GootLoader Malware Uses 500–1,000 Concatenated ZIP Archives to Evade DetectionThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Malware55
Spear Phishing Attacks Target Organizations in Ukraine, Payloads Include the Document Stealer OutSteel and the Downloader SaintBotPalo Alto Unit 42·Jun 5, 23:28 UTC · Jun 5, 2024MalwareCVE-2017-1188260
⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and MoreThe Hacker News·Jun 23, 03:40 UTC · Jun 23, 2026Malware in the wildCVE-2026-24858CVE-2025-59718CVE-2025-59719+1 CVEs60
ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New StoriesThe Hacker News·Jun 4, 14:00 UTC · Jun 4, 2026Malware in the wildCVE-2026-20230160
Ghostwriter group resumes attacks on Ukrainian Government targetsSecurity Affairs·May 15, 10:38 UTC · May 15, 2026Malware55
North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT MalwareThe Hacker News·Dec 10, 07:33 UTC · Dec 10, 2025MalwareCVE-2025-5518260
JackFix Uses Fake Windows Update Pop-Ups on Adult Sites to Deliver Multiple StealersThe Hacker News·Dec 2, 05:40 UTC · Dec 2, 2025Malware55
Hackers Abuse Blockchain Smart Contracts to Spread Malware via Infected WordPress SitesThe Hacker News·Oct 17, 04:33 UTC · Oct 17, 2025Malware55
⚡ Weekly Recap: Chrome 0-Day, 7.3 Tbps DDoS, MFA Bypass Tricks, Banking Trojan and MoreThe Hacker News·Jun 30, 13:01 UTC · Jun 30, 2025MalwareCVE-2025-2783CVE-2025-34509CVE-2025-34510+17 CVEs60
⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & MoreThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-3909CVE-2026-3910CVE-2026-3913+40 CVEs260
AI Could Generate 10,000 Malware Variants, Evading Detection in 88% of CaseThe Hacker News·Dec 24, 05:50 UTC · Dec 24, 2024Malware in the wild160
4-year campaign backdoored iPhones using possibly the most advanced exploit everArs Technica · Security·Dec 27, 17:03 UTC · Dec 27, 2023MalwareCVE-2023-32434CVE-2023-32435CVE-2023-38606+1 CVEs160
Experts observed Magecart 5 hacker group targeting L7 RoutersSecurity Affairs·Sep 27, 12:37 UTC · Sep 27, 2019Malware55
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and MoreThe Hacker News·Jun 29, 14:42 UTC · Jun 29, 2026Malware in the wildCVE-2026-43503CVE-2026-12569CVE-2026-47729+19 CVEs60
EtherRAT Distribution Spoofing Administrative Tools via GitHub FacadesThe Hacker News·Jun 7, 15:47 UTC · Jun 7, 2026Malware155
⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and MoreThe Hacker News·May 11, 12:36 UTC · May 11, 2026Malware in the wildCVE-2026-6973CVE-2026-030060
Transparent COM instrumentation for malware analysisCisco Talos·Mar 18, 10:00 UTC · Mar 18, 2026Malware55
Dissecting UAT-8099: New persistence mechanisms and regional focusCisco Talos·Jan 29, 11:00 UTC · Jan 29, 2026Malware55
GootLoader uses malformed ZIP files to bypass security controlsSecurity Affairs·Jan 18, 18:22 UTC · Jan 18, 2026Malware55
ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More StoriesThe Hacker News·Jan 10, 14:25 UTC · Jan 10, 2026MalwareCVE-2025-59295CVE-2025-10294CVE-2025-5923060
RomCom Uses SocGholish Fake Update Attacks to Deliver Mythic Agent MalwareThe Hacker News·Nov 26, 08:28 UTC · Nov 26, 2025Malware55
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & MoreThe Hacker News·Nov 24, 12:32 UTC · Nov 24, 2025Malware in the wildCVE-2025-58034CVE-2025-64446CVE-2025-13223+12 CVEs60
⚡ Weekly Recap: iPhone Spyware, Microsoft 0-Day, TokenBreak Hack, AI Data Leaks and MoreThe Hacker News·Oct 28, 08:29 UTC · Oct 28, 2025Malware in the wildCVE-2025-43200CVE-2025-32711CVE-2025-33053+24 CVEs260
Here’s how carefully concealed backdoor in fake AWS files escaped mainstream noticeArs Technica · Security·Jul 15, 00:00 UTC · Jul 15, 2024Malware55
Researchers stop ‘credible takeover attempt’ similar to XZ Utils backdoor incidentThe Record·Apr 15, 19:44 UTC · Apr 15, 2024Malware55
Researchers Discover New Linux Malware Targeting WordPress SitesInfosecurity Magazine·Jan 3, 16:10 UTC · Jan 3, 2023Malware55
⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and MoreThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Malware in the wildCVE-2026-11645CVE-2026-2441CVE-2026-3909+23 CVEs160
Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting InternetThe Hacker News·Apr 8, 11:44 UTC · Apr 8, 2026Malware in the wild60
⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & MoreThe Hacker News·Mar 26, 15:38 UTC · Mar 26, 2026Malware in the wildCVE-2026-33017CVE-2026-2013160
TA558 Uses AI-Generated Scripts to Deploy Venom RAT in Brazil Hotel AttacksThe Hacker News·Sep 17, 18:30 UTC · Sep 17, 2025MalwareCVE-2017-019960
Malware Complexity Jumps 127% in Six MonthsInfosecurity Magazine·Aug 6, 14:00 UTC · Aug 6, 2025Malware55
AI Cloaking Tools Enable Harder-to-Detect CyberInfosecurity Magazine·Jul 17, 14:00 UTC · Jul 17, 2025Malware55
⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and MoreThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462CVE-2025-32463CVE-2025-20309+23 CVEs60
⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and MoreThe Hacker News·May 7, 10:33 UTC · May 7, 2025MalwareCVE-2025-29927CVE-2025-23120CVE-2024-56346+13 CVEs60
DarkWatchman, Sheriff Malware Hit Russia and Ukraine with Stealth and NationThe Hacker News·May 1, 09:27 UTC · May 1, 2025Malware55
Multi-Stage Malware Attack Uses .JSE and PowerShell to Deploy Agent Tesla and XLoaderThe Hacker News·Apr 18, 12:03 UTC · Apr 18, 2025MalwareCVE-2021-4044960
Cryptomining Malware Found in Popular Open Source PackagesInfosecurity Magazine·Dec 23, 16:30 UTC · Dec 23, 2024Malware55
Banking Trojan Techniques: How Financially Motivated Malware Became InfrastructurePalo Alto Unit 42·Jun 5, 17:45 UTC · Jun 5, 2024Malware55