Search: “rootkit”

111 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1305 Vulnerability 379 Ransomware 155 Exploit / PoC 131 Threat actor 75 Phishing & fraud 52 Data breach 47 Advisory 23 Policy & legal 10 Industry 2 AI safety & security 2 AI research 1 Research 1 AI industry 1

SeverityAll critical 417 high 1565 medium 182 low 15 info 5

IT threat evolution Q3 2022

Kaspersky SecurelistNov 18, 08:00 UTC · Nov 18, 2022Ransomware CVE-2017-10271

60

Rust-Based P2PInfect Botnet Evolves with Miner and Ransomware Payloads

The Hacker NewsJun 28, 04:01 UTC · Jun 28, 2024Ransomware

57

Analysis of Cuba ransomware gang activity and tooling

Kaspersky SecurelistSep 11, 10:00 UTC · Sep 11, 2023Ransomware CVE-2021-31207 CVE-2021-34473 CVE-2021-34523+8 CVEs

60

Beware: 1,000+ Fake Cryptocurrency Sites Trap Users in Bogus Rewards Scheme

The Hacker NewsJun 19, 08:46 UTC · Jun 19, 2023Ransomware

57

Friday Squid Blogging: 14-foot Giant Squid Washes Ashore in Cape Town

Schneier on SecurityAug 26, 21:08 UTC · Aug 26, 2022Ransomware

57

New P2Pinfect version delivers miners and ransomware on Redis servers

Security AffairsJun 27, 05:40 UTC · Jun 27, 2024Ransomware CVE-2022-0543

60

Ransomware Attackers Use Microsoft

The Hacker NewsDec 18, 03:31 UTC · Dec 18, 2022Ransomware

57

Threat Roundup for May 22 to May 29

Cisco TalosMay 29, 21:20 UTC · May 29, 2020Ransomware

57

Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support

Help Net SecurityAug 3, 00:00 UTC · Aug 3, 2026Ransomware

57

New Ransomware-as-a-Service Tool ‘Thanos’ Shows Connections to ‘Hakbit’

Recorded FutureJun 29, 00:00 UTC · Jun 29, 2026Ransomware

57

Inside GentleKiller: The EDR

Security AffairsJun 22, 09:39 UTC · Jun 22, 2026Ransomware

57

54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security

The Hacker NewsMar 20, 04:36 UTC · Mar 20, 2026Ransomware

57

200,000 Linux systems from Framework are shipped with signed UEFI components vulnerable to Secure Boot bypass

Security AffairsOct 15, 14:22 UTC · Oct 15, 2025Ransomware CVE-2022-34302 CVE-2023-48733 CVE-2024-7344

60

AmCache artifact: forensic value and a tool for data extraction

Kaspersky SecurelistOct 1, 10:00 UTC · Oct 1, 2025Ransomware

57

Feds Tie ‘Scattered Spider’ Duo to $115M in Ransoms

Krebs on SecuritySep 24, 12:59 UTC · Sep 24, 2025Ransomware

57

Hard Work Out Operations Intelligence Goals Library

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Ransomware

57

⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips

The Hacker NewsDec 23, 12:14 UTC · Dec 23, 2024Ransomware CVE-2024-12727 CVE-2024-12728 CVE-2024-12729+23 CVEs1

60

Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux Kernels

The Hacker NewsDec 2, 16:30 UTC · Dec 2, 2024Ransomware CVE-2023-40238

60

Cyberthreats in the Middle East H1 2024

Kaspersky SecurelistOct 14, 07:00 UTC · Oct 14, 2024Ransomware

57

2023 Kaspersky Incident Response report

Kaspersky SecurelistMay 14, 11:00 UTC · May 14, 2024Ransomware

57

Threat landscape for industrial automation systems. H2 2023

Kaspersky SecurelistMar 19, 15:27 UTC · Mar 19, 2024Ransomware

57

Hackers Exploit Misconfigured YARN, Docker, Confluence, Redis Servers for Crypto Mining

The Hacker NewsMar 12, 08:59 UTC · Mar 12, 2024Ransomware CVE-2021-44228 CVE-2022-261341

60

New Redis miner Migo uses novel system weakening techniques

Security AffairsFeb 21, 14:55 UTC · Feb 21, 2024Ransomware

57

Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks

The Hacker NewsJan 22, 03:40 UTC · Jan 22, 2024Ransomware in the wildCVE-2023-46604

60

Windows CLFS and five exploits used by ransomware operators (Exploit #3

Kaspersky SecurelistDec 21, 10:29 UTC · Dec 21, 2023Ransomware

57

Hackers Exploit Windows Policy Loophole to Forge Kernel

The Hacker NewsJul 12, 03:37 UTC · Jul 12, 2023Ransomware

57

Threat Roundup for June 2 to June 9

Cisco TalosJun 9, 21:17 UTC · Jun 9, 2023Ransomware

57

BlackCat Ransomware affiliate uses signed kernel driver to evade detection

Security AffairsMay 23, 06:51 UTC · May 23, 2023Ransomware

57

Dissecting the malicious arsenal of the Makop ransomware gang

Security AffairsMar 14, 07:39 UTC · Mar 14, 2023Ransomware

57

Kaspersky crimeware report: ransomware propagation and driver abuse

Kaspersky SecurelistDec 5, 10:00 UTC · Dec 5, 2022Ransomware CVE-2022-26522 CVE-2022-26523

60

Threat Source newsletter (Oct. 6, 2022) — Continuing down the Privacy Policy rabbit hole

Cisco TalosOct 6, 18:00 UTC · Oct 6, 2022Ransomware CVE-2022-41040 CVE-2022-41082

60

Threat landscape for industrial automation systems for H1 2022

Kaspersky SecurelistSep 8, 10:55 UTC · Sep 8, 2022Ransomware

57

Kaspersky GERT report on incident response in 2021

Kaspersky SecurelistSep 5, 10:00 UTC · Sep 5, 2022Ransomware

57

The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs

Kaspersky SecurelistJun 23, 10:00 UTC · Jun 23, 2022Ransomware

57

The Verizon 2022 DBIR

Kaspersky SecurelistMay 26, 06:20 UTC · May 26, 2022Ransomware

57

Log4Shell exploitation: Which applications may be targeted next?

Help Net SecurityApr 5, 00:00 UTC · Apr 5, 2022Ransomware CVE-2022-22965 CVE-2021-442281

60

From BlackMatter to BlackCat: Analyzing two attacks from one affiliate

Cisco TalosMar 17, 11:58 UTC · Mar 17, 2022Ransomware

57

Nearly 34 Ransomware Variants Observed in Hundreds of Cyberattacks in Q4 2021

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2022Ransomware

57

Threat Roundup for January 21 to January 28

Cisco TalosJan 28, 20:21 UTC · Jan 28, 2022Ransomware

57

How Wazuh Can Improve Digital Security for Businesses

The Hacker NewsJan 28, 10:48 UTC · Jan 28, 2022Ransomware

57