2023-46604+2 CVEs60
⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and MoreThe Hacker News·Apr 6, 12:46 UTC · Apr 6, 2026Malware in the wildCVE-2026-5281CVE-2026-3502CVE-2026-35616+1 CVEs60
Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper AttackThe Hacker News·Mar 30, 09:39 UTC · Mar 30, 2026Malware55
The First 90 Seconds: How Early Decisions Shape Incident Response InvestigationsThe Hacker News·Feb 4, 10:00 UTC · Feb 4, 2026Malware55
Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access TrojanThe Hacker News·Jan 28, 12:14 UTC · Jan 28, 2026Malware42
New Advanced Linux VoidLink Malware Targets Cloud and container EnvironmentsThe Hacker News·Jan 19, 08:54 UTC · Jan 19, 2026Malware55
Fake Booking.com lures and BSoD scams spread DCRat in European hospitality sectorSecurity Affairs·Jan 7, 07:31 UTC · Jan 7, 2026Malware30
RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web ServersThe Hacker News·Jan 1, 09:19 UTC · Jan 1, 2026MalwareCVE-2025-55182CVE-2023-1389CVE-2025-2489360
North Korea’s ScarCruft Deploys KoSpy Malware, Spying on Android Users via Fake Utility AppsThe Hacker News·Dec 18, 07:30 UTC · Dec 18, 2025Malware42
Fix SOC Blind Spots: See Threats to Your Industry & Country in Real TimeThe Hacker News·Dec 17, 11:30 UTC · Dec 17, 2025Malware55
North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT MalwareThe Hacker News·Dec 10, 07:33 UTC · Dec 10, 2025MalwareCVE-2025-5518260
Contagious Interview campaign expands with 197 npm Ppackages spreading new OtterCookie malwareSecurity Affairs·Nov 30, 01:02 UTC · Nov 30, 2025Malware42
North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie MalwareThe Hacker News·Nov 28, 16:18 UTC · Nov 28, 2025Malware42
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & MoreThe Hacker News·Nov 24, 12:32 UTC · Nov 24, 2025Malware in the wildCVE-2025-58034CVE-2025-64446CVE-2025-13223+12 CVEs60
10 npm Packages Caught Stealing Developer Credentials on Windows, macOS, and LinuxThe Hacker News·Oct 29, 08:34 UTC · Oct 29, 2025Malware55
ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware InfrastructureThe Hacker News·Aug 19, 06:09 UTC · Aug 19, 2025Malware55
⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and MoreThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462CVE-2025-32463CVE-2025-20309+23 CVEs60
China’s Government Is Learning From Russia’s Cyberattacks Against UkraineRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Malware55
Leveraging AI for Cyber Defense: Predicting Tomorrow’s ThreatsRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Malware30
Famous Chollima deploying Python version of GolangGhost RATCisco Talos·Jun 18, 10:00 UTC · Jun 18, 2025Malware130
Cybercrime crackdown disrupts malware, infostealers, marketplaces across the globeCyberScoop·Jun 16, 15:08 UTC · Jun 16, 2025Malware in the wild60
⚡ Weekly Recap: APT Campaigns, Browser Hijacks, AI Malware, Cloud Breaches and Critical CVEsThe Hacker News·May 26, 13:00 UTC · May 26, 2025MalwareCVE-2025-4427CVE-2025-4428CVE-2025-34025+7 CVEs60