Search: “Payload”

327 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 3819 Ransomware 1384 Vulnerability 1334 Threat actor 766 Exploit / PoC 749 Data breach 273 Phishing & fraud 190 AI safety & security 67 Industry 48 Policy & legal 47 Research 32 Advisory 29 Tools 19 AI tools & infra 19

SeverityAll critical 2465 high 3859 medium 2217 low 155 info 93

Tropic Trooper Targets Taiwanese Government and Fossil Fuel Provider With Poison Ivy

Palo Alto Unit 42Nov 1, 10:39 UTC · Nov 1, 2018Vulnerability CVE-2012-0158

35

Fresh Baked HOMEKit-made Cookles

Palo Alto Unit 42Nov 1, 10:21 UTC · Nov 1, 2018Vulnerability CVE-2012-0158

35

The game is over: when “free” comes at too high a price. What we know about RenEngine

Kaspersky SecurelistFeb 11, 14:00 UTC · Feb 11, 2026Vulnerability

30

The Blockbuster Sequel

Palo Alto Unit 42Jan 28, 20:33 UTC · Jan 28, 2022Vulnerability

30

Evilgrab Delivered by Watering Hole Attack on President of Myanmar’s Website

Palo Alto Unit 42Nov 1, 09:46 UTC · Nov 1, 2018Vulnerability CVE-2014-6332

35

Following the LNK metadata trail

Cisco TalosJan 19, 13:00 UTC · Jan 19, 2023Vulnerability CVE-2015-0096

35

Digital skimmer runs entirely on Google, defeats CSP

Sansec (Magento / e-commerce security)Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability

30

“Cyber Conflict” Decoy Document Used In Real Cyber Conflict

Cisco TalosOct 22, 16:22 UTC · Oct 22, 2017Vulnerability

30

ProjectM: Link Found Between Pakistani Actor and Operation Transparent Tribe

Palo Alto Unit 42Nov 1, 10:11 UTC · Nov 1, 2018Vulnerability CVE-2010-3333 CVE-2012-0158

35

Korea In The Crosshairs

Cisco TalosJan 16, 05:57 UTC · Jan 16, 2018Vulnerability CVE-2013-0808 CVE-2017-0199

35

Playing Cat and Mouse: Three Techniques Abused to Avoid Detection

Security AffairsMay 23, 10:17 UTC · May 23, 2019Vulnerability CVE-2017-0199

35

“Keeper” Magecart Group Infects 570 Sites

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability

30

Weaponization of Excel Add-Ins Part 2: Dridex Infection Chain Case Studies

Palo Alto Unit 42Jun 5, 20:44 UTC · Jun 5, 2024Vulnerability

30

Hackers can abuse Microsoft Teams updater to deliver malicious payloads

Security AffairsAug 6, 05:12 UTC · Aug 6, 2020Vulnerability

30

Korean MalDoc Drops Evil New Years Presents

Cisco TalosFeb 23, 15:00 UTC · Feb 23, 2017Vulnerability

30

The Mystery of Duqu: Part Five

Kaspersky SecurelistNov 15, 18:15 UTC · Nov 15, 2011Vulnerability CVE-2011-3402

35

New Cyber Operation Targets Italy: Digging Into the Netwire Attack Chain

Security AffairsJun 5, 18:26 UTC · Jun 5, 2020Vulnerability

30

GOFFEE’s recent attacks: new tools and techniques

Kaspersky SecurelistApr 10, 10:00 UTC · Apr 10, 2025Vulnerability1

30

Experts warn of a 600X increase in P2Pinfect traffic

Security AffairsSep 22, 08:45 UTC · Sep 22, 2023Vulnerability CVE-2022-0543

35

Paranoid PlugX

Palo Alto Unit 42Jul 2, 23:57 UTC · Jul 2, 2020Vulnerability CVE-2017-0199

35

Server-side attacks, C&C in public clouds and other MDR cases we observed

Kaspersky SecurelistNov 2, 08:00 UTC · Nov 2, 2022Vulnerability

30

New Sofacy Attacks Against US Government Agency

Palo Alto Unit 42Nov 1, 10:16 UTC · Nov 1, 2018Vulnerability CVE-2015-1641

35

Inline Normalization with Snort 2.9.0

Cisco TalosNov 15, 18:18 UTC · Nov 15, 2010Vulnerability

30

Attackers exploiting a FortiClient EMS vulnerability in the wild

Kaspersky SecurelistDec 19, 12:00 UTC · Dec 19, 2024Vulnerability CVE-2023-48788

35

Two more malicious Python packages in the PyPI

Kaspersky SecurelistAug 16, 12:13 UTC · Aug 16, 2022Vulnerability1

30

Underminer Exploit Kit spreading Bootkits and cryptocurrency miners

Security AffairsJul 29, 08:54 UTC · Jul 29, 2018Vulnerability CVE-2015-5119 CVE-2016-0189 CVE-2018-4878

35

Flash 0-Day In The Wild: Group 123 At The Controls

Cisco TalosFeb 2, 16:27 UTC · Feb 2, 2018Vulnerability CVE-2018-4878

35

Targeted exploit for CVE-2013

Kaspersky SecurelistOct 3, 22:44 UTC · Oct 3, 2013Vulnerability CVE-2013-3893

35

Top 3 MS Office Exploits Hackers Use in 2025

The Hacker NewsMar 27, 10:00 UTC · Mar 27, 2025Vulnerability CVE-2017-11882 CVE-2022-30190

35

China-linked group hacked Tibetan media and university sites to distribute Cobalt Strike payload

The RecordNov 13, 03:38 UTC · Nov 13, 2024Vulnerability

30

Kaspersky crimeware report: Emotet, DarkGate and LokiBot

Kaspersky SecurelistAug 3, 10:00 UTC · Aug 3, 2023Vulnerability CVE-2017-0199 CVE-2017-11882

35

Some Worms Use Their Powers for Good

The Hacker NewsJul 4, 13:07 UTC · Jul 4, 2022Vulnerability

30

Attracting flies with Honey(gain): Adversarial abuse of proxyware

Cisco TalosAug 31, 11:52 UTC · Aug 31, 2021Vulnerability

30

Uncovering New Magecart Implant Attacking eCommerce

Security AffairsFeb 19, 15:13 UTC · Feb 19, 2020Vulnerability1

30

Severe flaws in most popular programming languages could expose to hack any secure application built on top of them

Security AffairsDec 10, 14:30 UTC · Dec 10, 2017Vulnerability

30

Using byte_jump as a Detection Mechanism

Cisco TalosJan 25, 17:20 UTC · Jan 25, 2010Vulnerability

30

Time to check if you ran any of these 33 malicious Chrome extensions

Ars Technica · SecurityJan 3, 12:15 UTC · Jan 3, 2025Vulnerability

30

Malicious Tor Browser spreads through YouTube

Kaspersky SecurelistOct 4, 10:00 UTC · Oct 4, 2022Vulnerability

30

Bug bounty hacker earned $5,000 reporting a Stored XSS flaw in iCloud.com

Security AffairsFeb 21, 17:13 UTC · Feb 21, 2021Vulnerability

30

A Deep Dive into Lokibot Infection Chain

Cisco TalosJan 6, 14:00 UTC · Jan 6, 2021Vulnerability

30