New Dohdoor malware campaign targets education and health careCisco Talos·Feb 26, 11:00 UTC · Feb 26, 2026Malware42
⚡ Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and MoreThe Hacker News·Feb 9, 12:59 UTC · Feb 9, 2026MalwareCVE-2026-25049CVE-2026-0709CVE-2026-23795+23 CVEs160
ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More StoriesThe Hacker News·Jan 10, 14:25 UTC · Jan 10, 2026MalwareCVE-2025-59295CVE-2025-10294CVE-2025-5923060
The Kimwolf Botnet is Stalking Your Local NetworkKrebs on Security·Jan 2, 15:06 UTC · Jan 2, 2026Malware42
React2Shell under attack: RondoDox Botnet spreads miners and malwareSecurity Affairs·Jan 1, 14:31 UTC · Jan 1, 2026MalwareCVE-2025-55182CVE-2024-3721CVE-2024-1285660
⚡ Weekly Recap: MongoDB Attacks, Wallet Breaches, Android Spyware, Insider Crime & MoreThe Hacker News·Dec 31, 05:07 UTC · Dec 31, 2025Malware in the wildCVE-2025-14847CVE-2020-12812CVE-2025-68664+7 CVEs260
ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit — and 20 More StoriesThe Hacker News·Dec 18, 12:15 UTC · Dec 18, 2025MalwareCVE-2024-3721CVE-2025-5518260
⚡ Weekly Recap: USB Malware, React2Shell, WhatsApp Worms, AI IDE Bugs & MoreThe Hacker News·Dec 9, 04:05 UTC · Dec 9, 2025MalwareCVE-2025-55182CVE-2025-6389CVE-2025-66516+19 CVEs60
Intellexa remotely accessed Predator spyware customer systems, investigation findsCyberScoop·Dec 4, 22:24 UTC · Dec 4, 2025Malware in the wild60
CISA alert draws attention to spyware’s targeting of messaging appsCyberScoop·Nov 24, 20:19 UTC · Nov 24, 2025Malware in the wild60
Desktop and IoT malware report for Q3 2025Kaspersky Securelist·Nov 19, 10:00 UTC · Nov 19, 2025MalwareCVE-2024-4076660
Hacking Team successor linked to malware campaign, new 'Dante' commercial spywareCyberScoop·Oct 27, 17:01 UTC · Oct 27, 2025Malware55
Tracking Candiru’s DevilsTongue Spyware in Multiple CountriesRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Malware130
Analyzing evolution of the PipeMagic malwareSecurity Affairs·Aug 19, 08:02 UTC · Aug 19, 2025Malware in the wildCVE-2025-29824CVE-2017-014460
SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkitHelp Net Security·Aug 5, 15:29 UTC · Aug 5, 2025MalwareCVE-2021-20035CVE-2021-20039CVE-2024-38475+1 CVEs60
⚡ Weekly Recap — SharePoint Breach, Spyware, IoT Hijacks, DPRK Fraud, Crypto Drains and MoreThe Hacker News·Jul 28, 15:57 UTC · Jul 28, 2025Malware in the wildCVE-2025-49706CVE-2025-49704CVE-2025-20281+27 CVEs60
Malware Injected into 7 npm Packages After Maintainer Tokens Stolen in Phishing AttackThe Hacker News·Jul 23, 10:41 UTC · Jul 23, 2025Malware42
Google spots tailored backdoor malware aimed at SonicWall appliancesThe Record·Jul 16, 15:48 UTC · Jul 16, 2025MalwareCVE-2024-38475CVE-2021-20038CVE-2021-20035+2 CVEs60
Trojanized SonicWall NetExtender app exfiltrates VPN credentialsHelp Net Security·Jun 24, 00:00 UTC · Jun 24, 2025Malware30
New Mirai botnet targets TBK DVRs by exploiting CVE-2024Security Affairs·Jun 9, 08:54 UTC · Jun 9, 2025MalwareCVE-2024-372135
New Mirai botnet campaign targets DVR devicesKaspersky Securelist·Jun 6, 10:52 UTC · Jun 6, 2025MalwareCVE-2024-372147
⚡ Weekly Recap: APT Intrusions, AI Malware, ZeroThe Hacker News·Jun 3, 04:04 UTC · Jun 3, 2025Malware in the wildCVE-2025-3935CVE-2025-47577CVE-2025-2760+14 CVEs60
Thousands of Asus routers are being hit with stealthy, persistent backdoorsArs Technica · Security·May 28, 22:12 UTC · May 28, 2025MalwareCVE-2023-3978047
⚡ Weekly Recap: APT Campaigns, Browser Hijacks, AI Malware, Cloud Breaches and Critical CVEsThe Hacker News·May 26, 13:00 UTC · May 26, 2025MalwareCVE-2025-4427CVE-2025-4428CVE-2025-34025+7 CVEs60
Phishing emails delivering infostealers surge 84%Help Net Security·Apr 23, 00:00 UTC · Apr 23, 2025Malware55
Delivering Malware Through Abandoned Amazon S3 BucketsSchneier on Security·Feb 12, 19:32 UTC · Feb 12, 2025Malware42
Week in review: Exploited 7-Zip 0-day flaw, crypto-stealing malware found on App Store, Google PlayHelp Net Security·Feb 9, 00:00 UTC · Feb 9, 2025MalwareCVE-2025-0411CVE-2025-25181CVE-2024-57968+1 CVEs60
A new Mirai botnet variant targets DigiEver DSSecurity Affairs·Dec 26, 15:38 UTC · Dec 26, 2024MalwareCVE-2023-1389CVE-2018-1753247
Juniper Warns of Mirai Botnet Targeting SSR Devices with Default PasswordsThe Hacker News·Dec 24, 05:50 UTC · Dec 24, 2024MalwareCVE-2023-1389CVE-2018-1753247
Webcams and DVRs Vulnerable to HiatusRAT, FBI WarnsInfosecurity Magazine·Dec 20, 11:20 UTC · Dec 20, 2024MalwareCVE-2017-7921CVE-2018-9995CVE-2020-25078+2 CVEs60
CISA and FBI Raise Alerts on Exploited Flaws and Expanding HiatusRAT CampaignThe Hacker News·Dec 17, 06:34 UTC · Dec 17, 2024Malware in the wildCVE-2024-20767CVE-2024-35250CVE-2017-7921+6 CVEs60
Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing EmailsThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2024MalwareCVE-2024-43451160
Massive China-state IoT botnet went undetected for four years—until nowArs Technica · Security·Sep 18, 19:58 UTC · Sep 18, 2024Malware in the wildCVE-2024-2188760
Google: apparent Russian hackers play copycat to commercial spyware vendorsCyberScoop·Aug 29, 13:00 UTC · Aug 29, 2024Malware in the wild60
Void Banshee APT Exploits Microsoft MHTML Flaw to Spread Atlantida StealerThe Hacker News·Jul 21, 08:04 UTC · Jul 21, 2024MalwareCVE-2024-38112CVE-2021-40444CVE-2024-2719860
Microsoft MSHTML Flaw Exploited to Deliver MerkSpy Spyware ToolThe Hacker News·Jul 3, 09:53 UTC · Jul 3, 2024MalwareCVE-2021-4044447
Week in review: MOVEit auth bypass flaws quitely fixed, open-source Rafel RAT targets AndroidsHelp Net Security·Jun 30, 00:00 UTC · Jun 30, 2024MalwareCVE-2024-5805CVE-2024-5806CVE-2024-527660
Modular Malware Boolka’s BMANAGER Trojan ExposedInfosecurity Magazine·Jun 24, 17:15 UTC · Jun 24, 2024Malware30
Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS AttacksThe Hacker News·Jun 8, 17:28 UTC · Jun 8, 2024MalwareCVE-2023-3324660