Search: “powershell”

610 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1210 Ransomware 610 Vulnerability 342 Threat actor 281 Exploit / PoC 193 Data breach 100 Phishing & fraud 68 Industry 32 Policy & legal 17 Advisory 11 Tools 6 Research 5 AI tools & infra 5 AI industry 4

SeverityAll critical 810 high 1305 medium 679 low 79 info 15

Lemon Duck brings cryptocurrency miners back into the spotlight

Cisco TalosOct 13, 14:59 UTC · Oct 13, 2020Ransomware

57

Iranian APT MuddyWater targets Turkish users via malicious PDFs, executables

Cisco TalosJan 31, 13:00 UTC · Jan 31, 2022Ransomware

57

AZORult brings friends to the party

Cisco TalosApr 2, 15:04 UTC · Apr 2, 2020Ransomware

57

Kaspersky discovers new Ymir ransomware used together with RustyStealer

Kaspersky SecurelistNov 11, 10:00 UTC · Nov 11, 2024Ransomware1

57

Adaptive protection against invisible threats

Kaspersky SecurelistDec 14, 12:00 UTC · Dec 14, 2020Ransomware

57

US, UK, New Zealand argue against disabling PowerShell

The RecordJan 13, 00:00 UTC · Jan 13, 2023Ransomware

57

What are script-based attacks and what can be done to prevent them?

Help Net SecurityJul 31, 00:00 UTC · Jul 31, 2020Ransomware CVE-2017-0199 CVE-2017-11882

60

Uncovering Qilin attack methods exposed through multiple cases

Cisco TalosOct 27, 02:00 UTC · Oct 27, 2025Ransomware

57

Twelve: from initial compromise to ransomware and wipers

Kaspersky SecurelistSep 20, 13:33 UTC · Sep 20, 2024Ransomware CVE-2021-21972 CVE-2021-22005

60

Vice Society leverages PrintNightmare in ransomware attacks

Cisco TalosAug 12, 22:33 UTC · Aug 12, 2021Ransomware CVE-2021-1675 CVE-2021-34527

60

WastedLocker Goes "Big

Cisco TalosJul 6, 20:00 UTC · Jul 6, 2020Ransomware

57

Olympic Destroyer is still alive

Kaspersky SecurelistJun 19, 10:00 UTC · Jun 19, 2018Ransomware

57

New ExtraHop capabilities target malicious PowerShell use across enterprise environments

Help Net SecurityNov 5, 00:00 UTC · Nov 5, 2025Ransomware

60

How ransomware abuses BitLocker

Kaspersky SecurelistMay 23, 12:00 UTC · May 23, 2024Ransomware

60

Vice Society is using custom PowerShell tool for data exfiltration

Security AffairsApr 17, 11:18 UTC · Apr 17, 2023Ransomware

57

TROJ_POSHCODER A ransomware uses Windows PowerShell features

Security AffairsNov 14, 23:12 UTC · Nov 14, 2017Ransomware

57

Head Mare and Twelve: Joint attacks on Russian entities

Kaspersky SecurelistMar 13, 10:07 UTC · Mar 13, 2025Ransomware CVE-2023-38831 CVE-2021-26855

60

2 distinct campaigns delivered GandCrab ransomware and Ursnif Trojan

Security AffairsJan 26, 08:29 UTC · Jan 26, 2019Ransomware

57

GandCrab ransomware and Ursnif virus spreading via MS Word macros

The Hacker NewsJan 25, 11:29 UTC · Jan 25, 2019Ransomware

57

New BYOVD loader behind DeadLock ransomware attack

Cisco TalosDec 9, 11:00 UTC · Dec 9, 2025Ransomware CVE-2024-51324

60

BlueSky Ransomware: Fast Encryption via Multithreading

Palo Alto Unit 42Jun 5, 20:05 UTC · Jun 5, 2024Ransomware CVE-2020-0796 CVE-2021-1732

60

PowerWare Ransomware Spoofing Locky Malware Family

Palo Alto Unit 42Jan 28, 21:51 UTC · Jan 28, 2022Ransomware

57

Case Study: Incident Response is a relationship

Cisco TalosMay 17, 12:00 UTC · May 17, 2021Ransomware

60

OlympicDestroyer is here to trick the industry

Kaspersky SecurelistMar 8, 17:00 UTC · Mar 8, 2018Ransomware

57

The Gentlemen RaaS: rapid growth and a new ransomware variant

Kaspersky SecurelistJun 30, 10:06 UTC · Jun 30, 2026Ransomware1

60

Storm-0249 Escalates Ransomware Attacks with ClickFix, Fileless PowerShell, and DLL Sideloading

The Hacker NewsDec 9, 13:37 UTC · Dec 9, 2025Ransomware1

57

Talos IR ransomware engagements and the significance of timeliness in incident response

Cisco TalosJul 16, 10:00 UTC · Jul 16, 2025Ransomware CVE-2024-577271

60

Vice Society Ransomware Using Stealthy PowerShell Tool for Data Exfiltration

The Hacker NewsApr 17, 08:01 UTC · Apr 17, 2023Ransomware

57

Quarterly Report: Incident Response trends in Q1 2022

Cisco TalosApr 26, 13:11 UTC · Apr 26, 2022Ransomware in the wildCVE-2021-44228 CVE-2021-45046 CVE-2021-22204+1 CVEs

60

Iranian linked conglomerate MuddyWater comprised of regionally focused subgroups

Cisco TalosMar 10, 13:02 UTC · Mar 10, 2022Ransomware

57

Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with Babuk

Cisco TalosNov 3, 12:00 UTC · Nov 3, 2021Ransomware CVE-2021-36942

60

In Q2 2020, there was an average of 419 new threats per minute

Help Net SecurityNov 6, 00:00 UTC · Nov 6, 2020Ransomware

60

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Ransomware1

60

Unleashing the Kraken ransomware group

Cisco TalosNov 13, 11:00 UTC · Nov 13, 2025Ransomware

57

Cybercriminals camouflaging threats as AI tool installers

Cisco TalosMay 29, 10:00 UTC · May 29, 2025Ransomware

57

North Korean Hackers Exploit PowerShell Trick to Hijack Devices in New Cyberattack

The Hacker NewsFeb 12, 13:50 UTC · Feb 12, 2025Ransomware

45

Unwrapping the emerging Interlock ransomware attack

Cisco TalosNov 7, 11:00 UTC · Nov 7, 2024Ransomware

57

Analyzing the familiar tools used by the Crypt Ghouls hacktivists

Kaspersky SecurelistOct 18, 10:00 UTC · Oct 18, 2024Ransomware

57

Avos ransomware group expands with new attack arsenal

Cisco TalosJun 21, 11:58 UTC · Jun 21, 2022Ransomware CVE-2021-44228 CVE-2021-45046 CVE-2021-45105+1 CVEs

60

New Epsilon Red Ransomware appears in the threat landscape

Security AffairsJun 1, 19:26 UTC · Jun 1, 2021Ransomware

57