Search: “kernels”

282 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1341 Vulnerability 1294 Exploit / PoC 593 Ransomware 282 Threat actor 100 Data breach 65 Advisory 59 Phishing & fraud 56 Industry 53 Policy & legal 42 AI research 30 Research 29 Tools 27 AI safety & security 26

SeverityAll critical 1432 high 1812 medium 560 low 129 info 111

Exploring vulnerable Windows drivers

Cisco TalosDec 19, 11:04 UTC · Dec 19, 2024Ransomware CVE-2022-3699

60

XPAJ: Reversing a Windows x64 Bootkit

Kaspersky SecurelistJun 19, 18:16 UTC · Jun 19, 2012Ransomware

60

Threat Brief: Understanding Kernel APC Attacks

Palo Alto Unit 42Jan 28, 22:06 UTC · Jan 28, 2022Ransomware

57

ThrottleStop driver abused to terminate AV processes

Kaspersky SecurelistAug 6, 10:00 UTC · Aug 6, 2025Ransomware CVE-2025-7771

60

Novel News on Cuba Ransomware: Greetings From Tropical Scorpius

Palo Alto Unit 42Jun 5, 20:16 UTC · Jun 5, 2024Ransomware

57

Delivering vulnerable signed kernel drivers remains popular among attackers

Help Net SecurityJan 13, 00:00 UTC · Jan 13, 2022Ransomware

60

Windows CLFS and five exploits used by ransomware operators (Exploit #1 – CVE-2022

Kaspersky SecurelistDec 21, 10:28 UTC · Dec 21, 2023Ransomware in the wildCVE-2022-24521 CVE-2023-23376 CVE-2023-28252+2 CVEs

60

Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux Kernels

The Hacker NewsDec 2, 16:30 UTC · Dec 2, 2024Ransomware CVE-2023-40238

60

CrowdStrike Apologizes for IT Outage, Defends Microsoft Kernel Access

Infosecurity MagazineSep 25, 11:30 UTC · Sep 25, 2024Ransomware

60

BlackCat Ransomware affiliate uses signed kernel driver to evade detection

Security AffairsMay 23, 06:51 UTC · May 23, 2023Ransomware

57

Old Linux Kernel flaw CVE-2024

Security AffairsOct 31, 18:17 UTC · Oct 31, 2025Ransomware in the wildCVE-2024-1086

60

Hackers Exploit Windows Policy Loophole to Forge Kernel

The Hacker NewsJul 12, 03:37 UTC · Jul 12, 2023Ransomware

57

New OS X Ransomware KeRanger Infected Transmission BitTorrent Client Installer

Palo Alto Unit 42Jan 28, 22:01 UTC · Jan 28, 2022Ransomware

57

Ransomware gangs exploit a Paragon Partition Manager BioNTdrv.sys driver zero

Security AffairsMar 1, 18:52 UTC · Mar 1, 2025Ransomware in the wildCVE-2025-0289 CVE-2025-0288 CVE-2025-0287+2 CVEs

60

Windows CLFS and five exploits used by ransomware operators

Kaspersky SecurelistDec 21, 09:53 UTC · Dec 21, 2023Ransomware CVE-2023-28252 CVE-2022-24521 CVE-2022-37969+1 CVEs

60

Making Vulnerable Drivers Exploitable Without Hardware

The Hacker NewsMay 22, 11:38 UTC · May 22, 2026Ransomware

57

Why a decade-old EnCase driver still works as an EDR killer

Help Net SecurityFeb 5, 00:00 UTC · Feb 5, 2026Ransomware

60

ThreatsDay Bulletin: New RCEs, Darknet Busts, Kernel Bugs & 25+ More Stories

The Hacker NewsJan 30, 08:37 UTC · Jan 30, 2026Ransomware in the wildCVE-2025-59090 CVE-2025-59109

60

Hackers Exploit Paragon Partition Manager Driver Vulnerability in Ransomware Attacks

The Hacker NewsMar 3, 13:56 UTC · Mar 3, 2025Ransomware CVE-2025-0289 CVE-2025-0285 CVE-2025-0286+2 CVEs

60

Qilin EDR killer infection chain

Cisco TalosApr 2, 10:00 UTC · Apr 2, 2026Ransomware

60

EternalPetya and the lost Salsa20 key

Malwarebytes LabsJan 13, 13:34 UTC · Jan 13, 2026Ransomware

57

BYOVD Attacks Exploit Zero

Infosecurity MagazineMar 3, 09:35 UTC · Mar 3, 2025Ransomware CVE-2025-0289 CVE-2025-0288 CVE-2025-0287+2 CVEs

60

RobbinHood ransomware exploit GIGABYTE driver flaw to kill security software

Security AffairsFeb 8, 00:20 UTC · Feb 8, 2020Ransomware CVE-2018-19320

60

GodDamn Ransomware Uses PoisonX to Blind Security Software

Security AffairsJul 9, 18:11 UTC · Jul 9, 2026Ransomware

57

Analysis of Cuba ransomware gang activity and tooling

Kaspersky SecurelistSep 11, 10:00 UTC · Sep 11, 2023Ransomware CVE-2021-31207 CVE-2021-34473 CVE-2021-34523+8 CVEs

60

Nokoyawa ransomware attacks with Windows zero

Kaspersky SecurelistApr 11, 17:36 UTC · Apr 11, 2023Ransomware CVE-2023-28252 CVE-2022-24521 CVE-2022-37969+1 CVEs

60

Dynamic analysis of firmware components in IoT devices

Kaspersky SecurelistJul 6, 10:00 UTC · Jul 6, 2022Ransomware1

45

Cruciferra Crypter Uses Process Ghosting to Evade Detection

Infosecurity MagazineJul 20, 15:00 UTC · Jul 20, 2026Ransomware

57

CVE-2025-22225 in VMware ESXi now used in active ransomware attacks

Security AffairsFeb 4, 22:02 UTC · Feb 4, 2026Ransomware in the wildCVE-2025-22225 CVE-2025-22226 CVE-2025-22224

60

Bootkitty is the first UEFI Bootkit designed for Linux systems

Security AffairsNov 27, 21:01 UTC · Nov 27, 2024Ransomware

45

A Dissection of the “EsteemAudit” Windows Remote Desktop Exploit

Palo Alto Unit 42May 31, 12:00 UTC · May 31, 2017Ransomware CVE-2017-9073

60

GentleKiller Framework Disables Victims' Security Software

Infosecurity MagazineJun 22, 15:00 UTC · Jun 22, 2026Ransomware

57

⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

The Hacker NewsMay 19, 04:33 UTC · May 19, 2026Ransomware in the wildCVE-2026-42897 CVE-2026-20182 CVE-2026-20127

60

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

The Hacker NewsApr 6, 10:07 UTC · Apr 6, 2026Ransomware

57

China-Linked Hackers Exploit VMware ESXi Zero

The Hacker NewsJan 12, 16:25 UTC · Jan 12, 2026Ransomware in the wildCVE-2025-22224 CVE-2025-22225 CVE-2025-22226

60

BlackByte Ransomware abuses driver to bypass security solutions

Security AffairsOct 8, 16:23 UTC · Oct 8, 2022Ransomware CVE-2018-19320 CVE-2019-16098

60

The future of macOS security: Baked-in protection and third-party tools

Help Net SecurityJul 31, 21:33 UTC · Jul 31, 2018Ransomware CVE-2015-3673 CVE-2015-7024 CVE-2017-6987

60

Threat Spotlight: Follow the Bad Rabbit

Cisco TalosOct 24, 20:51 UTC · Oct 24, 2017Ransomware

57

GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses

The Hacker NewsJul 10, 07:50 UTC · Jul 10, 2026Ransomware

57

The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes

The Hacker NewsJun 23, 17:43 UTC · Jun 23, 2026Ransomware

57