Search: “rootkit”

155 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1305 Vulnerability 379 Ransomware 155 Exploit / PoC 131 Threat actor 75 Phishing & fraud 52 Data breach 47 Advisory 23 Policy & legal 10 Industry 2 AI safety & security 2 AI industry 1 Research 1 AI research 1

SeverityAll critical 417 high 1565 medium 182 low 15 info 5

UNC6148 deploys Overstep malware on SonicWall devices, possibly for ransomware operations

Security AffairsJul 17, 07:47 UTC · Jul 17, 2025Ransomware CVE-2024-38475

60

IT threat evolution Q2 2021

Kaspersky SecurelistAug 12, 10:12 UTC · Aug 12, 2021Ransomware CVE-2018-0802 CVE-2021-1732 CVE-2021-28310+2 CVEs

60

XPAJ: Reversing a Windows x64 Bootkit

Kaspersky SecurelistJun 19, 18:16 UTC · Jun 19, 2012Ransomware

60

IT threat evolution Q3 2022

Kaspersky SecurelistNov 18, 08:00 UTC · Nov 18, 2022Ransomware CVE-2017-10271

60

Rust-Based P2PInfect Botnet Evolves with Miner and Ransomware Payloads

The Hacker NewsJun 28, 04:01 UTC · Jun 28, 2024Ransomware

57

Analysis of Cuba ransomware gang activity and tooling

Kaspersky SecurelistSep 11, 10:00 UTC · Sep 11, 2023Ransomware CVE-2021-31207 CVE-2021-34473 CVE-2021-34523+8 CVEs

60

Beware: 1,000+ Fake Cryptocurrency Sites Trap Users in Bogus Rewards Scheme

The Hacker NewsJun 19, 08:46 UTC · Jun 19, 2023Ransomware

57

Friday Squid Blogging: 14-foot Giant Squid Washes Ashore in Cape Town

Schneier on SecurityAug 26, 21:08 UTC · Aug 26, 2022Ransomware

57

AvosLocker Ransomware Variant Using New Trick to Disable Antivirus Protection

The Hacker NewsMay 3, 05:50 UTC · May 3, 2022Ransomware CVE-2021-40539 CVE-2021-44228

60

More Hacking Groups Found Exploiting SMB Flaw Weeks Before WannaCry

The Hacker NewsMay 19, 15:00 UTC · May 19, 2017Ransomware CVE-2017-0143

60

Security Affairs newsletter Round 546 by Pierluigi Paganini

Security AffairsOct 25, 22:12 UTC · Oct 25, 2025Ransomware in the wildCVE-2025-61884 CVE-2025-9242 CVE-2025-49844

60

⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2024Ransomware in the wildCVE-2024-50623 CVE-2020-12271 CVE-2024-11639+24 CVEs

60

THN Recap: Top Cybersecurity Threats, Tools and Tips (Nov 25

The Hacker NewsDec 2, 11:25 UTC · Dec 2, 2024Ransomware CVE-2024-9680 CVE-2024-49039 CVE-2024-11680+14 CVEs

60

New P2Pinfect version delivers miners and ransomware on Redis servers

Security AffairsJun 27, 05:40 UTC · Jun 27, 2024Ransomware CVE-2022-0543

60

Ransomware Attackers Use Microsoft

The Hacker NewsDec 18, 03:31 UTC · Dec 18, 2022Ransomware

57

Delivering vulnerable signed kernel drivers remains popular among attackers

Help Net SecurityJan 13, 00:00 UTC · Jan 13, 2022Ransomware

60

Guardicore appoints Amit Serper as Area VP of Security Research

Help Net SecurityMar 25, 00:00 UTC · Mar 25, 2021Ransomware

60

Threat Roundup for May 22 to May 29

Cisco TalosMay 29, 21:20 UTC · May 29, 2020Ransomware

57

Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support

Help Net SecurityAug 3, 00:00 UTC · Aug 3, 2026Ransomware

57

24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login

The Hacker NewsJul 28, 14:41 UTC · Jul 28, 2026Ransomware CVE-2013-4786

60

Tracking Advanced Persistent Threat Groups

Recorded FutureJul 17, 00:00 UTC · Jul 17, 2026Ransomware

60

New Ransomware-as-a-Service Tool ‘Thanos’ Shows Connections to ‘Hakbit’

Recorded FutureJun 29, 00:00 UTC · Jun 29, 2026Ransomware

57

Inside GentleKiller: The EDR

Security AffairsJun 22, 09:39 UTC · Jun 22, 2026Ransomware

57

54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security

The Hacker NewsMar 20, 04:36 UTC · Mar 20, 2026Ransomware

57

Friday Squid Blogging: Squid Fishing in Peru

Schneier on SecurityFeb 27, 22:04 UTC · Feb 27, 2026Ransomware

60

200,000 Linux systems from Framework are shipped with signed UEFI components vulnerable to Secure Boot bypass

Security AffairsOct 15, 14:22 UTC · Oct 15, 2025Ransomware CVE-2022-34302 CVE-2023-48733 CVE-2024-7344

60

XWorm 6.0 Returns with 35+ Plugins and Enhanced Data Theft Capabilities

The Hacker NewsOct 7, 14:26 UTC · Oct 7, 2025Ransomware

60

AmCache artifact: forensic value and a tool for data extraction

Kaspersky SecurelistOct 1, 10:00 UTC · Oct 1, 2025Ransomware

57

Feds Tie ‘Scattered Spider’ Duo to $115M in Ransoms

Krebs on SecuritySep 24, 12:59 UTC · Sep 24, 2025Ransomware

57

SonicWall firewalls targeted in ransomware attacks, possibly via zero-day

Help Net SecurityAug 6, 09:33 UTC · Aug 6, 2025Ransomware in the wildCVE-2025-40599

60

House hearing will use Stuxnet to search for novel ways to confront OT cyberthreats

CyberScoopJul 16, 20:52 UTC · Jul 16, 2025Ransomware in the wild

60

Hard Work Out Operations Intelligence Goals Library

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Ransomware

57

Healthcare Cyber-Attacks Intensify, Sector Now Prime Target

Infosecurity MagazineMay 16, 10:10 UTC · May 16, 2025Ransomware

60

Security Affairs newsletter Round 522 by Pierluigi Paganini

Security AffairsMay 4, 10:05 UTC · May 4, 2025Ransomware in the wild

60

Kaspersky ICS CERT predictions for the industrial threat landscape in 2025

Kaspersky SecurelistJan 29, 10:01 UTC · Jan 29, 2025Ransomware

60

⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips

The Hacker NewsDec 23, 12:14 UTC · Dec 23, 2024Ransomware CVE-2024-12727 CVE-2024-12728 CVE-2024-12729+23 CVEs1

60

Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux Kernels

The Hacker NewsDec 2, 16:30 UTC · Dec 2, 2024Ransomware CVE-2023-40238

60

Crimeware and financial predictions for 2025

Kaspersky SecurelistNov 14, 09:01 UTC · Nov 14, 2024Ransomware

60

Cyberthreats in the Middle East H1 2024

Kaspersky SecurelistOct 14, 07:00 UTC · Oct 14, 2024Ransomware

57

RansomHub ransomware gang relies on TDSKiller to disable EDR

Security AffairsSep 11, 13:15 UTC · Sep 11, 2024Ransomware

60