Operation “Armor Piercer:” Targeted attacks in the Indian subcontinent using commercial RATsCisco Talos·Sep 23, 12:01 UTC · Sep 23, 2021Vulnerability42
New malicious web shell from the Tropic Trooper group is found in the Middle EastKaspersky Securelist·Sep 5, 08:02 UTC · Sep 5, 2024Vulnerability in the wildCVE-2021-34473CVE-2021-34523CVE-2021-31207+1 CVEs60
DragonRank, a Chinese-speaking SEO manipulator service providerCisco Talos·Sep 10, 04:00 UTC · Sep 10, 2024Vulnerability42
ToddyCat: Keep calm and check logsKaspersky Securelist·Oct 12, 10:41 UTC · Oct 12, 2023Vulnerability42
ToddyCat: Unveiling an unknown APT actor attacking highKaspersky Securelist·Jun 21, 10:00 UTC · Jun 21, 2022Vulnerability42
DoNot’s Firestarter abuses Google Firebase Cloud Messaging to spreadCisco Talos·Oct 29, 12:00 UTC · Oct 29, 2020Vulnerability42
Weaponization of Excel Add-Ins Part 2: Dridex Infection Chain Case StudiesPalo Alto Unit 42·Jun 5, 20:44 UTC · Jun 5, 2024Vulnerability30
11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure BootThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026VulnerabilityCVE-2026-8863CVE-2026-1079747
SideWinder APT attacks in H2 2024Kaspersky Securelist·Mar 10, 10:01 UTC · Mar 10, 2025VulnerabilityCVE-2017-1188247
Kaspersky report on APT trends in Q3 2024Kaspersky Securelist·Nov 28, 10:00 UTC · Nov 28, 2024Vulnerability42
PlugX Uses Legitimate Samsung Application for DLL SidePalo Alto Unit 42·Nov 1, 09:43 UTC · Nov 1, 2018VulnerabilityCVE-2012-015835
The Mystery of Duqu: Part FiveKaspersky Securelist·Nov 15, 18:15 UTC · Nov 15, 2011VulnerabilityCVE-2011-340235
SideWinder APT’s postKaspersky Securelist·Oct 15, 10:00 UTC · Oct 15, 2024VulnerabilityCVE-2017-1188247
Critical Boot Loader Vulnerability in Shim Impacts Nearly All Linux DistrosThe Hacker News·Feb 8, 03:11 UTC · Feb 8, 2024VulnerabilityCVE-2023-40547CVE-2023-40546CVE-2023-40548+3 CVEs60
ThreatsDay Bulletin: $15B Crypto Bust, Satellite Spying, BillionThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Vulnerability55
New Chrome Vulnerability Enables Cross-Origin Data Leak via Loader Referrer PolicyThe Hacker News·May 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-4664CVE-2025-278360
No one knows how many old shims can still bypass UEFI Secure BootHelp Net Security·Jul 14, 00:00 UTC · Jul 14, 2026VulnerabilityCVE-2026-8863CVE-2026-10797CVE-2015-528135
ThreatsDay Bulletin: AI Prompt RCE, Claude 0-Click, RenEngine Loader, Auto 0The Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026VulnerabilityCVE-2026-2084147
The game is over: when “free” comes at too high a price. What we know about RenEngineKaspersky Securelist·Feb 11, 14:00 UTC · Feb 11, 2026Vulnerability30
Russia-Nexus UAC-0113 Emulating Telecommunication Providers in UkraineRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Vulnerability42
UAT-6382 exploits Cityworks zeroCisco Talos·May 22, 10:00 UTC · May 22, 2025Vulnerability in the wildCVE-2025-0994CVE-2025-094460
A new version of Triada spreads embedded in the firmware of Android devicesKaspersky Securelist·Apr 25, 10:00 UTC · Apr 25, 2025Vulnerability42
Magecart Hackers Hide in 404 Error PagesInfosecurity Magazine·Oct 10, 09:30 UTC · Oct 10, 2023Vulnerability42
Aoqin Dragon APT targets entities in Southeast Asia and AustraliaSecurity Affairs·Jun 9, 14:53 UTC · Jun 9, 2022VulnerabilityCVE-2012-0158CVE-2010-333347
Visa warns of new sophisticated credit card skimmer dubbed BakaSecurity Affairs·Sep 6, 14:14 UTC · Sep 6, 2020Vulnerability30
57 payment gateways from Germany to Brazil targetedSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability30
APT28 Uses Microsoft Office CVE-2026-21509 in EspionageThe Hacker News·Feb 4, 16:49 UTC · Feb 4, 2026VulnerabilityCVE-2026-21509147
MosaicRegressor: Lurking in the Shadows of UEFIKaspersky Securelist·Oct 5, 10:00 UTC · Oct 5, 2020Vulnerability42
Chthonic: a new modification of ZeuSKaspersky Securelist·Dec 18, 11:00 UTC · Dec 18, 2014VulnerabilityCVE-2014-176147
Cloud Atlas: RedOctober APT is back in styleKaspersky Securelist·Dec 10, 10:03 UTC · Dec 10, 2014VulnerabilityCVE-2012-015847
Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers SayThe Hacker News·Jul 24, 07:18 UTC · Jul 24, 2026Vulnerability in the wildCVE-2026-25589CVE-2026-2524360
Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux ServersThe Hacker News·Apr 3, 15:32 UTC · Apr 3, 2026Vulnerability142
ThreatsDay Bulletin: OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ StoriesThe Hacker News·Feb 23, 10:23 UTC · Feb 23, 2026Vulnerability55
China-linked Amaranth-Dragon hackers target Southeast Asian governments in 2025Security Affairs·Feb 5, 10:09 UTC · Feb 5, 2026VulnerabilityCVE-2025-808847