New malicious web shell from the Tropic Trooper group is found in the Middle EastKaspersky Securelist·Sep 5, 08:02 UTC · Sep 5, 2024Vulnerability in the wildCVE-2021-34473CVE-2021-34523CVE-2021-31207+1 CVEs60
Log4j Vulnerability AftermathSecurity Affairs·Dec 21, 08:04 UTC · Dec 21, 2021Vulnerability in the wildCVE-2021-44228160
AI-powered honeypots: Turning the tables on malicious AI agentsCisco Talos·Apr 29, 10:00 UTC · Apr 29, 2026VulnerabilityCVE-2014-627160
China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems WorldwideThe Hacker News·May 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-31324CVE-2025-4299960
Containers on fire: from container escapes to supply chain attacksKaspersky Securelist·Jun 1, 10:00 UTC · Jun 1, 2026Vulnerability in the wildCVE-2019-5736CVE-2022-0492CVE-2024-21626160
Rocke: The Champion of Monero MinersCisco Talos·Aug 30, 15:26 UTC · Aug 30, 2018VulnerabilityCVE-2017-10271CVE-2017-306660
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against UniversitiesThe Hacker News·Jul 8, 05:07 UTC · Jul 8, 2026VulnerabilityCVE-2024-42009CVE-2025-4911360
Chinese APT Weaver Ant infiltrated a telco for over four yearsSecurity Affairs·Mar 24, 20:36 UTC · Mar 24, 2025Vulnerability55
UAT-5918 Targets Taiwan's Critical Infrastructure Using Web Shells and OpenThe Hacker News·Mar 21, 13:54 UTC · Mar 21, 2025Vulnerability55
Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy SecureThe Hacker News·Jan 11, 06:31 UTC · Jan 11, 2025Vulnerability in the wildCVE-2025-0282CVE-2025-028360
Week in review: New DNS vulnerabilities, benefits of cyber threat intelligence, FBI removes web shellsHelp Net Security·Apr 18, 00:00 UTC · Apr 18, 2021Vulnerability55
PolyShell: unrestricted file upload in Magento and Adobe CommerceSansec (Magento / e-commerce security)·May 12, 10:55 UTC · May 12, 2026Vulnerability in the wild60
CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)Help Net Security·Apr 29, 00:00 UTC · Apr 29, 2026Vulnerability in the wildCVE-2026-32202CVE-2026-21510CVE-2026-21513160
React2Shell Vulnerability Actively Exploited to Deploy Linux BackdoorsThe Hacker News·Dec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182CVE-2025-29927CVE-2025-6647860
UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP RootkitThe Hacker News·Jul 26, 11:34 UTC · Jul 26, 2025VulnerabilityCVE-2021-20035CVE-2021-20038CVE-2021-20039+2 CVEs60
Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy GolangThe Hacker News·May 9, 07:00 UTC · May 9, 2025VulnerabilityCVE-2025-31324160
Unmasking the new persistent attacks on JapanCisco Talos·Mar 6, 11:00 UTC · Mar 6, 2025VulnerabilityCVE-2024-4577160
An Ancient Crystal from the Sahara Reveals a Lost World of Martian Water404 Media·Nov 23, 14:00 UTC · Nov 23, 2024Vulnerability55
New Mirai Variant Targets WebSVN Command Injection Vulnerability (CVE-2021Palo Alto Unit 42·Jun 6, 12:14 UTC · Jun 6, 2024VulnerabilityCVE-2021-3230560
Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203)Help Net Security·Jul 20, 07:53 UTC · Jul 20, 2023Vulnerability in the wildCVE-2023-29298CVE-2023-38203CVE-2023-29300+2 CVEs60
Active exploitation of the MOVEit Transfer vulnerability — CVE-2023Cisco Talos·Jun 16, 18:17 UTC · Jun 16, 2023Vulnerability in the wildCVE-2023-34362CVE-2023-35036CVE-2023-3570860
CVE-2022-41040 and CVE-2022-41082 – zeroKaspersky Securelist·Dec 19, 16:07 UTC · Dec 19, 2022VulnerabilityCVE-2022-41040CVE-2022-41082CVE-2021-34473+2 CVEs60
WARNING: New Unpatched Microsoft Exchange ZeroThe Hacker News·Oct 3, 08:22 UTC · Oct 3, 2022Vulnerability in the wild60
CISCO fixed 3 critical issues in Elastic Services Controller and Ultra Services FrameworkSecurity Affairs·Jul 6, 08:22 UTC · Jul 6, 2017VulnerabilityCVE-2017-6713CVE-2017-6712CVE-2017-6711+2 CVEs60
Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's ServersThe Hacker News·Jul 24, 11:45 UTC · Jul 24, 2026VulnerabilityCVE-2026-32194CVE-2026-32191CVE-2016-3714160
cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager BackdoorThe Hacker News·May 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2026-41940160
Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of DisclosureThe Hacker News·Apr 24, 05:28 UTC · Apr 24, 2026Vulnerability in the wildCVE-2026-3998760
Atlassian Confluence bug CVE-2022-26134 exploited in cryptocurrency mining campaignSecurity Affairs·Sep 22, 11:06 UTC · Sep 22, 2022Vulnerability in the wildCVE-2022-2613460
Experts found 14 new flaws in BusyBoxSecurity Affairs·Nov 10, 11:38 UTC · Nov 10, 2021VulnerabilityCVE-2021-42373CVE-2021-42374CVE-2021-42375+11 CVEs60
FBI issues flash alert on Apache Struts vulnerabilityCyberScoop·Oct 3, 13:15 UTC · Oct 3, 2017Vulnerability in the wildCVE-2017-563860
Microsoft Updates November 2012 – IE, Kernel+Shell, and .NET Critical PatchesKaspersky Securelist·Nov 13, 22:25 UTC · Nov 13, 2012Vulnerability in the wildCVE-2012-289760
Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums RegionThe Hacker News·Jul 21, 07:53 UTC · Jul 21, 2026Vulnerability55
Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scamsHelp Net Security·May 10, 00:00 UTC · May 10, 2026Vulnerability in the wildCVE-2026-41940CVE-2026-4670CVE-2026-5174+4 CVEs60
February 2026 CVE Landscape: 13 Critical Vulnerabilities Mark 43% Drop from JanuaryRecorded Future·Mar 13, 00:00 UTC · Mar 13, 2026Vulnerability in the wildCVE-2025-15556CVE-2026-21513CVE-2026-21533+4 CVEs160
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical InfrastructureThe Hacker News·Mar 9, 18:22 UTC · Mar 9, 2026Vulnerability55
CVE-2026-1731 fuels ongoing attacks on BeyondTrust remote access productsSecurity Affairs·Feb 23, 12:09 UTC · Feb 23, 2026Vulnerability in the wildCVE-2026-173160
Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to TargetsThe Hacker News·Jul 11, 04:04 UTC · Jul 11, 2025Vulnerability55
Chinese-Speaking Hacker Group Targets Human Rights Studies in Middle EastThe Hacker News·Sep 5, 16:19 UTC · Sep 5, 2024VulnerabilityCVE-2023-26360CVE-2021-34473CVE-2021-34523+1 CVEs60
Citrix Devices Under Attack: NetScaler Flaw Exploited to Capture User CredentialsThe Hacker News·Oct 10, 05:52 UTC · Oct 10, 2023VulnerabilityCVE-2023-3519CVE-2023-4520860