Search: “web shells”

366 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 549 Vulnerability 513 Ransomware 366 Exploit / PoC 352 Threat actor 212 Data breach 107 Phishing & fraud 40 Policy & legal 27 Advisory 16 Industry 13 AI safety & security 9 Tools 7 Research 6 AI tools & infra 4

SeverityAll critical 1001 high 847 medium 293 low 60 info 25

Log4Shell attacks began two weeks ago, Cisco and Cloudflare say

The RecordJan 18, 00:00 UTC · Jan 18, 2023Ransomware in the wild

60

FireEye's new software releases allow for detection and investigation of attacks against servers

Help Net SecurityAug 5, 00:00 UTC · Aug 5, 2019Ransomware

60

Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

The Hacker NewsAug 3, 16:06 UTC · Aug 3, 2026Ransomware in the wildCVE-2026-12569

60

Legit tools, illicit uses: Velociraptor, Nezha turned against victims

Help Net SecurityOct 15, 11:50 UTC · Oct 15, 2025Ransomware CVE-2025-6264

60

August 2025 CVE Landscape

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088 CVE-2025-7775 CVE-2025-57819+5 CVEs

60

The Need to Know

Cisco TalosDec 19, 16:50 UTC · Dec 19, 2025Ransomware

57

Defeating Future Threats Starts Today

Cisco TalosJan 30, 19:05 UTC · Jan 30, 2025Ransomware

57

Threat Source newsletter for April 23, 2020

Cisco TalosApr 23, 18:00 UTC · Apr 23, 2020Ransomware

60

CLR SqlShell Malware Targets MS SQL Servers for Crypto Mining and Ransomware

The Hacker NewsMay 15, 00:00 UTC · May 15, 2023Ransomware

57

⚡ Weekly Recap: Chrome 0-Day, IngressNightmare, Solar Bugs, DNS Tactics, and More

The Hacker NewsAug 19, 13:08 UTC · Aug 19, 2025Ransomware in the wildCVE-2025-2783 CVE-2025-2857 CVE-2025-1974+11 CVEs

60

⚡ Weekly Recap: Chrome 0-Day, IngressNightmare, Solar Bugs, DNS Tactics, and More

The Hacker NewsMay 17, 13:56 UTC · May 17, 2025Ransomware in the wildCVE-2025-2783 CVE-2025-2857 CVE-2025-1974+11 CVEs

60

China-linked hackers target gov agencies by exploiting known flaws

Security AffairsSep 15, 09:16 UTC · Sep 15, 2020Ransomware CVE-2020-5902 CVE-2019-19781 CVE-2019-11510+1 CVEs

60

Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird Ransomware

The Hacker NewsMay 25, 06:03 UTC · May 25, 2023Ransomware

57

Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with Babuk

Cisco TalosNov 3, 12:00 UTC · Nov 3, 2021Ransomware CVE-2021-36942

60

Database Breaches Remain the Top Cyber Threat for Organizations

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Ransomware

57

Cyber intrusion activity volume jumped 125% in H1 2021

Help Net SecurityAug 10, 00:00 UTC · Aug 10, 2021Ransomware

60

From the field to the report and back again: How incident responders can use the Year in Review

Cisco TalosApr 9, 10:00 UTC · Apr 9, 2026Ransomware

60

Linux variant of Cerber ransomware targets Atlassian servers

Security AffairsApr 17, 18:01 UTC · Apr 17, 2024Ransomware CVE-2023-22518

60

Microsoft Urges Customers to Secure On

The Hacker NewsJan 29, 05:12 UTC · Jan 29, 2023Ransomware

60

Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware

The Hacker NewsApr 18, 03:38 UTC · Apr 18, 2024Ransomware CVE-2023-22518

60

Quarterly Report: Incident Response trends in Summer 2020

Cisco TalosSep 1, 15:00 UTC · Sep 1, 2020Ransomware CVE-2019-18935

60

New LockFile gang uses ProxyShell and PetitPotam exploits

Security AffairsAug 23, 20:02 UTC · Aug 23, 2021Ransomware CVE-2021-34473 CVE-2021-34523 CVE-2021-31207

60

Initial Access Broker Involved in Log4Shell Attacks Against VMware Horizon Servers

The Hacker NewsJan 29, 06:06 UTC · Jan 29, 2022Ransomware in the wild1

60

Researchers Uncover Hacker Group Behind Organized Financial

The Hacker NewsJan 6, 04:15 UTC · Jan 6, 2022Ransomware CVE-2017-1000486 CVE-2015-7450 CVE-2010-5326

60

Hackers Are Targeting Microsoft Exchange Servers With Ransomware

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2021Ransomware in the wild

60

New Incident Report Reveals How Hive Ransomware Targets Organizations

The Hacker NewsApr 21, 10:00 UTC · Apr 21, 2022Ransomware CVE-2021-31207 CVE-2021-34523 CVE-2021-34473

60

Mass Exploitation of Exchange Server ProxShell Bugs

Infosecurity MagazineAug 24, 10:27 UTC · Aug 24, 2021Ransomware in the wildCVE-2021-34473 CVE-2021-34523 CVE-2021-31207

60

APT trends report Q3 2022

Kaspersky SecurelistNov 1, 08:53 UTC · Nov 1, 2022Ransomware

57

A Basic Timeline of the Exchange Mass-Hack

Krebs on SecurityMar 8, 16:45 UTC · Mar 8, 2021Ransomware

60

Hackers Exploit IT Monitoring Tool Centreon to Target Several French Entities

The Hacker NewsFeb 17, 05:47 UTC · Feb 17, 2021Ransomware

57

Black Kingdom Ransomware Hunting Unpatched Microsoft Exchange Servers

The Hacker NewsMar 25, 12:05 UTC · Mar 25, 2021Ransomware

57

Clop ransomware gang leaks data allegedly stolen from cybersecurity firm Qualys

Security AffairsMar 3, 23:14 UTC · Mar 3, 2021Ransomware

60

FIN11 cybercrime group is behind recent wave of attacks on FTA servers

Security AffairsFeb 23, 09:36 UTC · Feb 23, 2021Ransomware

60

FireEye Links Accellion Attacks to FIN11

Infosecurity MagazineFeb 23, 11:15 UTC · Feb 23, 2021Ransomware

60

Microsoft Links Ongoing SharePoint Exploits to Three Chinese Hacker Groups

The Hacker NewsJul 22, 16:43 UTC · Jul 22, 2025Ransomware CVE-2025-49706 CVE-2025-49704 CVE-2025-53771+1 CVEs

60

Iranian APT UNC1860 Linked to MOIS Facilitates Cyber Intrusions in Middle East

The Hacker NewsSep 20, 12:44 UTC · Sep 20, 2024Ransomware CVE-2019-0604

60

Cyber Group 'Gold Melody' Selling Compromised Access to Ransomware Attackers

The Hacker NewsSep 21, 09:11 UTC · Sep 21, 2023Ransomware CVE-2017-7504 CVE-2019-19781 CVE-2020-14750+10 CVEs

60

Storm-2603 spotted deploying ransomware on exploited SharePoint servers

Help Net SecurityAug 4, 12:44 UTC · Aug 4, 2025Ransomware in the wildCVE-2025-53770 CVE-2025-49706 CVE-2025-49704+2 CVEs1

60

Microsoft: Lace Tempest Hackers Behind Active Exploitation of MOVEit Transfer App

The Hacker NewsJun 6, 03:48 UTC · Jun 6, 2023Ransomware in the wildCVE-2023-34362

60

Hackers Exploit Accellion Zero-Days in Recent Data Theft and Extortion Attacks

The Hacker NewsFeb 23, 08:26 UTC · Feb 23, 2021Ransomware CVE-2021-27101 CVE-2021-27102 CVE-2021-27103+1 CVEs

60