Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE MalwareThe Hacker News·Apr 7, 06:39 UTC · Apr 7, 2025Malware in the wildCVE-2025-22457CVE-2024-38657CVE-2025-22467+2 CVEs60
Hackers Target Ukrainian Software Company Using GoMet BackdoorThe Hacker News·Jul 22, 03:26 UTC · Jul 22, 2022MalwareCVE-2020-5902CVE-2022-104060
Emotet Climbs March 2023's Most Wanted Malware List With OneNote CampaignInfosecurity Magazine·Apr 12, 16:30 UTC · Apr 12, 2023MalwareCVE-2021-44228CVE-2020-10826CVE-2020-10827+2 CVEs47
Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS AttacksThe Hacker News·Jun 8, 17:28 UTC · Jun 8, 2024MalwareCVE-2023-3324660
We can try to bridge the cybersecurity skills gap, but that doesn’t necessarily mean more jobs for defendersCisco Talos·Sep 12, 18:00 UTC · Sep 12, 2024Malware55
Earth Lusca expands its arsenal with SprySOCKS Linux malwareSecurity Affairs·Sep 19, 07:52 UTC · Sep 19, 2023MalwareCVE-2022-40684CVE-2022-39952CVE-2021-22205+6 CVEs160
PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud EnvironmentsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025Malware142
Both Mirai and Hoaxcalls IoT botnets target Symantec Web GatewaysSecurity Affairs·May 19, 08:50 UTC · May 19, 2020Malware42
New EnemyBot DDoS Botnet Borrows Exploit Code from Mirai and GafgytThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2022MalwareCVE-2020-17456CVE-2018-10823CVE-2022-27226+2 CVEs47
Botnet exploits recent vBulletin flaw to protect its botsSecurity Affairs·Sep 26, 20:00 UTC · Sep 26, 2019MalwareCVE-2019-1675960
Andoryu Botnet Exploits Critical Ruckus Wireless Flaw for Widespread AttackThe Hacker News·May 11, 07:05 UTC · May 11, 2023MalwareCVE-2023-25717CVE-2021-2220560
Mirai-based botnet IZ1H9 added 13 payloads to target routersSecurity Affairs·Oct 11, 13:55 UTC · Oct 11, 2023Malware in the wildCVE-2015-1187CVE-2016-20017CVE-2020-25506+8 CVEs60
New Mirai botnet variant has been very busy, researchers sayThe Record·Mar 28, 16:02 UTC · Mar 28, 2023MalwareCVE-2022-2613460
⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & MoreThe Hacker News·Aug 5, 04:38 UTC · Aug 5, 2025Malware in the wildCVE-2025-40596CVE-2025-40597CVE-2025-40598+8 CVEs60
Hackers Infect macOS with New DazzleSpy Backdoor in WateringThe Hacker News·Jan 27, 04:35 UTC · Jan 27, 2022MalwareCVE-2021-1789CVE-2021-30869CVE-2019-852647
CISA warns of RESURGE malware exploiting Ivanti flawSecurity Affairs·Mar 30, 23:13 UTC · Mar 30, 2025Malware in the wildCVE-2025-0282CVE-2025-028360
Void Banshee APT Exploits Microsoft MHTML Flaw to Spread Atlantida StealerThe Hacker News·Jul 21, 08:04 UTC · Jul 21, 2024MalwareCVE-2024-38112CVE-2021-40444CVE-2024-2719860
New Ballista Botnet spreads using TPSecurity Affairs·Mar 12, 09:51 UTC · Mar 12, 2025MalwareCVE-2023-138960
⚡ Weekly Recap: Fast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & MoreThe Hacker News·Apr 28, 07:38 UTC · Apr 28, 2026MalwareCVE-2025-20333CVE-2025-20362CVE-2026-40372+20 CVEs147
Google links three exploitation frameworks to Spanish commercial spyware vendor VaristonSecurity Affairs·Nov 30, 21:35 UTC · Nov 30, 2022MalwareCVE-2021-42298CVE-2022-2648560
Week in review: New LTE attacks, Android P security, backdooring connected carsHelp Net Security·Mar 11, 00:00 UTC · Mar 11, 2018Malware42
ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ StoriesThe Hacker News·Jan 1, 15:52 UTC · Jan 1, 2026MalwareCVE-2023-26359CVE-2023-38205CVE-2023-44353+7 CVEs47
New Mirai Variant and ZHtrap Botnet Malware Emerge in the WildThe Hacker News·Mar 18, 03:14 UTC · Mar 18, 2021MalwareCVE-2020-25506CVE-2021-27561CVE-2021-27562+4 CVEs47
⚡ Weekly Recap: iOS Zero-Days, 4Chan Breach, NTLM Exploits, WhatsApp Spyware & MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025Malware in the wildCVE-2025-24054CVE-2024-43451CVE-2025-31200+7 CVEs60
⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and MoreThe Hacker News·Jun 23, 03:40 UTC · Jun 23, 2026Malware in the wildCVE-2026-24858CVE-2025-59718CVE-2025-59719+1 CVEs60
RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoSThe Hacker News·Jun 30, 17:45 UTC · Jun 30, 2026Malware in the wildCVE-2017-17215CVE-2025-29635CVE-2024-1781+1 CVEs60
Magecart skimmer turns Stripe into a malware command serverSansec (Magento / e-commerce security)·Jun 4, 05:31 UTC · Jun 4, 2026Malware42
Popular Rust Crate liblzma-sys Compromised with XZ Utils Backdoor FilesThe Hacker News·Apr 12, 14:55 UTC · Apr 12, 2024Malware42
New Mirai Botnet Variant 'V3G4' Exploiting 13 Flaws to Target Linux and IoT DevicesThe Hacker News·Feb 17, 09:25 UTC · Feb 17, 2023MalwareCVE-2012-486960
New Malware Campaign Targeting Job Seekers with Cobalt Strike BeaconsThe Hacker News·Oct 1, 05:49 UTC · Oct 1, 2022MalwareCVE-2017-019947
Hackers Planted Backdoor in Webmin, Popular Utility for Linux/Unix ServersThe Hacker News·Aug 20, 09:00 UTC · Aug 20, 2019MalwareCVE-2019-1510760
⚡ Weekly Recap: USB Malware, React2Shell, WhatsApp Worms, AI IDE Bugs & MoreThe Hacker News·Dec 9, 04:05 UTC · Dec 9, 2025MalwareCVE-2025-55182CVE-2025-6389CVE-2025-66516+19 CVEs60
4-year campaign backdoored iPhones using possibly the most advanced exploit everArs Technica · Security·Dec 27, 17:03 UTC · Dec 27, 2023MalwareCVE-2023-32434CVE-2023-32435CVE-2023-38606+1 CVEs160
Approximately 2000 Citrix NetScaler servers were backdoored in massive campaignSecurity Affairs·Aug 16, 07:20 UTC · Aug 16, 2023Malware in the wildCVE-2023-351960
Discovery of Simps Botnet Leads To Ties to Keksec GroupSecurity Affairs·May 18, 08:36 UTC · May 18, 2021Malware42
FBI, CISA warn of AndroxGh0st botnet for victim identification and exploitationSecurity Affairs·Jan 17, 12:10 UTC · Jan 17, 2024MalwareCVE-2017-9841CVE-2021-41773CVE-2018-1513347
DarkIRC botnet is targeting the critical Oracle WebLogic CVE-2020Security Affairs·Dec 1, 18:41 UTC · Dec 1, 2020Malware in the wildCVE-2020-1488260
Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet CampaignThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026MalwareCVE-2025-68613CVE-2025-7544CVE-2023-46604+2 CVEs60
Cisco WebEx extension opens Chrome users to drive-by malware attacksHelp Net Security·Oct 15, 09:22 UTC · Oct 15, 2018Malware42