Search: “Shell”

1,008 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1274 Vulnerability 1008 Exploit / PoC 647 Ransomware 628 Threat actor 365 Data breach 165 Phishing & fraud 115 Policy & legal 75 Industry 61 AI safety & security 33 Research 28 Advisory 25 AI tools & infra 17 Tools 17

SeverityAll critical 1753 high 1712 medium 740 low 208 info 68

Malicious npm Packages Deliver Sophisticated Reverse Shells

Infosecurity MagazineMar 26, 13:30 UTC · Mar 26, 2025Vulnerability

42

Weathering the storm: In the midst of a Typhoon

Cisco TalosFeb 20, 13:00 UTC · Feb 20, 2025Vulnerability CVE-2018-0171 CVE-2023-20198 CVE-2023-20273+1 CVEs

47

Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy Secure

The Hacker NewsJan 11, 06:31 UTC · Jan 11, 2025Vulnerability in the wildCVE-2025-0282 CVE-2025-0283

60

Digging Inside Azure Functions: HyperV Is the Last Line of Defense

Palo Alto Unit 42Jun 5, 17:09 UTC · Jun 5, 2024Vulnerability

30

Week in review: New DNS vulnerabilities, benefits of cyber threat intelligence, FBI removes web shells

Help Net SecurityApr 18, 00:00 UTC · Apr 18, 2021Vulnerability

55

Microsoft issues guidance to defend Exchange servers under attack

Security AffairsJun 25, 08:12 UTC · Jun 25, 2020Vulnerability CVE-2020-0688

47

PolyShell: unrestricted file upload in Magento and Adobe Commerce

Sansec (Magento / e-commerce security)May 12, 10:55 UTC · May 12, 2026Vulnerability in the wild

60

CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)

Help Net SecurityApr 29, 00:00 UTC · Apr 29, 2026Vulnerability in the wildCVE-2026-32202 CVE-2026-21510 CVE-2026-215131

60

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

The Hacker NewsDec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-29927 CVE-2025-66478

60

UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP Rootkit

The Hacker NewsJul 26, 11:34 UTC · Jul 26, 2025Vulnerability CVE-2021-20035 CVE-2021-20038 CVE-2021-20039+2 CVEs

60

Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang

The Hacker NewsMay 9, 07:00 UTC · May 9, 2025Vulnerability CVE-2025-313241

60

Unmasking the new persistent attacks on Japan

Cisco TalosMar 6, 11:00 UTC · Mar 6, 2025Vulnerability CVE-2024-45771

60

An Ancient Crystal from the Sahara Reveals a Lost World of Martian Water

404 MediaNov 23, 14:00 UTC · Nov 23, 2024Vulnerability

55

New Mirai Variant Targets WebSVN Command Injection Vulnerability (CVE-2021

Palo Alto Unit 42Jun 6, 12:14 UTC · Jun 6, 2024Vulnerability CVE-2021-32305

60

Kazakhstan-associated YoroTrooper disguises origin of attacks as Azerbaijan

Cisco TalosOct 25, 12:01 UTC · Oct 25, 2023Vulnerability

30

Threat Roundup for September 22 to September 29

Cisco TalosSep 29, 16:40 UTC · Sep 29, 2023Vulnerability

30

Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203)

Help Net SecurityJul 20, 07:53 UTC · Jul 20, 2023Vulnerability in the wildCVE-2023-29298 CVE-2023-38203 CVE-2023-29300+2 CVEs

60

Active exploitation of the MOVEit Transfer vulnerability — CVE-2023

Cisco TalosJun 16, 18:17 UTC · Jun 16, 2023Vulnerability in the wildCVE-2023-34362 CVE-2023-35036 CVE-2023-35708

60

CVE-2022-41040 and CVE-2022-41082 – zero

Kaspersky SecurelistDec 19, 16:07 UTC · Dec 19, 2022Vulnerability CVE-2022-41040 CVE-2022-41082 CVE-2021-34473+2 CVEs

60

WARNING: New Unpatched Microsoft Exchange Zero

The Hacker NewsOct 3, 08:22 UTC · Oct 3, 2022Vulnerability in the wild

60

Threat Roundup for April 8 to April 15

Cisco TalosApr 15, 20:04 UTC · Apr 15, 2022Vulnerability

30

Hackers exploited Centreon monitoring software to compromise IT providers

Help Net SecurityFeb 16, 00:00 UTC · Feb 16, 2021Vulnerability

42

CISCO fixed 3 critical issues in Elastic Services Controller and Ultra Services Framework

Security AffairsJul 6, 08:22 UTC · Jul 6, 2017Vulnerability CVE-2017-6713 CVE-2017-6712 CVE-2017-6711+2 CVEs

60

Another Major Vulnerability Bashes Systems

Cisco TalosSep 25, 08:55 UTC · Sep 25, 2014Vulnerability in the wildCVE-2014-6271

60

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

The Hacker NewsJul 24, 11:45 UTC · Jul 24, 2026Vulnerability CVE-2026-32194 CVE-2026-32191 CVE-2016-37141

60

cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2026-419401

60

Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure

The Hacker NewsApr 24, 05:28 UTC · Apr 24, 2026Vulnerability in the wildCVE-2026-39987

60

Severe Framelink Figma MCP Vulnerability Lets Hackers Execute Code Remotely

The Hacker NewsOct 9, 13:35 UTC · Oct 9, 2025Vulnerability CVE-2025-53967

47

UAT-7237 targets Taiwanese web hosting infrastructure

Cisco TalosAug 15, 10:00 UTC · Aug 15, 2025Vulnerability

42

UAT

Security AffairsMar 23, 14:30 UTC · Mar 23, 2025Vulnerability

55

Hackers exploit Microsoft Defender SmartScreen bug CVE-2024-21412 to deliver ACR, Lumma, and Meduza Stealers

Security AffairsJul 25, 10:20 UTC · Jul 25, 2024Vulnerability CVE-2024-214121

35

Commando Cat Cryptojacking Attacks Target Misconfigured Docker Instances

The Hacker NewsJun 7, 05:10 UTC · Jun 7, 2024Vulnerability CVE-2018-20062 CVE-2019-90821

35

Threat Roundup for November 3 to November 10

Cisco TalosNov 9, 18:32 UTC · Nov 9, 2023Vulnerability

30

Atlassian Confluence bug CVE-2022-26134 exploited in cryptocurrency mining campaign

Security AffairsSep 22, 11:06 UTC · Sep 22, 2022Vulnerability in the wildCVE-2022-26134

60

Attackers exploit a flaw in Digium Phone sw to target VoIP servers

Security AffairsJul 16, 13:14 UTC · Jul 16, 2022Vulnerability CVE-2021-45461

47

Hackers Targeting VoIP Servers By Exploiting Digium Phone Software

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2022Vulnerability CVE-2021-45461

47

Experts found 14 new flaws in BusyBox

Security AffairsNov 10, 11:38 UTC · Nov 10, 2021Vulnerability CVE-2021-42373 CVE-2021-42374 CVE-2021-42375+11 CVEs

60

Vulnerability Spotlight: A deep dive into WAGO’s cloud connectivity and the vulnerabilities that arise

Cisco TalosOct 21, 19:30 UTC · Oct 21, 2020Vulnerability CVE-2019-5161 CVE-2019-5155 CVE-2019-5157+1 CVEs

47

Friday Squid Blogging: "How the Squid Lost Its Shell"

Schneier on SecurityJan 29, 08:02 UTC · Jan 29, 2020Vulnerability

30

FBI issues flash alert on Apache Struts vulnerability

CyberScoopOct 3, 13:15 UTC · Oct 3, 2017Vulnerability in the wildCVE-2017-5638

60