Discovery of Alchimist C2 tool, revealed a new attack frameworkSecurity Affairs·Oct 13, 14:59 UTC · Oct 13, 2022VulnerabilityCVE-2021-403447
Vulnerability Spotlight: Multiple remote code execution vulnerabilities in Microsoft Azure SphereCisco Talos·Apr 14, 13:59 UTC · Apr 14, 2021Vulnerability in the wildCVE-2021-27047CVE-2021-27080CVE-2021-28460160
CVE-2019-0803 Windows flaw exploited to deliver PowerShell BackdoorSecurity Affairs·Apr 16, 07:03 UTC · Apr 16, 2019VulnerabilityCVE-2019-0803CVE-2019-0859160
Traps Prevents In-The-Wild VBScript ZeroPalo Alto Unit 42·Sep 7, 12:00 UTC · Sep 7, 2018Vulnerability in the wildCVE-2018-8373CVE-2018-817460
Flash 0-Day In The Wild: Group 123 At The ControlsCisco Talos·Feb 2, 16:27 UTC · Feb 2, 2018VulnerabilityCVE-2018-487835
How Malformed RTF Defeats Security EnginesCisco Talos·Mar 23, 15:45 UTC · Mar 23, 2017VulnerabilityCVE-2016-719335
New activity of the Blue Termite APTKaspersky Securelist·Aug 20, 10:55 UTC · Aug 20, 2015VulnerabilityCVE-2015-511947
Who’s Really Spreading through the Bright Star?Kaspersky Securelist·Mar 4, 17:14 UTC · Mar 4, 2015Vulnerability42
Quarian: Reversing the C&C ProtocolCisco Talos·Dec 6, 14:41 UTC · Dec 6, 2012VulnerabilityCVE-2010-018835
The Duqu Saga Continues: Enter Mr. B. Jason and TV’s DexterKaspersky Securelist·Nov 10, 09:19 UTC · Nov 10, 2011VulnerabilityCVE-2011-340235
Hacker Runs Hermes AI Agent Unattended for PostThe Hacker News·Jul 24, 10:15 UTC · Jul 24, 2026VulnerabilityCVE-2026-31431CVE-2026-43284CVE-2026-43500+2 CVEs35
UAC-0247 Targets Ukrainian Clinics and Government in DataThe Hacker News·Jun 27, 16:30 UTC · Jun 27, 2026Vulnerability30
OceanLotus Hits Vietnam Investors With SPECTRALVIPER in FireAnt AttackThe Hacker News·Jun 11, 09:45 UTC · Jun 11, 2026Vulnerability142
Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange ExploitationThe Hacker News·May 15, 00:00 UTC · May 15, 2026Vulnerability42
Friday Squid Blogging: Giant Squid Live in the Waters of Western AustraliaSchneier on Security·May 8, 21:03 UTC · May 8, 2026Vulnerability30
FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security PatchesThe Hacker News·Apr 25, 08:20 UTC · Apr 25, 2026VulnerabilityCVE-2025-20333CVE-2025-2036260
US, UK agencies warn hackers were hiding on Cisco firewalls long after patches were appliedCyberScoop·Apr 23, 20:25 UTC · Apr 23, 2026Vulnerability in the wildCVE-2025-20333CVE-2025-2036260
Notepad++ patches flaw used to hijack update systemSecurity Affairs·Feb 18, 19:28 UTC · Feb 18, 2026VulnerabilityCVE-2026-25926160
ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System AccessThe Hacker News·Nov 30, 09:05 UTC · Nov 30, 2025VulnerabilityCVE-2025-59287160
Fake "Windows Update" screen fuels new wave of ClickFix attacksHelp Net Security·Nov 28, 10:21 UTC · Nov 28, 2025Vulnerability30
AI-Enhanced Tuoni Framework Targets Major US Real Estate FirmInfosecurity Magazine·Nov 18, 14:45 UTC · Nov 18, 2025Vulnerability30
Researchers Detail Tuoni C2's Role in an Attempted 2025 RealThe Hacker News·Nov 18, 14:00 UTC · Nov 18, 2025Vulnerability30
Chinese Threat Group 'Jewelbug' Quietly Infiltrated Russian IT Network for MonthsThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Vulnerability242
UAT-8099: Chinese-speaking cybercrime group targets highCisco Talos·Oct 2, 10:00 UTC · Oct 2, 2025Vulnerability42
Cybercriminal abuse of large language modelsCisco Talos·Jun 25, 10:00 UTC · Jun 25, 2025Vulnerability42
Kali Linux 2025.2 delivers Bloodhound CE, CARsenal, 13 new toolsHelp Net Security·Jun 14, 00:00 UTC · Jun 14, 2025Vulnerability30
SideWinder APT targets maritime and nuclear sectors with enhanced toolsetSecurity Affairs·Mar 11, 11:22 UTC · Mar 11, 2025VulnerabilityCVE-2017-1188260
PHP-CGI RCE Flaw Exploited in Attacks on Japan's Tech, Telecom, and EThe Hacker News·Mar 7, 05:42 UTC · Mar 7, 2025VulnerabilityCVE-2024-457747
PlushDaemon APT Targets South Korean VPN Provider in Supply Chain AttackThe Hacker News·Jan 24, 05:24 UTC · Jan 24, 2025Vulnerability42
Critical Flaws in WGS-804HPT Switches Enable RCE and Network ExploitationThe Hacker News·Jan 17, 14:08 UTC · Jan 17, 2025VulnerabilityCVE-2024-52558CVE-2024-52320CVE-2024-4887160
Kaspersky report on APT trends in Q3 2024Kaspersky Securelist·Nov 28, 10:00 UTC · Nov 28, 2024Vulnerability142
Lazarus Group Exploits Google Chrome Vulnerability to Control Infected DevicesThe Hacker News·Nov 4, 05:56 UTC · Nov 4, 2024VulnerabilityCVE-2024-494760
New Cyberattack Targets Chinese-Speaking Businesses with Cobalt Strike PayloadsThe Hacker News·Aug 30, 06:17 UTC · Aug 30, 2024Vulnerability55
Researchers Uncover Flaws in Windows Smart App Control and SmartScreenThe Hacker News·Aug 6, 04:00 UTC · Aug 6, 2024Vulnerability in the wild157
New SideWinder Cyber Attacks Target Maritime Facilities in Multiple CountriesThe Hacker News·Jul 31, 04:05 UTC · Jul 31, 2024VulnerabilityCVE-2017-0199CVE-2017-1188247
Void Banshee exploits CVE-2024-38112 zeroSecurity Affairs·Jul 17, 14:16 UTC · Jul 17, 2024Vulnerability in the wildCVE-2024-38112CVE-2021-4044460
Hackers infect users of antivirus service that delivered updates over HTTPArs Technica · Security·Apr 23, 21:03 UTC · Apr 23, 2024Vulnerability42
Phemedrone Stealer Targets Windows Defender Flaw Despite PatchInfosecurity Magazine·Jan 16, 17:15 UTC · Jan 16, 2024Vulnerability in the wildCVE-2023-3602560