Search: “beacon”

194 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 402 Ransomware 194 Vulnerability 133 Threat actor 132 Exploit / PoC 63 Data breach 54 Policy & legal 27 Industry 25 Phishing & fraud 18 Research 14 AI safety & security 10 Advisory 5 AI tools & infra 3 Tools 3

SeverityAll critical 294 high 513 medium 210 low 58 info 11

Attackers use domain fronting technique to target Myanmar with Cobalt Strike

Cisco TalosNov 16, 12:00 UTC · Nov 16, 2021Ransomware

57

Blowing Cobalt Strike Out of the Water With Memory Analysis

Palo Alto Unit 42Jun 5, 17:24 UTC · Jun 5, 2024Ransomware

57

TRM Launches Industry

Infosecurity MagazineAug 20, 16:30 UTC · Aug 20, 2025Ransomware

60

Focus on DroxiDat/SystemBC

Kaspersky SecurelistAug 10, 08:57 UTC · Aug 10, 2023Ransomware

60

Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon’s Reach to Linux and macOS

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2025Ransomware

57

Windows MSHTML 0-Day Exploited to Deploy Cobalt Strike Beacon in Targeted Attacks

The Hacker NewsNov 12, 15:17 UTC · Nov 12, 2021Ransomware CVE-2021-40444

60

China-Linked Bronze Starlight Group Targeting Gambling Sector with Cobalt Strike Beacons

The Hacker NewsJan 22, 08:28 UTC · Jan 22, 2025Ransomware

57

Threat Spotlight: GozNym

Cisco TalosSep 27, 14:26 UTC · Sep 27, 2016Ransomware

57

Sabbath Ransomware target critical infrastructure in the US and Canada

Security AffairsDec 1, 07:29 UTC · Dec 1, 2021Ransomware

60

SpearTip Finds New Diavol Ransomware Does Steal Data

Security AffairsJul 15, 17:34 UTC · Jul 15, 2021Ransomware

57

Mespinoza Ransomware Gang Calls Victims “Partners,” Attacks with Gasket, "MagicSocks" Tools

Palo Alto Unit 42Jun 6, 12:21 UTC · Jun 6, 2024Ransomware

57

China-linked APT Bronze Starlight deploys ransomware as a smokescreen

Security AffairsJun 26, 13:40 UTC · Jun 26, 2022Ransomware

57

Threat Source Newsletter (Nov. 18, 2021)

Cisco TalosNov 18, 19:00 UTC · Nov 18, 2021Ransomware

60

Connecting the Bots - Hancitor fuels Cuba Ransomware Operations

Security AffairsMay 7, 09:59 UTC · May 7, 2021Ransomware

57

⚡ Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-the

The Hacker NewsAug 27, 05:11 UTC · Aug 27, 2025Ransomware in the wildCVE-2018-0171 CVE-2025-43300 CVE-2025-7353+5 CVEs

60

DroxiDat-Cobalt Strike Duo Targets Power Generator Network

Infosecurity MagazineAug 11, 17:00 UTC · Aug 11, 2023Ransomware

60

Ransomware Group Rebrands Multiple Times to Evade Detection

Infosecurity MagazineNov 30, 10:20 UTC · Nov 30, 2021Ransomware

57

JADEPUFFER: First End-to-End AI

Security AffairsJul 3, 11:29 UTC · Jul 3, 2026Ransomware in the wildCVE-2025-3248 CVE-2021-29441

60

Uncovering Qilin attack methods exposed through multiple cases

Cisco TalosOct 27, 02:00 UTC · Oct 27, 2025Ransomware

57

Trojanized KeePass opens doors for ransomware attackers

Help Net SecurityMay 20, 00:00 UTC · May 20, 2025Ransomware

57

Exposing HelloXD Ransomware and x4k

Palo Alto Unit 42Jun 5, 20:37 UTC · Jun 5, 2024Ransomware

57

Analysis of Cuba ransomware gang activity and tooling

Kaspersky SecurelistSep 11, 10:00 UTC · Sep 11, 2023Ransomware CVE-2021-31207 CVE-2021-34473 CVE-2021-34523+8 CVEs

60

Organizations are stepping up their game against cyber threats

Help Net SecurityApr 24, 00:00 UTC · Apr 24, 2023Ransomware

60

FireEye: More than 1,900 distinct hacking groups are active today

The RecordJan 26, 00:00 UTC · Jan 26, 2023Ransomware

57

Log4Shell attacks began two weeks ago, Cisco and Cloudflare say

The RecordJan 18, 00:00 UTC · Jan 18, 2023Ransomware in the wild

60

Researchers Link Cheerscrypt Linux

The Hacker NewsOct 4, 18:11 UTC · Oct 4, 2022Ransomware

60

State-Backed Hackers Using Ransomware as a Decoy for Cyber Espionage Attacks

The Hacker NewsJun 25, 04:04 UTC · Jun 25, 2022Ransomware

57

Conti Group Encrypts Karma Ransomware Extortion Notes

Infosecurity MagazineMar 1, 09:59 UTC · Mar 1, 2022Ransomware

57

Ransomware Group FIN12 Aggressively Going After Healthcare Targets

The Hacker NewsOct 11, 07:09 UTC · Oct 11, 2021Ransomware

60

UNC2447 gang exploited SonicWall Zero

Security AffairsApr 30, 16:26 UTC · Apr 30, 2021Ransomware CVE-2021-20016

60

Not So Crystal Clear

Cisco TalosJan 4, 16:39 UTC · Jan 4, 2018Ransomware

57

A Multi-Method Approach to Identifying Rogue Cobalt Strike Servers

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Ransomware

57

Malicious use of Cobalt Strike down 80% after crackdown, Fortra says

The RecordMar 7, 19:06 UTC · Mar 7, 2025Ransomware

57

Black Basta ransomware gang linked to a malware campaign

Security AffairsAug 15, 08:40 UTC · Aug 15, 2024Ransomware CVE-2022-26923

60

Global Police Operation Shuts Down 600 Cybercrime Servers Linked to Cobalt Strike

The Hacker NewsJul 7, 16:50 UTC · Jul 7, 2024Ransomware

57

Cobalt Strike: International law enforcement operation tackles illegal uses of ‘Swiss army knife’ pentesting tool

The RecordJul 3, 15:25 UTC · Jul 3, 2024Ransomware

57

TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT Attacks

The Hacker NewsMar 21, 03:22 UTC · Mar 21, 2024Ransomware CVE-2024-27198

60

City of Dallas has set a budget of $8.5 million to mitigate the May Royal ransomware attack.

Security AffairsSep 23, 10:17 UTC · Sep 23, 2023Ransomware

60

Power Generator in South Africa hit with DroxiDat and Cobalt Strike

Security AffairsAug 12, 06:57 UTC · Aug 12, 2023Ransomware

60

CISA and FBI warn of Truebot infecting US and Canada based orgs

Security AffairsJul 7, 05:58 UTC · Jul 7, 2023Ransomware CVE-2022-31199

60