Attackers Conducting Cryptojacking Operation Against U.S. Education OrganizationsPalo Alto Unit 42·Jun 6, 13:25 UTC · Jun 6, 2024Vulnerability42
Kaspersky report on APT trends in Q2 2024Kaspersky Securelist·Aug 13, 12:01 UTC · Aug 13, 2024VulnerabilityCVE-2024-309447
ToddyCat: Unveiling an unknown APT actor attacking highKaspersky Securelist·Jun 21, 10:00 UTC · Jun 21, 2022Vulnerability42
IT threat evolution Q2 2019Kaspersky Securelist·Aug 19, 10:00 UTC · Aug 19, 2019VulnerabilityCVE-2018-812047
Analysis of CVE-2018-8174 VBScript 0day and APT actor related to Office targeted attackSecurity Affairs·May 10, 05:31 UTC · May 10, 2018VulnerabilityCVE-2018-8174CVE-2017-019947
Evaluating the GCHQ Exceptional Access ProposalSchneier on Security·Jan 29, 08:02 UTC · Jan 29, 2020Vulnerability55
The Chronicles of the Hellsing APT: the Empire Strikes BackKaspersky Securelist·Apr 15, 02:30 UTC · Apr 15, 2015VulnerabilityCVE-2012-015847
Attackers injected novel DSLog backdoor into 670 vulnerable Ivanti devices (CVE-2024-21893)Help Net Security·Feb 15, 11:46 UTC · Feb 15, 2024VulnerabilityCVE-2024-21893CVE-2024-21888CVE-2023-46805+1 CVEs60
PolyShell: unrestricted file upload in Magento and Adobe CommerceSansec (Magento / e-commerce security)·May 12, 10:55 UTC · May 12, 2026Vulnerability in the wild60
CISA Warns of Backdoor Vulnerability in Contec Patient MonitorsInfosecurity Magazine·Feb 3, 17:15 UTC · Feb 3, 2025Vulnerability55
The BlueNoroff cryptocurrency hunt is still onKaspersky Securelist·Jan 13, 09:00 UTC · Jan 13, 2022VulnerabilityCVE-2017-019947
Backdoors inevitably create vulnerabilities that can be exploited by malicious actorsHelp Net Security·Apr 4, 00:00 UTC · Apr 4, 2019Vulnerability55
Tizi backdoor rooted Android devices by exploiting old vulnerabilitiesHelp Net Security·Jun 26, 21:21 UTC · Jun 26, 2018Vulnerability42
Hidden Tenda Router Backdoor Grants Admin Access, No Patch AvailableSecurity Affairs·Jul 7, 09:45 UTC · Jul 7, 2026VulnerabilityCVE-2026-1140547
SessionReaper, unauthenticated RCE in Magento & Adobe Commerce (CVE-2025Sansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability in the wildCVE-2025-54236260
React2Shell Vulnerability Actively Exploited to Deploy Linux BackdoorsThe Hacker News·Dec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182CVE-2025-29927CVE-2025-6647860
Kaspersky report on APT trends in Q3 2024Kaspersky Securelist·Nov 28, 10:00 UTC · Nov 28, 2024Vulnerability142
Container Escape to Shadow Admin: GKE Autopilot VulnerabilitiesPalo Alto Unit 42·Jun 5, 23:26 UTC · Jun 5, 2024VulnerabilityCVE-2020-855447
The Xz Backdoor Highlights the Vulnerability of Open Source Software—and Its Strengths404 Media·Apr 1, 14:16 UTC · Apr 1, 2024Vulnerability42
ToddyCat: Keep calm and check logsKaspersky Securelist·Oct 12, 10:41 UTC · Oct 12, 2023Vulnerability42
APT trends report Q2 2020Kaspersky Securelist·Jul 29, 10:00 UTC · Jul 29, 2020VulnerabilityCVE-2019-1014947
Hackers patch Citrix servers to deploy their own backdoorSecurity Affairs·Jan 19, 09:32 UTC · Jan 19, 2020Vulnerability in the wildCVE-2019-1978160
Spy agencies ban on Lenovo PCs due to backdoor vulnerabilitiesSecurity Affairs·Jul 29, 07:11 UTC · Jul 29, 2013Vulnerability55
China-Linked FishMonger Ports SprySOCKS to Windows With Kernel-Level Stealth and UEFI Bootkit HintsSecurity Affairs·Jun 17, 08:10 UTC · Jun 17, 2026VulnerabilityCVE-2023-2493247
cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager BackdoorThe Hacker News·May 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2026-41940160
Russia takes unusual route to hack StarlinkArs Technica · Security·Dec 11, 23:18 UTC · Dec 11, 2024Vulnerability42
Hackers Exploit PHP Vulnerability to Deploy Stealthy Msupedge BackdoorThe Hacker News·Aug 21, 03:50 UTC · Aug 21, 2024VulnerabilityCVE-2024-457760
Hacker Distributes Backdoored IoT Vulnerability Scanning Script to Hack Script KiddiesThe Hacker News·Nov 9, 07:03 UTC · Nov 9, 2017VulnerabilityCVE-2017-822547
“Red October” Diplomatic Cyber Attacks InvestigationKaspersky Securelist·Jan 14, 17:00 UTC · Jan 14, 2013VulnerabilityCVE-2009-3129CVE-2010-3333CVE-2012-0158+1 CVEs47
20+ Hijacked Government Websites Became an Attack ChannelThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Vulnerability42
OptinMonster supply chain attack hits 1.2 million sitesSansec (Magento / e-commerce security)·Jun 15, 18:34 UTC · Jun 15, 2026Vulnerability in the wild57
Chinese Groups Deploy New TTPs to Exploit Ivanti VulnerabilitiesInfosecurity Magazine·Apr 5, 15:00 UTC · Apr 5, 2024VulnerabilityCVE-2023-46805CVE-2024-21887CVE-2024-2189347
Friday Squid Blogging: Squids Are as Intelligent as DogsSchneier on Security·Feb 15, 00:00 UTC · Feb 15, 2020Vulnerability42
A Gift for Dalai Lama’s BirthdayKaspersky Securelist·Jul 4, 16:49 UTC · Jul 4, 2012VulnerabilityCVE-2012-015847
Custom Backdoor Exploiting Magic Packet Vulnerability in Juniper RoutersThe Hacker News·Jan 27, 14:09 UTC · Jan 27, 2025Vulnerability42
Hackers backdoored Cisco ASA devices via two zero-days (CVE-2024-20353, CVE-2024-20359)Help Net Security·Apr 24, 00:00 UTC · Apr 24, 2024VulnerabilityCVE-2024-20353CVE-2024-20359CVE-2024-2035860