Search: “Shell”

244 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1273 Vulnerability 1007 Exploit / PoC 646 Ransomware 628 Threat actor 365 Data breach 165 Phishing & fraud 115 Policy & legal 75 Industry 61 AI safety & security 33 Research 28 Advisory 25 AI tools & infra 17 Tools 17

SeverityAll critical 1753 high 1710 medium 739 low 208 info 68

Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Malware CVE-2025-68613 CVE-2025-7544 CVE-2023-46604+2 CVEs

60

Iranian Hackers Maintain 2-Year Access to Middle East CNI via VPN Flaws and Malware

The Hacker NewsJul 29, 09:05 UTC · Jul 29, 2025Malware CVE-2023-38950 CVE-2023-38951 CVE-2023-38952

60

RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features

The Hacker NewsMar 31, 09:11 UTC · Mar 31, 2025Malware CVE-2025-0282

60

BeyondTrust Flaw Used for Web Shells, Backdoors, and Data Exfiltration

The Hacker NewsMay 5, 14:09 UTC · May 5, 2026Malware in the wildCVE-2026-1731 CVE-2024-12356

60

48 Malicious npm Packages Found Deploying Reverse Shells on Developer Systems

The Hacker NewsNov 6, 16:38 UTC · Nov 6, 2023Malware1

55

Microsoft Uncovers New XCSSET macOS Malware Variant with Advanced Obfuscation Tactics

The Hacker NewsMar 12, 06:55 UTC · Mar 12, 2025Malware CVE-2021-30713

60

Week in review: Web shell malware, client-side web security, phishers exploit Zoom and Webex

Help Net SecurityJun 18, 12:47 UTC · Jun 18, 2020Malware

55

North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware

The Hacker NewsDec 10, 07:33 UTC · Dec 10, 2025Malware CVE-2025-55182

60

ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware Waves

The Hacker NewsNov 21, 06:45 UTC · Nov 21, 2025Malware CVE-2025-61757 CVE-2025-11243

60

Reptile Rootkit employed in attacks against Linux systems in South Korea

Security AffairsAug 5, 20:19 UTC · Aug 5, 2023Malware CVE-2022-41328

60

Hackers are abusing IIS extensions to establish covert backdoors

Security AffairsJul 27, 20:18 UTC · Jul 27, 2022Malware

55

React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple Sectors

The Hacker NewsDec 11, 04:19 UTC · Dec 11, 2025Malware CVE-2025-55182

60

Google, Mandiant expose malware and zero

Security AffairsOct 13, 08:35 UTC · Oct 13, 2025Malware in the wildCVE-2025-61882

60

CISA reveals new malware variant used on compromised Ivanti Connect Secure devices

Help Net SecurityApr 2, 08:43 UTC · Apr 2, 2025Malware in the wildCVE-2025-0282

60

CISA warns of RESURGE malware exploiting Ivanti flaw

Security AffairsMar 30, 23:13 UTC · Mar 30, 2025Malware in the wildCVE-2025-0282 CVE-2025-0283

60

Mercenary mayhem: A technical analysis of Intellexa's PREDATOR spyware

Cisco TalosMay 25, 12:02 UTC · May 25, 2023Malware CVE-2021-37973 CVE-2021-37976 CVE-2021-38000+2 CVEs

60

Researchers Discover Hidden Backdoor in 20 Router Models Allowing Remote Root Access

Security AffairsAug 7, 10:17 UTC · Aug 7, 2026Malware

55

Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks

The Hacker NewsJun 2, 08:55 UTC · Jun 2, 2026Malware

55

China-Linked Hackers Use TernDoor, PeerTime, BruteEntry in South American Telecom Attacks

The Hacker NewsMar 6, 08:22 UTC · Mar 6, 2026Malware

55

UAT-9244 targets South American telecommunication providers with three new malware implants

Cisco TalosMar 5, 11:00 UTC · Mar 5, 2026Malware

55

Flax Typhoon APT exploited ArcGIS server for over a year as a backdoor

Security AffairsOct 15, 07:11 UTC · Oct 15, 2025Malware

55

SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkit

Help Net SecurityAug 5, 15:29 UTC · Aug 5, 2025Malware CVE-2021-20035 CVE-2021-20039 CVE-2024-38475+1 CVEs

60

JPCERT warns of DslogdRAT malware deployed in Ivanti Connect Secure

Security AffairsApr 25, 17:56 UTC · Apr 25, 2025Malware in the wildCVE-2025-0282

60

New version of MysterySnail RAT and lightweight MysteryMonoSnail backdoor

Kaspersky SecurelistApr 17, 08:00 UTC · Apr 17, 2025Malware CVE-2021-40449

60

Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and Rootkits

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2025Malware CVE-2025-21590

60

New Ballista Botnet spreads using TP

Security AffairsMar 12, 09:51 UTC · Mar 12, 2025Malware CVE-2023-1389

60

Juniper enterprise routers backdoored via "magic packet" malware

Help Net SecurityJan 23, 00:00 UTC · Jan 23, 2025Malware

55

Multiple malware used in attacks exploiting Ivanti VPN flaws

Security AffairsFeb 1, 10:53 UTC · Feb 1, 2024Malware in the wildCVE-2023-46805 CVE-2024-21887 CVE-2024-21888+1 CVEs

60

Reptile Rootkit: Advanced Linux Malware Targeting South Korean Systems

The Hacker NewsAug 7, 09:56 UTC · Aug 7, 2023Malware in the wild

60

New persistent backdoor used in attacks on Barracuda ESG appliances

Help Net SecurityJul 31, 00:00 UTC · Jul 31, 2023Malware CVE-2023-2868

60

CISA publishes malware analysis reports on samples targeting Pulse Secure devices

Security AffairsAug 26, 22:32 UTC · Aug 26, 2021Malware CVE-2021-22893 CVE-2021-22937 CVE-2020-8260

60

New Mirai botnet variant appears in the threat landscape

Security AffairsMar 16, 21:54 UTC · Mar 16, 2021Malware CVE-2020-25506 CVE-2021-27561 CVE-2021-27562+3 CVEs

60

EvilGnome: A New Backdoor Implant Spies On Linux Desktop Users

The Hacker NewsJul 17, 14:32 UTC · Jul 17, 2019Malware

55

Five Eyes Intelligence agencies warn of popular hacking tools

Security AffairsOct 12, 12:54 UTC · Oct 12, 2018Malware

55

The serpent’s tongue: Luring the Python out of its den

Cisco TalosJul 14, 10:00 UTC · Jul 14, 2026Malware1

55

Chinese APT CL-STA-1062 Expands Attacks on Southeast Asian Critical Infrastructure With Custom Malware

Security AffairsJun 26, 17:16 UTC · Jun 26, 2026Malware

55

Dissecting UAT-8099: New persistence mechanisms and regional focus

Cisco TalosJan 29, 11:00 UTC · Jan 29, 2026Malware

55

SonicWall adds rootkit removal capabilities to the SMA 100 series

Help Net SecurityOct 9, 13:10 UTC · Oct 9, 2025Malware in the wildCVE-2024-38475 CVE-2025-40599

60

UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors

The Hacker NewsSep 25, 15:04 UTC · Sep 25, 2025Malware CVE-2023-46805 CVE-2024-21887

60

Operation CargoTalon targets Russia’s aerospace with EAGLET malware,

Security AffairsJul 25, 22:27 UTC · Jul 25, 2025Malware

55