Search: “web shells”

513 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 549 Vulnerability 513 Ransomware 366 Exploit / PoC 352 Threat actor 212 Data breach 107 Phishing & fraud 40 Policy & legal 27 Advisory 16 Industry 13 AI safety & security 9 Tools 7 Research 6 AI tools & infra 4

SeverityAll critical 1001 high 847 medium 293 low 60 info 25

New Report Uncovers 3 Distinct Clusters of China-Nexus Attacks on Southeast Asian Government

The Hacker NewsSep 25, 10:12 UTC · Sep 25, 2023Vulnerability

55

Chinese Groups Deploy New TTPs to Exploit Ivanti Vulnerabilities

Infosecurity MagazineApr 5, 15:00 UTC · Apr 5, 2024Vulnerability CVE-2023-46805 CVE-2024-21887 CVE-2024-21893

47

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

The Hacker NewsAug 11, 05:48 UTC · Aug 11, 2026Vulnerability CVE-2026-18072 CVE-2026-64638

47

Hackers deploy DripDropper via Apache ActiveMQ flaw, patch systems to evade detection

Security AffairsAug 21, 16:30 UTC · Aug 21, 2025Vulnerability in the wildCVE-2023-46604

60

Chinese-Speaking Hacker Group Targets Human Rights Studies in Middle East

The Hacker NewsSep 5, 16:19 UTC · Sep 5, 2024Vulnerability CVE-2023-26360 CVE-2021-34473 CVE-2021-34523+1 CVEs

60

Defending Microsoft Exchange from encrypted attacks with Cisco Secure IPS

Cisco TalosMar 23, 20:50 UTC · Mar 23, 2021Vulnerability CVE-2021-26855 CVE-2021-27065

60

Hackers exploited Centreon monitoring software to compromise IT providers

Help Net SecurityFeb 16, 00:00 UTC · Feb 16, 2021Vulnerability

42

Malicious IIS Extensions Gaining Popularity Among Cyber Criminals for Persistent Access

The Hacker NewsJul 27, 07:17 UTC · Jul 27, 2022Vulnerability

55

Hackers Targeting VoIP Servers By Exploiting Digium Phone Software

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2022Vulnerability CVE-2021-45461

47

Hezbollah Hacker Group Targeted Telecoms, Hosting, ISPs Worldwide

The Hacker NewsJan 29, 10:08 UTC · Jan 29, 2021Vulnerability CVE-2019-3396 CVE-2019-11581 CVE-2012-3152

35

China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists

The Hacker NewsMay 2, 06:30 UTC · May 2, 2026Vulnerability CVE-2025-55182

60

CrowdStrike ties Oracle EBS RCE (CVE-2025

Security AffairsOct 7, 08:42 UTC · Oct 7, 2025Vulnerability in the wildCVE-2025-61882

60

Cacti Servers Under Attack as Majority Fail to Patch Critical Vulnerability

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2023Vulnerability in the wildCVE-2022-46169 CVE-2023-22952

60

Hard-Coded 'b' Password in Sitecore XP Sparks Major RCE Risk in Enterprise Deployments

The Hacker NewsJun 19, 03:14 UTC · Jun 19, 2025Vulnerability in the wildCVE-2025-34509 CVE-2025-34510 CVE-2025-34511+3 CVEs

60

Hackers Exploiting Unpatched Critical Atlassian Confluence Zero

The Hacker NewsJun 3, 09:27 UTC · Jun 3, 2022Vulnerability in the wildCVE-2022-26134 CVE-2021-26084

60

Server-side attacks, C&C in public clouds and other MDR cases we observed

Kaspersky SecurelistNov 2, 08:00 UTC · Nov 2, 2022Vulnerability

30

Warning: New Malware Emerges in Attacks Exploiting Ivanti VPN Vulnerabilities

The Hacker NewsFeb 2, 04:53 UTC · Feb 2, 2024Vulnerability in the wildCVE-2023-46805 CVE-2024-21887 CVE-2024-21888+1 CVEs

60

Why Cyber Command’s latest warning is a win for the government's information sharing efforts

CyberScoopJul 11, 18:16 UTC · Jul 11, 2019Vulnerability CVE-2017-11774

47

Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy Secure

The Hacker NewsJan 11, 06:31 UTC · Jan 11, 2025Vulnerability in the wildCVE-2025-0282 CVE-2025-0283

60

CISA recommends immediately patch Exchange ProxyShell flaws

Security AffairsAug 23, 20:22 UTC · Aug 23, 2021Vulnerability in the wildCVE-2021-34473 CVE-2021-34523 CVE-2021-31207

60

Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure

The Hacker NewsMar 9, 18:22 UTC · Mar 9, 2026Vulnerability

55

Chinese Hackers Use Trusted ArcGIS App For Year

Infosecurity MagazineOct 14, 13:00 UTC · Oct 14, 2025Vulnerability

55

February 2026 CVE Landscape: 13 Critical Vulnerabilities Mark 43% Drop from January

Recorded FutureMar 13, 00:00 UTC · Mar 13, 2026Vulnerability in the wildCVE-2025-15556 CVE-2026-21513 CVE-2026-21533+4 CVEs1

60

CISA Warns of Actively Exploited Critical Zoho ManageEngine ServiceDesk Vulnerability

The Hacker NewsDec 3, 13:34 UTC · Dec 3, 2021Vulnerability in the wildCVE-2021-44077 CVE-2021-40539

60

UNC215, an alleged China

Security AffairsAug 11, 17:28 UTC · Aug 11, 2021Vulnerability CVE-2019-0604

60

Multiple Hacker Groups Exploit 3-Year-Old Vulnerability to Breach U.S. Federal Agency

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2023Vulnerability in the wildCVE-2019-18935 CVE-2017-11317 CVE-2017-11357

60

Citrix Devices Under Attack: NetScaler Flaw Exploited to Capture User Credentials

The Hacker NewsOct 10, 05:52 UTC · Oct 10, 2023Vulnerability CVE-2023-3519 CVE-2023-45208

60

New Critical RCE Vulnerability Discovered in Apache Struts 2

The Hacker NewsDec 18, 04:47 UTC · Dec 18, 2023Vulnerability in the wildCVE-2023-50164 CVE-2017-5638

60

.NET SOAPwn Flaw Opens Door for File Writes and Remote Code Execution via Rogue WSDL

The Hacker NewsDec 11, 04:19 UTC · Dec 11, 2025Vulnerability CVE-2025-34392 CVE-2025-13659

47

Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware

The Hacker NewsJun 2, 10:07 UTC · Jun 2, 2025Vulnerability CVE-2025-32432 CVE-2021-44228 CVE-2022-26134+1 CVEs

47

cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2026-419401

60

Turning Criminal Forum Exploit Chatter Into Vulnerability Risk Analysis

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability CVE-2016-3081 CVE-2015-2419 CVE-2015-4852+1 CVEs

47

Analyzing the cyber attack landscape of the Dark Web.

Security AffairsJun 12, 04:52 UTC · Jun 12, 2017Vulnerability

30

Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged

Security AffairsJul 24, 12:10 UTC · Jul 24, 2026Vulnerability CVE-2021-4034 CVE-2021-3156 CVE-2017-72691

35

Kaspersky report on APT trends in Q3 2024

Kaspersky SecurelistNov 28, 10:00 UTC · Nov 28, 2024Vulnerability1

42

Chinese Spy Group FamousSparrow Back with a Vengeance, Targets US

Infosecurity MagazineMar 27, 11:30 UTC · Mar 27, 2025Vulnerability

42

Ongoing Xurum attacks target Magento 2 e

Security AffairsAug 14, 17:46 UTC · Aug 14, 2023Vulnerability CVE-2022-24086 CVE-2016-5195

47

Cisco Fixes Critical Privilege Escalation Flaw in Meeting Management (CVSS 9.9)

The Hacker NewsJan 23, 08:44 UTC · Jan 23, 2025Vulnerability in the wildCVE-2025-20156 CVE-2025-20165 CVE-2025-20128+4 CVEs1

60

Attacks within the Dark Web

Help Net SecurityMay 31, 00:00 UTC · May 31, 2017Vulnerability

30

PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks

The Hacker NewsApr 27, 14:07 UTC · Apr 27, 2026Vulnerability

42