EtherRAT Distribution Spoofing Administrative Tools via GitHub FacadesThe Hacker News·Jun 7, 15:47 UTC · Jun 7, 2026Malware155
Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI CredentialsThe Hacker News·Sep 6, 11:31 UTC · Sep 6, 2025Malware55
The Trojan horse of cybercrime: Weaponizing SaaS notification pipelinesCisco Talos·Apr 7, 10:00 UTC · Apr 7, 2026Malware55
Hackers create fake GitHub profiles to deliver malware through repositoriesThe Record·Jun 14, 17:37 UTC · Jun 14, 2023Malware55
Magecart skimmer scripts hosted on GitHub infected 200+ sitesSecurity Affairs·Apr 27, 14:34 UTC · Apr 27, 2019Malware55
Malware Persistence via Telegram and GitHubSansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Malware55
Magento Developers Impersonated in Targeted GitHub Malware OperationSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Malware55
Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes WiperThe Hacker News·Mar 25, 14:32 UTC · Mar 25, 2026MalwareCVE-2026-33634160
Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for ItselfThe Hacker News·Aug 5, 07:53 UTC · Aug 5, 2026Malware55
How GitHub untangled itself from the ‘Octopus’ malware that infected 26 software projectsCyberScoop·May 29, 19:51 UTC · May 29, 2020Malware in the wild160
ConnectPOS leaked Github secrets for yearsSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Malware55
ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New StoriesThe Hacker News·May 24, 08:14 UTC · May 24, 2026MalwareCVE-2026-4579360
⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and MoreThe Hacker News·May 7, 10:33 UTC · May 7, 2025MalwareCVE-2025-29927CVE-2025-23120CVE-2024-56346+13 CVEs60
Old certificate, new signature: Open-source tools forge signature timestamps on Windows driversCisco Talos·Jul 11, 17:04 UTC · Jul 11, 2023Malware55
Hackers are spreading malware via trending TikTok challenge: reportThe Record·Jan 9, 00:00 UTC · Jan 9, 2023Malware55
⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & MoreThe Hacker News·Mar 26, 15:38 UTC · Mar 26, 2026Malware in the wildCVE-2026-33017CVE-2026-2013160
How To Automate Ticket Creation, Device Identification and Threat Triage With TinesThe Hacker News·Jul 9, 11:00 UTC · Jul 9, 2025Malware55
ThreatsDay Bulletin: Hybrid P2P Botnet, 13-YearThe Hacker News·Apr 9, 16:23 UTC · Apr 9, 2026MalwareCVE-2024-32114CVE-2026-34197CVE-2022-41678160
GlassWorm malware has resurfaced on the Open VSX registrySecurity Affairs·Nov 10, 20:06 UTC · Nov 10, 2025Malware55
Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto DevelopersThe Hacker News·Sep 4, 09:51 UTC · Sep 4, 2025Malware155
Pro-Russia group NoName057(16) targets Ukraine and NATO countriesSecurity Affairs·Jan 13, 14:50 UTC · Jan 13, 2023Malware55
The serpent’s tongue: Luring the Python out of its denCisco Talos·Jul 14, 10:00 UTC · Jul 14, 2026Malware155
North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT MalwareThe Hacker News·Dec 10, 07:33 UTC · Dec 10, 2025MalwareCVE-2025-5518260
Iranian Hackers’ Rising Interest in Targeting Android Systems With DroidJack, AndroRATRecorded Future·Aug 12, 00:00 UTC · Aug 12, 2025Malware55
What we know about the xz Utils backdoor that almost infected the worldArs Technica · Security·Apr 1, 06:55 UTC · Apr 1, 2024Malware55
Manjusaka: A Chinese sibling of Sliver and Cobalt StrikeCisco Talos·Aug 2, 12:00 UTC · Aug 2, 2022Malware55
Wormable Gitpaste-12 Botnet Returns to Target Linux Servers, IoT DevicesThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2020MalwareCVE-2020-5902CVE-2020-8816CVE-2020-10987+2 CVEs60
Massive botnet responsible for wave of DDoS attacksCyberScoop·Oct 21, 13:35 UTC · Oct 21, 2016Malware in the wild60
⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain ChaosThe Hacker News·May 26, 04:39 UTC · May 26, 2026Malware in the wildCVE-2026-46333CVE-2026-41091CVE-2026-45498+31 CVEs60
Cryptocurrency Miner and Clipper Malware Spread via SourceForge Cracked Software ListingsThe Hacker News·May 20, 08:07 UTC · May 20, 2025Malware55
PyPI Attack: ChatGPT, Claude Impersonators Deliver JarkaStealer via Python LibrariesThe Hacker News·Nov 23, 06:39 UTC · Nov 23, 2024Malware155
Hackers exploit gaping Windows loophole to give their malware kernel accessArs Technica · Security·Jul 11, 20:07 UTC · Jul 11, 2023Malware55
Popular PyPI Package 'ctx' and PHP Library 'phpass' Hijacked to Steal AWS KeysThe Hacker News·May 26, 02:35 UTC · May 26, 2022Malware155
PHP's Git Server Hacked to Insert Secret Backdoor to Its Source codeThe Hacker News·Mar 29, 10:51 UTC · Mar 29, 2021Malware55
What you can learn from Cisco Talos’ new oil pumpjack workshopCisco Talos·Feb 11, 16:02 UTC · Feb 11, 2019Malware55
Twitter and other web sites are down due to DDoS on Dyn DNS ServiceSecurity Affairs·Oct 21, 14:01 UTC · Oct 21, 2016Malware55
SkillSpector: NVIDIA's open-source security scanner for AI agent skillsHelp Net Security·Aug 3, 00:00 UTC · Aug 3, 2026Malware55
Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF RootkitThe Hacker News·Jun 12, 19:35 UTC · Jun 12, 2026Malware55
Week in review: Infostealer dropped via FortiClient EMS flaw, exploited Trend Micro Apex One flawHelp Net Security·May 31, 00:00 UTC · May 31, 2026Malware in the wildCVE-2026-45659CVE-2026-34926CVE-2026-3561660
‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supplyCyberScoop·May 12, 21:38 UTC · May 12, 2026Malware155