⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and MoreThe Hacker News·Jun 29, 14:42 UTC · Jun 29, 2026Malware in the wildCVE-2026-43503CVE-2026-12569CVE-2026-47729+19 CVEs60
First Android Malware Found Exploiting Dirty COW Linux Flaw to Gain Root PrivilegesThe Hacker News·Sep 26, 13:57 UTC · Sep 26, 2017Malware in the wildCVE-2016-5195CVE-2015-180560
⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain ChaosThe Hacker News·May 26, 04:39 UTC · May 26, 2026Malware in the wildCVE-2026-46333CVE-2026-41091CVE-2026-45498+31 CVEs60
SSHStalker Botnet Uses IRC C2 to Control Linux Systems via Legacy Kernel ExploitsThe Hacker News·Feb 11, 09:58 UTC · Feb 11, 2026MalwareCVE-2009-2692CVE-2009-2698CVE-2010-3849+6 CVEs60
ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New StoriesThe Hacker News·Jun 4, 14:00 UTC · Jun 4, 2026Malware in the wildCVE-2026-20230160
Mobile Bootloaders From Top Manufacturers Found Vulnerable to Persistent ThreatsThe Hacker News·Sep 6, 08:11 UTC · Sep 6, 2017MalwareCVE-2014-979860
Reptile Rootkit employed in attacks against Linux systems in South KoreaSecurity Affairs·Aug 5, 20:19 UTC · Aug 5, 2023MalwareCVE-2022-4132860
New Advanced Linux VoidLink Malware Targets Cloud and container EnvironmentsThe Hacker News·Jan 19, 08:54 UTC · Jan 19, 2026Malware55
Hackers Deploy Linux Rootkits via Cisco SNMP Flaw in 'Zero Disco' AttacksThe Hacker News·Oct 17, 04:35 UTC · Oct 17, 2025MalwareCVE-2025-20352CVE-2017-388160
Ebury botnet compromises 400,000+ Linux serversHelp Net Security·May 16, 00:00 UTC · May 16, 2024Malware55
Kunai: Open-source threat hunting tool for LinuxHelp Net Security·Feb 19, 00:00 UTC · Feb 19, 2025Malware55
⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and MoreThe Hacker News·May 11, 12:36 UTC · May 11, 2026Malware in the wildCVE-2026-6973CVE-2026-030060
Reptile Rootkit: Advanced Linux Malware Targeting South Korean SystemsThe Hacker News·Aug 7, 09:56 UTC · Aug 7, 2023Malware in the wild60
Researchers Discover Hidden Backdoor in 20 Router Models Allowing Remote Root AccessSecurity Affairs·Aug 7, 10:17 UTC · Aug 7, 2026Malware55
Google TAG shares details about exploit chains used to install commercial spywareSecurity Affairs·Mar 29, 14:20 UTC · Mar 29, 2023MalwareCVE-2022-42856CVE-2021-30900CVE-2022-3723+7 CVEs60
A new variant of the dreaded AndroRAT malware appeared in threat landscapeSecurity Affairs·Feb 13, 22:42 UTC · Feb 13, 2018MalwareCVE-2015-180560
Kaspersky Security Bulletin, January – June 2006: Malware for non Win32 platformsKaspersky Securelist·Sep 22, 18:29 UTC · Sep 22, 2006Malware55
Malware report for Q2 2024 — a quarterly reviewKaspersky Securelist·Sep 5, 07:45 UTC · Sep 5, 2024MalwareCVE-2024-309460
Cytrox's Predator Spyware Targeted Android Users with ZeroThe Hacker News·May 21, 03:11 UTC · May 21, 2022MalwareCVE-2021-37973CVE-2021-37976CVE-2021-38000+2 CVEs60
⚡ Weekly Recap: APT Campaigns, Browser Hijacks, AI Malware, Cloud Breaches and Critical CVEsThe Hacker News·May 26, 13:00 UTC · May 26, 2025MalwareCVE-2025-4427CVE-2025-4428CVE-2025-34025+7 CVEs60
ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit — and 20 More StoriesThe Hacker News·Dec 18, 12:15 UTC · Dec 18, 2025MalwareCVE-2024-3721CVE-2025-5518260
⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and MoreThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Malware in the wildCVE-2026-11645CVE-2026-2441CVE-2026-3909+23 CVEs160
ThreatsDay Bulletin: Hybrid P2P Botnet, 13-YearThe Hacker News·Apr 9, 16:23 UTC · Apr 9, 2026MalwareCVE-2024-32114CVE-2026-34197CVE-2022-41678160
Sprout: Open-source bootloader built for speed and securityHelp Net Security·Nov 13, 00:00 UTC · Nov 13, 2025Malware55
⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and MoreThe Hacker News·May 7, 10:33 UTC · May 7, 2025MalwareCVE-2025-29927CVE-2025-23120CVE-2024-56346+13 CVEs60
⚡ Weekly Recap: Nation-State Hacks, Spyware Alerts, Deepfake Malware, Supply Chain BackdoorsThe Hacker News·May 6, 05:03 UTC · May 6, 2025MalwareCVE-2025-3928CVE-2025-1976CVE-2025-46271+33 CVEs60
Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE MalwareThe Hacker News·Apr 7, 06:39 UTC · Apr 7, 2025Malware in the wildCVE-2025-22457CVE-2024-38657CVE-2025-22467+2 CVEs60
Mercenary mayhem: A technical analysis of Intellexa's PREDATOR spywareCisco Talos·May 25, 12:02 UTC · May 25, 2023MalwareCVE-2021-37973CVE-2021-37976CVE-2021-38000+2 CVEs60
Friday Squid Blogging: Climate Change Causing "Squid Bloom" along Pacific CoastSchneier on Security·Feb 11, 22:07 UTC · Feb 11, 2022Malware55
IGEL OS Workspace Edition version 11.03 offers advanced security features and signed OS partitionsHelp Net Security·Dec 13, 00:00 UTC · Dec 13, 2019Malware55
China-linked Red Menshen APT deploys stealthy BPFDoor implants in telecom networksSecurity Affairs·Mar 27, 06:16 UTC · Mar 27, 2026Malware55
Beware! Undetectable CrossRAT malware targets Windows, MacOS, and Linux systemsThe Hacker News·Jan 25, 14:10 UTC · Jan 25, 2018Malware55
Critical GRUB2 Bootloader Bug Affects Billions of Linux and Windows SystemsThe Hacker News·Jul 29, 19:50 UTC · Jul 29, 2020MalwareCVE-2020-1071360
New LABRAT Campaign Exploits GitLab Flaw for Cryptojacking and Proxyjacking ActivitiesThe Hacker News·Aug 19, 06:07 UTC · Aug 19, 2023Malware in the wildCVE-2021-22205CVE-2021-403460
New P2PInfect Botnet MIPS Variant Targeting Routers and IoT DevicesThe Hacker News·Dec 5, 05:36 UTC · Dec 5, 2023MalwareCVE-2022-054360
Critical shim bug impacts every Linux boot loader signed in the past decadeSecurity Affairs·Feb 7, 14:46 UTC · Feb 7, 2024MalwareCVE-2023-40547CVE-2023-40546CVE-2023-40548+3 CVEs60
New Glutton Malware Exploits Popular PHP Frameworks Like Laravel and ThinkPHPThe Hacker News·Dec 17, 04:40 UTC · Dec 17, 2024Malware155
China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom NetworksThe Hacker News·Apr 3, 15:06 UTC · Apr 3, 2026Malware55
Earth Lusca expands its arsenal with SprySOCKS Linux malwareSecurity Affairs·Sep 19, 07:52 UTC · Sep 19, 2023MalwareCVE-2022-40684CVE-2022-39952CVE-2021-22205+6 CVEs160