Previously unseen Msupedge backdoor targeted a university in TaiwanSecurity Affairs·Aug 20, 17:27 UTC · Aug 20, 2024MalwareCVE-2024-457760
APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt StrikeCisco Talos·Aug 1, 12:00 UTC · Aug 1, 2024Threat actorCVE-2018-0824160
BlueSky Ransomware: Fast Encryption via MultithreadingPalo Alto Unit 42·Jun 5, 20:05 UTC · Jun 5, 2024RansomwareCVE-2020-0796CVE-2021-173260
500 million WinRAR users open to compromise via a 19-year-old flawHelp Net Security·Dec 14, 14:20 UTC · Dec 14, 2023Exploit / PoC60
Attackers target govt networks exploiting Fortinet SSL-VPN CVE-2022Security Affairs·Sep 8, 10:53 UTC · Sep 8, 2023Exploit / PoC in the wildCVE-2022-4247560
WinRAR 0-day that uses poisoned JPG and TXT files under exploit since AprilArs Technica · Security·Aug 23, 19:34 UTC · Aug 23, 2023Exploit / PoC in the wildCVE-2023-38831CVE-2018-2025060
FortiOS Flaw Exploited as Zero-Day in Attacks on Government and OrganizationsThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2023Exploit / PoCCVE-2022-4247560
FortiOS flaw was exploited to compromise governmental targets (CVE-2022-42475)Help Net Security·Jan 13, 00:00 UTC · Jan 13, 2023Vulnerability in the wildCVE-2022-4247560
CISA Issues Warning on Active Exploitation of UnRAR Software for Linux SystemsThe Hacker News·Aug 11, 03:56 UTC · Aug 11, 2022Ransomware in the wildCVE-2022-30333CVE-2022-3471360
Threat Source newsletter (June 16, 2022) — Three top takeaways from Cisco LiveCisco Talos·Jun 16, 18:00 UTC · Jun 16, 2022RansomwareCVE-2022-3013660
Windows MSHTML 0-Day Exploited to Deploy Cobalt Strike Beacon in Targeted AttacksThe Hacker News·Nov 12, 15:17 UTC · Nov 12, 2021RansomwareCVE-2021-4044460
Experts found 14 new flaws in BusyBoxSecurity Affairs·Nov 10, 11:38 UTC · Nov 10, 2021VulnerabilityCVE-2021-42373CVE-2021-42374CVE-2021-42375+11 CVEs60
Threat Source newsletter (Aug. 12, 2021)Cisco Talos·Aug 12, 18:00 UTC · Aug 12, 2021RansomwareCVE-2021-2642460
The global impact of the Fortinet 50.000 VPN leak posted onlineSecurity Affairs·Nov 27, 13:03 UTC · Nov 27, 2020Data breachCVE-2018-1337960
Instagram RCE gave hackers remote access to your deviceSecurity Affairs·Sep 24, 14:19 UTC · Sep 24, 2020VulnerabilityCVE-2020-189560
Microsoft Releases Urgent Windows Update to Patch Two Critical FlawsThe Hacker News·Jul 1, 12:25 UTC · Jul 1, 2020Vulnerability in the wildCVE-2020-1425CVE-2020-1457160
SMBleed could allow a remote attacker to leak kernel memorySecurity Affairs·Jun 11, 09:40 UTC · Jun 11, 2020Exploit / PoCCVE-2020-1206CVE-2020-079660
Beware! Playing Untrusted Videos On VLC Player Could Hack Your ComputerThe Hacker News·Jun 21, 19:33 UTC · Jun 21, 2019Exploit / PoCCVE-2019-12874CVE-2019-543960
New JNEC.a Ransomware delivered through WinRAR exploitSecurity Affairs·Mar 19, 14:57 UTC · Mar 19, 2019RansomwareCVE-2018-2025060
Latest WinRAR, Drupal flaws under active exploitationHelp Net Security·Feb 26, 00:00 UTC · Feb 26, 2019Exploit / PoC in the wildCVE-2018-20250CVE-2019-634060
Watering Hole Attack on Aerospace Firm Exploits CVE-2015Palo Alto Unit 42·Nov 1, 09:48 UTC · Nov 1, 2018Data breachCVE-2015-5122160
Microsoft Patch Tuesday — October 18: Vulnerability disclosures and Snort coverageCisco Talos·Oct 9, 18:38 UTC · Oct 9, 2018VulnerabilityCVE-2018-8491CVE-2018-8460CVE-2018-8509+26 CVEs60
IT threat evolution Q2 2018Kaspersky Securelist·Aug 6, 10:00 UTC · Aug 6, 2018Exploit / PoCCVE-2018-817460
LuckyMouse hits national data center to organize countryKaspersky Securelist·Jun 13, 10:00 UTC · Jun 13, 2018Exploit / PoCCVE-2017-1188260
Vulnerability Spotlight: Multiple Computerinsel PhotoLine PSD Code Execution VulnerabilitiesCisco Talos·Apr 11, 15:00 UTC · Apr 11, 2018Vulnerability in the wildCVE-2018-3861CVE-2018-3862CVE-2018-0550+4 CVEs60
Modified Zyklon and plugins from IndiaCisco Talos·May 23, 13:05 UTC · May 23, 2017RansomwareCVE-2013-3906CVE-2012-185660
Macro Intruders: Sneaking Past Office DefensesCisco Talos·Aug 2, 13:42 UTC · Aug 2, 2016Exploit / PoC in the wild60