Search: “shellcode”

56 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 485 Vulnerability 168 Exploit / PoC 114 Threat actor 104 Ransomware 89 Data breach 23 Phishing & fraud 10 Research 3 Policy & legal 3 Industry 3 AI safety & security 3 Advisory 2 AI tools & infra 1 Tools 1

SeverityAll critical 258 high 492 medium 243 low 14 info 2

Blowing Cobalt Strike Out of the Water With Memory Analysis

Palo Alto Unit 42Jun 5, 17:24 UTC · Jun 5, 2024Ransomware

57

Sodin ransomware exploits Windows vulnerability and processor architecture

Kaspersky SecurelistJul 3, 10:00 UTC · Jul 3, 2019Ransomware CVE-2018-8453

60

Dtrack expands its operations to Europe and Latin America

Kaspersky SecurelistNov 15, 10:00 UTC · Nov 15, 2022Ransomware

57

Modified Zyklon and plugins from India

Cisco TalosMay 23, 13:05 UTC · May 23, 2017Ransomware CVE-2013-3906 CVE-2012-1856

60

Breaking the silence

Cisco TalosDec 8, 19:38 UTC · Dec 8, 2022Ransomware CVE-2022-31199

60

Smoking Guns

Cisco TalosJul 3, 10:00 UTC · Jul 3, 2018Ransomware

57

FIN8 Group spotted delivering the BlackCat Ransomware

Security AffairsJul 18, 19:45 UTC · Jul 18, 2023Ransomware

57

APT trends report Q3 2022

Kaspersky SecurelistNov 1, 08:53 UTC · Nov 1, 2022Ransomware

57

Lemon Duck brings cryptocurrency miners back into the spotlight

Cisco TalosOct 13, 14:59 UTC · Oct 13, 2020Ransomware

57

At least 3 different groups have been leveraging the NSA EternalBlue exploit, what's went wrong?

Security AffairsAug 22, 08:11 UTC · Aug 22, 2017Ransomware

57

Security leaders say the next two years are going to be 'insane'

CyberScoopMar 27, 17:16 UTC · Mar 27, 2026Ransomware1

57

ThrottleStop driver abused to terminate AV processes

Kaspersky SecurelistAug 6, 10:00 UTC · Aug 6, 2025Ransomware CVE-2025-7771

60

Exploring vulnerable Windows drivers

Cisco TalosDec 19, 11:04 UTC · Dec 19, 2024Ransomware CVE-2022-3699

60

Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux Kernels

The Hacker NewsDec 2, 16:30 UTC · Dec 2, 2024Ransomware CVE-2023-40238

60

A deep dive into Phobos ransomware, recently deployed by 8Base group

Cisco TalosNov 17, 13:01 UTC · Nov 17, 2023Ransomware

57

Kaspersky crimeware report: GoPIX, Lumar, and Rhysida.

Kaspersky SecurelistOct 24, 10:00 UTC · Oct 24, 2023Ransomware

57

Andariel deploys DTrack and Maui ransomware

Kaspersky SecurelistAug 9, 14:25 UTC · Aug 9, 2022Ransomware CVE-2017-10271

60

New Snort, ClamAV coverage strikes back against Cobalt Strike

Cisco TalosSep 21, 04:01 UTC · Sep 21, 2020Ransomware1

57

Threat Roundup for December 6 to December 13

Cisco TalosDec 13, 18:03 UTC · Dec 13, 2019Ransomware

57

FIN6 group starts using LockerGoga and Ryuk Ransomware

Security AffairsApr 6, 19:56 UTC · Apr 6, 2019Ransomware

57

A Dissection of the “EsteemAudit” Windows Remote Desktop Exploit

Palo Alto Unit 42May 31, 12:00 UTC · May 31, 2017Ransomware CVE-2017-9073

60

Threat Round-up for Apr 7

Cisco TalosApr 14, 20:58 UTC · Apr 14, 2017Ransomware

57

Take the RIG Pill: Down the Rabbit Hole

Cisco TalosNov 3, 15:00 UTC · Nov 3, 2016Ransomware

57

⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More

The Hacker NewsJul 6, 13:02 UTC · Jul 6, 2026Ransomware CVE-2026-48276 CVE-2026-48283 CVE-2026-48277+69 CVEs1

60

The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes

The Hacker NewsJun 23, 17:43 UTC · Jun 23, 2026Ransomware

57

Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline

The Hacker NewsJun 17, 16:00 UTC · Jun 17, 2026Ransomware

57

OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Ransomware CVE-2026-33634

60

Fake Tech Support Spam Deploys Customized Havoc C2 Across Organizations

The Hacker NewsMar 3, 17:15 UTC · Mar 3, 2026Ransomware

57

For the first time, a RomCom payload has been observed being distributed via SocGholish.

Security AffairsNov 26, 20:16 UTC · Nov 26, 2025Ransomware

57

Researchers expose MalTerminal, an LLM

Security AffairsSep 22, 08:59 UTC · Sep 22, 2025Ransomware

57

Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon’s Reach to Linux and macOS

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2025Ransomware

57

Charon Ransomware targets Middle East with APT attack methods

Security AffairsAug 13, 08:43 UTC · Aug 13, 2025Ransomware

57

Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched Systems

The Hacker NewsJul 28, 15:57 UTC · Jul 28, 2025Ransomware in the wildCVE-2025-49706 CVE-2025-49704

60

Iranian APT UNC1860 Linked to MOIS Facilitates Cyber Intrusions in Middle East

The Hacker NewsSep 20, 12:44 UTC · Sep 20, 2024Ransomware CVE-2019-0604

60

Albabat, Kasseika, Kuiper: New Ransomware Gangs Rise with Rust and Golang

The Hacker NewsJan 30, 07:39 UTC · Jan 30, 2024Ransomware1

57

Hackers Weaponize Windows Flaw to Deploy Crypto

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2024Ransomware CVE-2023-36025

60

Analysis of Cuba ransomware gang activity and tooling

Kaspersky SecurelistSep 11, 10:00 UTC · Sep 11, 2023Ransomware CVE-2021-31207 CVE-2021-34473 CVE-2021-34523+8 CVEs

60

UNRAVELING EternalBlue: inside the WannaCry’s enabler

Security AffairsSep 1, 14:43 UTC · Sep 1, 2023Ransomware

57

FIN8 Group Using Modified Sardonic Backdoor for BlackCat Ransomware Attacks

The Hacker NewsJul 19, 03:25 UTC · Jul 19, 2023Ransomware

57

Quarterly Report: Incident Response Trends in Q1 2023

Cisco TalosApr 26, 12:00 UTC · Apr 26, 2023Ransomware

57