Search: “web shells”

122 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 549 Vulnerability 513 Ransomware 366 Exploit / PoC 352 Threat actor 212 Data breach 107 Phishing & fraud 40 Policy & legal 27 Advisory 16 Industry 13 AI safety & security 9 Tools 7 Research 6 AI tools & infra 4

SeverityAll critical 1001 high 847 medium 293 low 60 info 25

Iranian Hackers Maintain 2-Year Access to Middle East CNI via VPN Flaws and Malware

The Hacker NewsJul 29, 09:05 UTC · Jul 29, 2025Malware CVE-2023-38950 CVE-2023-38951 CVE-2023-38952

60

RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features

The Hacker NewsMar 31, 09:11 UTC · Mar 31, 2025Malware CVE-2025-0282

60

Week in review: Web shell malware, client-side web security, phishers exploit Zoom and Webex

Help Net SecurityJun 18, 12:47 UTC · Jun 18, 2020Malware

55

BeyondTrust Flaw Used for Web Shells, Backdoors, and Data Exfiltration

The Hacker NewsMay 5, 14:09 UTC · May 5, 2026Malware in the wildCVE-2026-1731 CVE-2024-12356

60

Hackers are abusing IIS extensions to establish covert backdoors

Security AffairsJul 27, 20:18 UTC · Jul 27, 2022Malware

55

Multiple malware used in attacks exploiting Ivanti VPN flaws

Security AffairsFeb 1, 10:53 UTC · Feb 1, 2024Malware in the wildCVE-2023-46805 CVE-2024-21887 CVE-2024-21888+1 CVEs

60

Flax Typhoon APT exploited ArcGIS server for over a year as a backdoor

Security AffairsOct 15, 07:11 UTC · Oct 15, 2025Malware

55

Five Eyes Intelligence agencies warn of popular hacking tools

Security AffairsOct 12, 12:54 UTC · Oct 12, 2018Malware

55

China's Volt Typhoon botnet has re

Security AffairsNov 13, 19:16 UTC · Nov 13, 2024Malware CVE-2024-39717

60

CISA reveals new malware variant used on compromised Ivanti Connect Secure devices

Help Net SecurityApr 2, 08:43 UTC · Apr 2, 2025Malware in the wildCVE-2025-0282

60

Alert: 'Effluence' Backdoor Persists Despite Patching Atlassian Confluence Servers

The Hacker NewsNov 10, 08:58 UTC · Nov 10, 2023Malware CVE-2023-22515 CVE-2023-22518

60

Google, Mandiant expose malware and zero

Security AffairsOct 13, 08:35 UTC · Oct 13, 2025Malware in the wildCVE-2025-61882

60

DOJ's Sandworm operation raises questions about how far feds can go to disarm botnets

CyberScoopApr 8, 19:30 UTC · Apr 8, 2022Malware

55

CISA warns of RESURGE malware exploiting Ivanti flaw

Security AffairsMar 30, 23:13 UTC · Mar 30, 2025Malware in the wildCVE-2025-0282 CVE-2025-0283

60

JPCERT warns of DslogdRAT malware deployed in Ivanti Connect Secure

Security AffairsApr 25, 17:56 UTC · Apr 25, 2025Malware in the wildCVE-2025-0282

60

Dissecting UAT-8099: New persistence mechanisms and regional focus

Cisco TalosJan 29, 11:00 UTC · Jan 29, 2026Malware

55

Chinese APT CL-STA-1062 Expands Attacks on Southeast Asian Critical Infrastructure With Custom Malware

Security AffairsJun 26, 17:16 UTC · Jun 26, 2026Malware

55

NCSC Warns Against Chinese Cyber Attacks on Critical Infrastructure

Infosecurity MagazineMay 25, 16:30 UTC · May 25, 2023Malware

55

ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More

The Hacker NewsOct 3, 04:59 UTC · Oct 3, 2025Malware CVE-2024-3400 CVE-2017-7921

60

Charming Kitten's New BellaCiao Malware Discovered in Multi

The Hacker NewsApr 27, 07:58 UTC · Apr 27, 2023Malware

55

New ShroudedSnooper actor targets telecommunications firms in the Middle East with novel Implants

Cisco TalosSep 19, 12:00 UTC · Sep 19, 2023Malware

55

Iranian Hackers Exploiting VPN Flaws to Backdoor Organizations Worldwide

The Hacker NewsFeb 18, 15:13 UTC · Feb 18, 2020Malware CVE-2019-11510 CVE-2019-1579 CVE-2018-13379+1 CVEs

60

Hackers infect ISPs with malware that steals customers’ credentials

Ars Technica · SecurityAug 27, 14:00 UTC · Aug 27, 2024Malware CVE-2024-39717

60

A New SolarWinds Flaw Likely Had Let Hackers Install SUPERNOVA Malware

The Hacker NewsDec 28, 06:14 UTC · Dec 28, 2020Malware CVE-2020-10148

60

Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign

The Hacker NewsJun 26, 16:21 UTC · Jun 26, 2026Malware

55

⚡ Weekly Recap: iOS Zero-Days, 4Chan Breach, NTLM Exploits, WhatsApp Spyware & More

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Malware in the wildCVE-2025-24054 CVE-2024-43451 CVE-2025-31200+7 CVEs1

60

New ToddyCat Hacker Group on Experts' Radar After Targeting MS Exchange Servers

The Hacker NewsJun 23, 10:34 UTC · Jun 23, 2022Malware

55

Mass-Exploitation Campaign Targets Citrix NetScalers With Backdoors

Infosecurity MagazineAug 16, 17:00 UTC · Aug 16, 2023Malware CVE-2023-3519

60

Experts warn of malware campaign targeting WP

Security AffairsApr 26, 13:40 UTC · Apr 26, 2024Malware CVE-2024-279561

60

BRICKSTORM backdoor exposed: CISA warns of advanced China

Security AffairsDec 5, 11:03 UTC · Dec 5, 2025Malware

55

Google warns of Brickstorm backdoor targeting U.S. legal and tech sectors

Security AffairsSep 26, 07:04 UTC · Sep 26, 2025Malware

55

UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors

The Hacker NewsSep 25, 15:04 UTC · Sep 25, 2025Malware CVE-2023-46805 CVE-2024-21887

60

⚡ Weekly Recap: USB Malware, React2Shell, WhatsApp Worms, AI IDE Bugs & More

The Hacker NewsDec 9, 04:05 UTC · Dec 9, 2025Malware CVE-2025-55182 CVE-2025-6389 CVE-2025-66516+19 CVEs

60

ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Stories

The Hacker NewsApr 2, 15:07 UTC · Apr 2, 2026Malware CVE-2026-2699 CVE-2026-2701

60

AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials

The Hacker NewsMar 21, 12:48 UTC · Mar 21, 2024Malware CVE-2021-41773 CVE-2017-9841 CVE-2018-151331

60

⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462 CVE-2025-32463 CVE-2025-20309+23 CVEs

60

Mirai Botnet targeting OFBiz Servers Vulnerable to Directory Traversal

The Hacker NewsAug 2, 17:14 UTC · Aug 2, 2024Malware in the wildCVE-2024-32213

60

Days before a report, Chinese hackers removed malware from infected networks

The RecordDec 12, 00:00 UTC · Dec 12, 2022Malware

55

Earth Lusca expands its arsenal with SprySOCKS Linux malware

Security AffairsSep 19, 07:52 UTC · Sep 19, 2023Malware CVE-2022-40684 CVE-2022-39952 CVE-2021-22205+6 CVEs1

60

ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year

The Hacker NewsApr 9, 16:23 UTC · Apr 9, 2026Malware CVE-2024-32114 CVE-2026-34197 CVE-2022-416781

60