Weaponization of Excel Add-Ins Part 2: Dridex Infection Chain Case StudiesPalo Alto Unit 42·Jun 5, 20:44 UTC · Jun 5, 2024Vulnerability30
PlugX Uses Legitimate Samsung Application for DLL SidePalo Alto Unit 42·Nov 1, 09:43 UTC · Nov 1, 2018VulnerabilityCVE-2012-015835
The Mystery of Duqu: Part FiveKaspersky Securelist·Nov 15, 18:15 UTC · Nov 15, 2011VulnerabilityCVE-2011-340235
No one knows how many old shims can still bypass UEFI Secure BootHelp Net Security·Jul 14, 00:00 UTC · Jul 14, 2026VulnerabilityCVE-2026-8863CVE-2026-10797CVE-2015-528135
The game is over: when “free” comes at too high a price. What we know about RenEngineKaspersky Securelist·Feb 11, 14:00 UTC · Feb 11, 2026Vulnerability30
Visa warns of new sophisticated credit card skimmer dubbed BakaSecurity Affairs·Sep 6, 14:14 UTC · Sep 6, 2020Vulnerability30
57 payment gateways from Germany to Brazil targetedSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability30
AI-Enhanced Tuoni Framework Targets Major US Real Estate FirmInfosecurity Magazine·Nov 18, 14:45 UTC · Nov 18, 2025Vulnerability30
How a machine-learning model in Kaspersky SIEM detected DLLKaspersky Securelist·Oct 6, 08:00 UTC · Oct 6, 2025VulnerabilityCVE-2021-2707635
Looney Tunables: New Linux Flaw Enables Privilege Escalation on Major DistributionsThe Hacker News·Oct 4, 14:57 UTC · Oct 4, 2023VulnerabilityCVE-2023-4911CVE-2021-3156CVE-2021-3560+2 CVEs35
Kaspersky crimeware report: Emotet, DarkGate and LokiBotKaspersky Securelist·Aug 3, 10:00 UTC · Aug 3, 2023VulnerabilityCVE-2017-0199CVE-2017-1188235
NSA Releases Guide to Mitigate BlackLotus Bootkit InfectionsInfosecurity Magazine·Jun 26, 16:30 UTC · Jun 26, 2023VulnerabilityCVE-2022-2189435
Windows 0-day exploit CVE-2019Kaspersky Securelist·Dec 10, 20:00 UTC · Dec 10, 2019VulnerabilityCVE-2019-145835
Bytecode - Covering the Android Vulnerabilities Master Key and Extra FieldCisco Talos·Aug 22, 18:11 UTC · Aug 22, 2013Vulnerability30
Digital skimmer runs entirely on Google, defeats CSPSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability30
8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency MiningThe Hacker News·Jul 7, 16:50 UTC · Jul 7, 2024VulnerabilityCVE-2017-3506CVE-2023-2183935
"Looney Tunables" bug allows root access on Linux distros (CVE-2023-4911)Help Net Security·Oct 5, 00:00 UTC · Oct 5, 2023VulnerabilityCVE-2023-491135
NSA Releases Guide to Combat Powerful BlackLotus Bootkit Targeting Windows SystemsThe Hacker News·Jun 24, 15:03 UTC · Jun 24, 2023VulnerabilityCVE-2022-21894CVE-2023-2493235
DragonSpark avoids detection using Golang code InterpretationSecurity Affairs·Jan 25, 11:01 UTC · Jan 25, 2023Vulnerability130
The Latest Flash UAF Vulnerabilities in Exploit KitsPalo Alto Unit 42·Jan 28, 21:24 UTC · Jan 28, 2022VulnerabilityCVE-2015-0311CVE-2015-0313CVE-2015-035935
Cycldek: Bridging the (air) gapKaspersky Securelist·Jun 3, 10:00 UTC · Jun 3, 2020VulnerabilityCVE-2012-0158CVE-2017-11882CVE-2018-0802135
Fbot re-emerged, the backstage .... ..... ......................Security Affairs·Feb 26, 08:38 UTC · Feb 26, 2020Vulnerability30
Process Doppelgänging Attack allows evading most security software on all Windows VersionsSecurity Affairs·Dec 7, 15:10 UTC · Dec 7, 2017Vulnerability30
Microsoft patches Windows to eliminate Secure Boot bypass threatArs Technica · Security·Jan 15, 00:00 UTC · Jan 15, 2025VulnerabilityCVE-2024-7344135
Multiple experts released exploits for Linux local privilege escalation flaw Looney TunablesSecurity Affairs·Oct 6, 13:50 UTC · Oct 6, 2023VulnerabilityCVE-2023-491135
New Sofacy Attacks Against US Government AgencyPalo Alto Unit 42·Nov 1, 10:16 UTC · Nov 1, 2018VulnerabilityCVE-2015-164135
Evilgrab Delivered by Watering Hole Attack on President of Myanmar’s WebsitePalo Alto Unit 42·Nov 1, 09:46 UTC · Nov 1, 2018VulnerabilityCVE-2014-633235
A Kernel Exploit for Sony PS4 Firmware 4.05 is available onlineSecurity Affairs·Dec 28, 11:04 UTC · Dec 28, 2017Vulnerability30
Android Extra Field Vulnerability Spotted in the WildCisco Talos·Jul 30, 14:47 UTC · Jul 30, 2013Vulnerability30
The Duqu Saga Continues: Enter Mr. B. Jason and TV’s DexterKaspersky Securelist·Nov 10, 09:19 UTC · Nov 10, 2011VulnerabilityCVE-2011-340235
Eleven Vulnerable UEFI Shims Enable Secure Boot BypassInfosecurity Magazine·Jul 15, 14:00 UTC · Jul 15, 2026VulnerabilityCVE-2026-8863CVE-2026-10797135
UAC-0247 Targets Ukrainian Clinics and Government in DataThe Hacker News·Jun 27, 16:30 UTC · Jun 27, 2026Vulnerability30
Nexcorium Mirai variant exploits TBK DVR flaw to launch DDoS attacksSecurity Affairs·Apr 18, 10:05 UTC · Apr 18, 2026VulnerabilityCVE-2024-3721CVE-2017-1721535
GPU Rowhammer Attack Enables Privilege EscalationInfosecurity Magazine·Apr 7, 15:05 UTC · Apr 7, 2026Vulnerability30
Fake "Windows Update" screen fuels new wave of ClickFix attacksHelp Net Security·Nov 28, 10:21 UTC · Nov 28, 2025Vulnerability30