Search: “shellcode”

51 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 93 Ransomware 51 Threat actor 44 Malware 36 Vulnerability 34 Data breach 12 Phishing & fraud 2 Advisory 1

SeverityAll critical 210 high 59 medium 4 low 0 info 0

Magnitude exploit kit

Kaspersky SecurelistJun 24, 10:00 UTC · Jun 24, 2020Ransomware in the wildCVE-2018-8174 CVE-2018-8653 CVE-2019-1367+3 CVEs

60

The curious case of a CVE-2012

Kaspersky SecurelistAug 6, 13:11 UTC · Aug 6, 2013Ransomware CVE-2012-0158

60

Sodin ransomware exploits Windows vulnerability and processor architecture

Kaspersky SecurelistJul 3, 10:00 UTC · Jul 3, 2019Ransomware CVE-2018-8453

60

Modified Zyklon and plugins from India

Cisco TalosMay 23, 13:05 UTC · May 23, 2017Ransomware CVE-2013-3906 CVE-2012-1856

60

China-Linked Hackers Exploit VMware ESXi Zero

The Hacker NewsJan 12, 16:25 UTC · Jan 12, 2026Ransomware in the wildCVE-2025-22224 CVE-2025-22225 CVE-2025-22226

60

Most interesting IR cases in 2023: insider threats and more

Kaspersky SecurelistSep 3, 11:01 UTC · Sep 3, 2024Ransomware

60

Breaking the silence

Cisco TalosDec 8, 19:38 UTC · Dec 8, 2022Ransomware CVE-2022-31199

60

August 2025 CVE Landscape

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088 CVE-2025-7775 CVE-2025-57819+5 CVEs

60

First Cyber Attack 'Mass Exploiting' BlueKeep RDP Flaw Spotted in the Wild

The Hacker NewsNov 3, 11:34 UTC · Nov 3, 2019Ransomware CVE-2019-0708

60

Microsoft warns of more disruptive BlueKeep Attacks

Security AffairsNov 8, 13:28 UTC · Nov 8, 2019Ransomware in the wildCVE-2019-0708

60

ThrottleStop driver abused to terminate AV processes

Kaspersky SecurelistAug 6, 10:00 UTC · Aug 6, 2025Ransomware CVE-2025-7771

60

Introducing ToyMaker, an initial access broker working in cahoots with double extortion gangs

Cisco TalosApr 23, 10:00 UTC · Apr 23, 2025Ransomware

60

Exploring vulnerable Windows drivers

Cisco TalosDec 19, 11:04 UTC · Dec 19, 2024Ransomware CVE-2022-3699

60

Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux Kernels

The Hacker NewsDec 2, 16:30 UTC · Dec 2, 2024Ransomware CVE-2023-40238

60

Andariel deploys DTrack and Maui ransomware

Kaspersky SecurelistAug 9, 14:25 UTC · Aug 9, 2022Ransomware CVE-2017-10271

60

Threat Brief: Office Documents Can Be Dangerous (But We’ll Continue to Use Them Anyway)

Palo Alto Unit 42Sep 21, 18:41 UTC · Sep 21, 2020Ransomware in the wildCVE-2018-4878 CVE-2017-11882 CVE-2018-0802+4 CVEs1

60

Angler Exploit Kit is able to bypass Microsoft EMET defense

Security AffairsApr 14, 16:31 UTC · Apr 14, 2018Ransomware

60

A Dissection of the “EsteemAudit” Windows Remote Desktop Exploit

Palo Alto Unit 42May 31, 12:00 UTC · May 31, 2017Ransomware CVE-2017-9073

60

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply

The Hacker NewsAug 10, 15:03 UTC · Aug 10, 2026Ransomware in the wildCVE-2026-34348 CVE-2026-18497 CVE-2026-63508+43 CVEs1

60

ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories

The Hacker NewsJul 30, 15:25 UTC · Jul 30, 2026Ransomware CVE-2026-33017 CVE-2026-21858 CVE-2025-68613+5 CVEs

60

⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More

The Hacker NewsJul 6, 13:02 UTC · Jul 6, 2026Ransomware CVE-2026-48276 CVE-2026-48283 CVE-2026-48277+69 CVEs1

60

OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Ransomware CVE-2026-33634

60

All gas, no brakes: Time to come to AI church

Cisco TalosFeb 5, 19:00 UTC · Feb 5, 2026Ransomware in the wild

60

CISA confirms exploitation of VMware ESXi flaw by ransomware attackers

Help Net SecurityFeb 5, 00:00 UTC · Feb 5, 2026Ransomware in the wildCVE-2025-22225 CVE-2025-22224 CVE-2025-22226

60

CVE-2025-22225 in VMware ESXi now used in active ransomware attacks

Security AffairsFeb 4, 22:02 UTC · Feb 4, 2026Ransomware in the wildCVE-2025-22225 CVE-2025-22226 CVE-2025-22224

60

Chinese-speaking hackers exploited ESXi zero

Security AffairsJan 9, 00:06 UTC · Jan 9, 2026Ransomware in the wildCVE-2025-22226 CVE-2025-22224 CVE-2025-22225

60

SonicWall SSL VPN Flaw and Misconfigurations Actively Exploited by Akira Ransomware Hackers

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2025Ransomware in the wildCVE-2024-40766

60

Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched Systems

The Hacker NewsJul 28, 15:57 UTC · Jul 28, 2025Ransomware in the wildCVE-2025-49706 CVE-2025-49704

60

Hackers Exploit Apache HTTP Server Flaw to Deploy Linuxsys Cryptocurrency Miner

The Hacker NewsJul 21, 06:31 UTC · Jul 21, 2025Ransomware CVE-2021-41773 CVE-2024-36401 CVE-2023-22527+5 CVEs

60

FIN7, FIN8, and Others Use Ragnar Loader for Persistent Access and Ransomware Operations

The Hacker NewsMar 8, 11:50 UTC · Mar 8, 2025Ransomware

60

Iranian APT UNC1860 Linked to MOIS Facilitates Cyber Intrusions in Middle East

The Hacker NewsSep 20, 12:44 UTC · Sep 20, 2024Ransomware CVE-2019-0604

60

Hackers Weaponize Windows Flaw to Deploy Crypto

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2024Ransomware CVE-2023-36025

60

Analysis of Cuba ransomware gang activity and tooling

Kaspersky SecurelistSep 11, 10:00 UTC · Sep 11, 2023Ransomware CVE-2021-31207 CVE-2021-34473 CVE-2021-34523+8 CVEs

60

Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits

The Hacker NewsSep 6, 07:46 UTC · Sep 6, 2023Ransomware in the wildCVE-2023-36844 CVE-2023-36845 CVE-2023-36846+3 CVEs

60

Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2023Ransomware in the wildCVE-2023-28252 CVE-2022-24521 CVE-2022-37969+6 CVEs

60

2022 Top Five Immediate Threats in Geopolitical Context

The Hacker NewsDec 28, 16:24 UTC · Dec 28, 2022Ransomware1

60

Crimeware and financial cyberthreats in 2023

Kaspersky SecurelistNov 22, 08:00 UTC · Nov 22, 2022Ransomware

60

Google Uncovers 'Initial Access Broker' Working with Conti Ransomware Gang

The Hacker NewsJul 21, 13:32 UTC · Jul 21, 2022Ransomware CVE-2021-40444

60

AvosLocker Ransomware Variant Using New Trick to Disable Antivirus Protection

The Hacker NewsMay 3, 05:50 UTC · May 3, 2022Ransomware CVE-2021-40539 CVE-2021-44228

60

The TTPs of Conti's initial access broker

Help Net SecurityMar 18, 00:00 UTC · Mar 18, 2022Ransomware CVE-2021-40444

60