Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 TunnelingThe Hacker News·Sep 3, 04:55 UTC · Sep 3, 2025Ransomware157
Researchers Find VS Code Flaw Allowing Attackers to Republish Deleted Extensions Under Same NamesThe Hacker News·Aug 29, 03:58 UTC · Aug 29, 2025Ransomware157
GitHub says internal repositories were impacted in poisoned VS Code extension attackCyberScoop·May 20, 16:59 UTC · May 20, 2026Ransomware60
Microsoft Warns Developers of Fake Next.js Job Repos Delivering InThe Hacker News·Mar 10, 05:53 UTC · Mar 10, 2026Ransomware57
⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach WidensThe Hacker News·Oct 27, 14:16 UTC · Oct 27, 2025Ransomware in the wildCVE-2025-59287CVE-2025-54957CVE-2025-6950+21 CVEs60
⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AIThe Hacker News·Jun 2, 03:39 UTC · Jun 2, 2026Ransomware in the wildCVE-2026-0257CVE-2026-8732CVE-2026-27771+31 CVEs60
Vibe-Coded Malicious VS Code Extension Found with BuiltThe Hacker News·Nov 7, 09:00 UTC · Nov 7, 2025Ransomware157
Malicious VS Code Extensions Exploit Name Reuse LoopholeInfosecurity Magazine·Aug 28, 14:00 UTC · Aug 28, 2025Ransomware157
Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain RisksThe Hacker News·Oct 31, 07:59 UTC · Oct 31, 2025Ransomware60
ThreatsDay Bulletin: $176M Crypto Fine, Hacking Formula 1, Chromium Vulns, AI Hijack & MoreThe Hacker News·Oct 23, 14:22 UTC · Oct 23, 2025Ransomware57
Red Hat removes tainted packages after software pipeline compromiseThe Record·Jun 18, 00:00 UTC · Jun 18, 2026Ransomware57
Velociraptor leveraged in ransomware attacksCisco Talos·Oct 9, 10:00 UTC · Oct 9, 2025RansomwareCVE-2025-626460
GitHub Confirms Breach of Internal RepositoriesInfosecurity Magazine·May 20, 10:45 UTC · May 20, 2026Ransomware60
Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR ToolsThe Hacker News·Apr 6, 10:07 UTC · Apr 6, 2026Ransomware57
Matrix Push C2 Uses Browser Notifications for Fileless, CrossThe Hacker News·Dec 9, 08:03 UTC · Dec 9, 2025RansomwareCVE-2025-5928760
Legit tools, illicit uses: Velociraptor, Nezha turned against victimsHelp Net Security·Oct 15, 11:50 UTC · Oct 15, 2025RansomwareCVE-2025-626460
VSCode Marketplace Removes Two Extensions Deploying EarlyThe Hacker News·Mar 24, 11:10 UTC · Mar 24, 2025Ransomware57
Hackers Can Abuse Visual Studio Marketplace to Target Developers with Malicious ExtensionsThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2023Ransomware57
North Korea-linked Zinc APT posed as Samsung recruiters to target security firmsSecurity Affairs·Nov 28, 12:11 UTC · Nov 28, 2021RansomwareCVE-2017-1623860
All gas, no brakes: Time to come to AI churchCisco Talos·Feb 5, 19:00 UTC · Feb 5, 2026Ransomware in the wild60
Microsoft Fixes 71 Bugs Including Three Zero DaysInfosecurity Magazine·Mar 9, 09:00 UTC · Mar 9, 2022Ransomware in the wildCVE-2022-24512CVE-2022-24459CVE-2022-21990+3 CVEs160
Week in review: 8 free cybersecurity docus, vulnerable Intel Core processors, Black Hat USA 2023Help Net Security·Aug 13, 00:00 UTC · Aug 13, 2023RansomwareCVE-2023-39143CVE-2023-38180CVE-2022-4098260
From Third-Party Vendors to U.S. Tariffs: The New Cyber Risks Facing Supply ChainsThe Hacker News·Jul 14, 04:56 UTC · Jul 14, 2026Ransomware160
Swimlane partners with Dragos to automate threat detection across both IT and OT environmentsHelp Net Security·Mar 26, 00:00 UTC · Mar 26, 2024Ransomware60
The source code of the 2020 variant of HelloKitty ransomware was leaked on cybercrime forumSecurity Affairs·Oct 9, 13:46 UTC · Oct 9, 2023RansomwareCVE-2021-20016CVE-2021-20021CVE-2021-20022+1 CVEs60
Cybercriminals camouflaging threats as AI tool installersCisco Talos·May 29, 10:00 UTC · May 29, 2025Ransomware57
PetrWrap, a Petya-based ransomware, was used in targeted attacksSecurity Affairs·Jun 27, 15:59 UTC · Jun 27, 2017Ransomware57
Dridex gang follows trends, also created FriedEx ransomwareHelp Net Security·Jun 26, 21:21 UTC · Jun 26, 2018Ransomware60
PetrWrap: the new Petya-based ransomware used in targeted attacksKaspersky Securelist·Mar 14, 08:59 UTC · Mar 14, 2017Ransomware57
Exploiting stolen session cookies to bypass multi-factor authentication (MFA)Help Net Security·Aug 19, 00:00 UTC · Aug 19, 2022Ransomware57
Dridex banking Trojan and the FriedEx ransomware were developed by the same groupSecurity Affairs·Jan 29, 21:20 UTC · Jan 29, 2018Ransomware57
Microsoft Fixes Seven ZeroInfosecurity Magazine·May 14, 09:20 UTC · May 14, 2025Ransomware in the wildCVE-2025-32701CVE-2025-32709CVE-2025-30397+7 CVEs60
AI, election security headline discussions at Black Hat and DEF CONCisco Talos·Aug 15, 18:00 UTC · Aug 15, 2024Ransomware in the wildCVE-2024-38184CVE-2024-38185CVE-2024-38186+3 CVEs160
Locky: the encryptor taking the world by stormKaspersky Securelist·Apr 6, 08:59 UTC · Apr 6, 2016Ransomware57
Extortion hacks have completely rattled the entertainment industryCyberScoop·Jul 6, 19:27 UTC · Jul 6, 2017Ransomware in the wild60