Search: “ShadowPad”

46 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 79 Vulnerability 46 Threat actor 39 Exploit / PoC 20 Ransomware 17 Data breach 8 Advisory 2 Policy & legal 1

SeverityAll critical 84 high 121 medium 7 low 0 info 0

Attackers deliver ShadowPad via newly patched WSUS RCE bug

Security AffairsNov 24, 12:35 UTC · Nov 24, 2025Vulnerability in the wildCVE-2025-59287

60

ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access

The Hacker NewsNov 30, 09:05 UTC · Nov 30, 2025Vulnerability CVE-2025-592871

60

Chinese Hackers Targeting South American Diplomatic Entities with ShadowPad

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2023Vulnerability CVE-2022-29464

60

Hackers target Pakistani government, bank and telecom provider with China

The RecordJul 14, 16:39 UTC · Jul 14, 2023Vulnerability

42

APT trends report Q2 2020

Kaspersky SecurelistJul 29, 10:00 UTC · Jul 29, 2020Vulnerability CVE-2019-10149

47

Continued Targeting of Indian Power Grid Assets by Chinese State

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Vulnerability

55

Chinese Hackers Infiltrate South American Diplomatic Networks

Infosecurity MagazineFeb 14, 17:00 UTC · Feb 14, 2023Vulnerability

30

ShadowPad-Associated Hackers Targeted Asian Governments

Infosecurity MagazineSep 13, 17:00 UTC · Sep 13, 2022Vulnerability

42

⚡ Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More

The Hacker NewsDec 2, 05:36 UTC · Dec 2, 2025Vulnerability CVE-2025-59287 CVE-2025-12972 CVE-2025-12970+17 CVEs

47

Chinese Hacker Groups Continue to Target Indian Power Grid Assets

The Hacker NewsApr 10, 15:05 UTC · Apr 10, 2022Vulnerability

55

APT trends report Q2 2021

Kaspersky SecurelistJul 29, 10:00 UTC · Jul 29, 2021Vulnerability

42

APT Trends report Q3 2017

Kaspersky SecurelistNov 14, 09:41 UTC · Nov 14, 2017Vulnerability CVE-2017-0199

47

China-linked RedEcho APT took down part of its C2 domains

Security AffairsMar 29, 17:54 UTC · Mar 29, 2021Vulnerability

55

Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged

Security AffairsJul 24, 12:10 UTC · Jul 24, 2026Vulnerability CVE-2021-4034 CVE-2021-3156 CVE-2017-7269

35

China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists

The Hacker NewsMay 2, 06:30 UTC · May 2, 2026Vulnerability CVE-2025-55182

60

China-linked Group RedEcho Targets the Indian Power Sector Amid Heightened Border Tensions

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Vulnerability

55

SentinelOne Warns Cybersecurity Vendors of Chinese Attacks

Infosecurity MagazineJun 10, 10:30 UTC · Jun 10, 2025Vulnerability CVE-2024-8963 CVE-2024-8190

60

Chinese Spy Group FamousSparrow Back with a Vengeance, Targets US

Infosecurity MagazineMar 27, 11:30 UTC · Mar 27, 2025Vulnerability

42

New Report Uncovers 3 Distinct Clusters of China-Nexus Attacks on Southeast Asian Government

The Hacker NewsSep 25, 10:12 UTC · Sep 25, 2023Vulnerability

55

Suspected China-backed hackers target 7 Indian electricity grid centers

The RecordJan 13, 00:00 UTC · Jan 13, 2023Vulnerability

55

Hackers Exploiting Abandoned Boa Web Servers to Target Critical Industries

The Hacker NewsNov 24, 05:54 UTC · Nov 24, 2022Vulnerability CVE-2017-9833 CVE-2021-33558

60

China-Linked Hackers Target India’s Power Grid Amid Border Clashes

The RecordNov 17, 00:00 UTC · Nov 17, 2022Vulnerability

42

Winnti continues to target game developers in Russia and out of China

Security AffairsJan 15, 14:14 UTC · Jan 15, 2021Vulnerability CVE-2020-0796

47

Hacker Runs Hermes AI Agent Unattended for Post

The Hacker NewsJul 24, 10:15 UTC · Jul 24, 2026Vulnerability CVE-2026-31431 CVE-2026-43284 CVE-2026-43500+2 CVEs

35

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

The Hacker NewsJul 8, 05:07 UTC · Jul 8, 2026Vulnerability CVE-2024-42009 CVE-2025-49113

60

CISA gives agencies two weeks to patch video conferencing bug exploited by Chinese hackers

The RecordJun 26, 00:00 UTC · Jun 26, 2026Vulnerability CVE-2026-3502

60

Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitation

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Vulnerability

42

FamousSparrow targets Azerbaijani energy sector in multi

Security AffairsMay 14, 08:17 UTC · May 14, 2026Vulnerability

55

⚡ Weekly Recap: Firewall Exploits, AI Data Theft, Android Hacks, APT Attacks, Insider Leaks & More

The Hacker NewsDec 27, 07:49 UTC · Dec 27, 2025Vulnerability CVE-2025-20393 CVE-2025-40602 CVE-2025-23006+22 CVEs

60

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

The Hacker NewsDec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-29927 CVE-2025-66478

60

China-linked hackers exploit patched ToolShell flaw to breach Middle East telecom

Security AffairsOct 24, 08:37 UTC · Oct 24, 2025Vulnerability in the wildCVE-2025-53770 CVE-2021-36942

60

Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch

The Hacker NewsOct 22, 12:56 UTC · Oct 22, 2025Vulnerability CVE-2025-53770 CVE-2025-49704 CVE-2025-49706+1 CVEs

60

Chinese Threat Group 'Jewelbug' Quietly Infiltrated Russian IT Network for Months

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Vulnerability2

42

Chinese ‘FamousSparrow’ hackers back from the dead and targeting North America, researchers say

The RecordMar 26, 16:38 UTC · Mar 26, 2025Vulnerability

42

Kaspersky report on APT trends in Q3 2024

Kaspersky SecurelistNov 28, 10:00 UTC · Nov 28, 2024Vulnerability

42

Chinese Tonto Team Hackers' Second Attempt to Target Cybersecurity Firm Group

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2023Vulnerability

42

Chinese gov’t hackers using ‘diverse’ toolset to target Asian prime ministers, telecoms

The RecordJan 10, 00:00 UTC · Jan 10, 2023Vulnerability CVE-2020-1472

60

Indian power generation giant Tata Power hit by a cyber attack

Security AffairsOct 15, 10:22 UTC · Oct 15, 2022Vulnerability

55

Earth Lusca Hackers Aimed at High-Value Targets in Government and Private Sectors

The Hacker NewsJan 18, 08:02 UTC · Jan 18, 2022Vulnerability

30

ESET: More Than 10 APT Groups Exploiting Recent Microsoft Exchange Vulnerabilities

Infosecurity MagazineMar 10, 15:18 UTC · Mar 10, 2021Vulnerability

55