Search: “php”

139 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 396 Malware 309 Exploit / PoC 180 Ransomware 139 Threat actor 79 Data breach 55 Phishing & fraud 35 Industry 19 Advisory 9 Research 7 AI tools & infra 5 Policy & legal 5 AI safety & security 5 Tools 5

SeverityAll critical 477 high 454 medium 260 low 40 info 19

LockBit is back and threatens to target more government organizations

Security AffairsFeb 27, 07:44 UTC · Feb 27, 2024Ransomware CVE-2023-3824

60

PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577)

Help Net SecurityJun 13, 00:00 UTC · Jun 13, 2024Ransomware in the wildCVE-2024-4577 CVE-2012-1823 CVE-2024-3577

60

Interlock ransomware group deploys new PHP

Security AffairsJul 14, 17:41 UTC · Jul 14, 2025Ransomware

57

Farming Malicious Documents to Unravel Ransomware

Palo Alto Unit 42Mar 15, 17:04 UTC · Mar 15, 2023Ransomware

57

Ransomware attackers quickly weaponize PHP vulnerability with 9.8 severity rating

Ars Technica · SecurityJun 15, 00:00 UTC · Jun 15, 2024Ransomware

57

Twelve: from initial compromise to ransomware and wipers

Kaspersky SecurelistSep 20, 13:33 UTC · Sep 20, 2024Ransomware CVE-2021-21972 CVE-2021-22005

60

Andariel evolves to target South Korea with ransomware

Kaspersky SecurelistJun 15, 12:40 UTC · Jun 15, 2021Ransomware

57

Week in review: PHP supply chain attack, common zero trust traps, hardening CI/CD pipelines

Help Net SecurityApr 4, 00:00 UTC · Apr 4, 2021Ransomware CVE-2021-21975 CVE-2021-21983

60

Week in review: Keeping up with ransomware, critical PHP RCE exploited, DevOps firewall

Help Net SecurityNov 3, 00:00 UTC · Nov 3, 2019Ransomware in the wildCVE-2019-11043

60

LockBit Ransomware Group Resurfaces After Law Enforcement Takedown

The Hacker NewsMar 1, 03:23 UTC · Mar 1, 2024Ransomware CVE-2023-3824

60

New ransomware trends in 2022

Kaspersky SecurelistMay 11, 11:29 UTC · May 11, 2022Ransomware

57

CryPy: ransomware behind Israeli lines

Kaspersky SecurelistOct 13, 09:26 UTC · Oct 13, 2016Ransomware

57

CTB

Kaspersky SecurelistMar 1, 07:38 UTC · Mar 1, 2016Ransomware

60

Interlock Ransomware Unleashes New RAT in Widespread Campaign

Infosecurity MagazineJul 14, 11:15 UTC · Jul 14, 2025Ransomware

57

Quarterly Report: Incident Response Trends in Q1 2023

Cisco TalosApr 26, 12:00 UTC · Apr 26, 2023Ransomware

57

Attackers exploit cPanel CVE-2026

Security AffairsMay 12, 11:41 UTC · May 12, 2026Ransomware in the wildCVE-2026-41940

60

FreePBX Servers Targeted by Zero

The Hacker NewsSep 12, 12:01 UTC · Sep 12, 2025Ransomware in the wildCVE-2025-57819

60

The Drop in Ransomware Attacks in 2024 and What it Means

The Hacker NewsApr 8, 11:38 UTC · Apr 8, 2024Ransomware

57

FBI’s LockBit Takedown Postponed a Ticking Time Bomb in Fulton County, Ga.

Krebs on SecurityFeb 26, 05:55 UTC · Feb 26, 2024Ransomware

57

DepositFiles exposed config file, jeopardizing user security

Security AffairsJul 27, 20:39 UTC · Jul 27, 2023Ransomware

60

MISP: Open-source threat intelligence and sharing platform

Help Net SecurityAug 5, 00:00 UTC · Aug 5, 2024Ransomware

57

LockBit Ransomware's Darknet Domains Seized in Global Law Enforcement Raid

The Hacker NewsFeb 26, 07:26 UTC · Feb 26, 2024Ransomware CVE-2023-3824

60

FIN7 Recruits Talent for Push into Ransomware

Recorded FutureNov 5, 00:00 UTC · Nov 5, 2021Ransomware

57

Hotarus Corp hacked Ecuador's Ministry of Finance and Banco Pichincha

Security AffairsFeb 27, 17:18 UTC · Feb 27, 2021Ransomware

57

Modified Zyklon and plugins from India

Cisco TalosMay 23, 13:05 UTC · May 23, 2017Ransomware CVE-2013-3906 CVE-2012-1856

60

14,971 WordPress Sites Cleaned in Global SocGholish Takedown

Security AffairsJun 19, 13:41 UTC · Jun 19, 2026Ransomware

60

⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

The Hacker NewsMay 19, 04:33 UTC · May 19, 2026Ransomware in the wildCVE-2026-42897 CVE-2026-20182 CVE-2026-20127

60

PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials

The Hacker NewsMay 1, 16:27 UTC · May 1, 2026Ransomware

57

ShadowCaptcha Exploits WordPress Sites to Spread Ransomware, Info Stealers, and Crypto Miners

The Hacker NewsAug 26, 13:14 UTC · Aug 26, 2025Ransomware

57

Palo Alto Networks and SonicWall Firewalls Under Attack

Infosecurity MagazineFeb 17, 09:30 UTC · Feb 17, 2025Ransomware CVE-2024-53704 CVE-2025-0108

60

LockBit Ransomware Operation Shut Down; Criminals Arrested; Decryption Keys Released

The Hacker NewsFeb 26, 07:26 UTC · Feb 26, 2024Ransomware

57

U.S. Offers $15 Million Bounty to Hunt Down LockBit Ransomware Leaders

The Hacker NewsFeb 26, 07:25 UTC · Feb 26, 2024Ransomware

60

Authorities Claim LockBit Admin "LockBitSupp" Has Engaged with Law Enforcement

The Hacker NewsFeb 26, 07:25 UTC · Feb 26, 2024Ransomware

57

Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll Affiliates

Krebs on SecurityFeb 20, 20:21 UTC · Feb 20, 2024Ransomware

60

FIN8-linked actor targets Citrix NetScaler systems

Security AffairsAug 29, 15:14 UTC · Aug 29, 2023Ransomware CVE-2023-3519

60

Security Affairs newsletter Round 416 by Pierluigi Paganini

Security AffairsApr 23, 07:51 UTC · Apr 23, 2023Ransomware in the wild

60

Hundreds of WordPress sites defaced in fake ransomware attacks

The RecordDec 19, 00:00 UTC · Dec 19, 2022Ransomware

57

Who Wrote the ALPHV/BlackCat Ransomware Strain?

Krebs on SecurityJan 28, 15:33 UTC · Jan 28, 2022Ransomware

57

Cyberthreats to financial organizations in 2022

Kaspersky SecurelistNov 23, 10:00 UTC · Nov 23, 2021Ransomware CVE-2019-5544 CVE-2020-3992 CVE-2018-13379+2 CVEs

60

New NextCry Ransomware targets Nextcloud instances on Linux servers

Security AffairsNov 18, 08:02 UTC · Nov 18, 2019Ransomware CVE-2019-11043

60