Modified Zyklon and plugins from IndiaCisco Talos·May 23, 13:05 UTC · May 23, 2017RansomwareCVE-2013-3906CVE-2012-185660
SWEED: Exposing years of Agent Tesla campaignsCisco Talos·Jul 15, 15:04 UTC · Jul 15, 2019Threat actorCVE-2017-8759CVE-2017-11882160
Spear Phishing Attacks Target Organizations in Ukraine, Payloads Include the Document Stealer OutSteel and the Downloader SaintBotPalo Alto Unit 42·Jun 5, 23:28 UTC · Jun 5, 2024MalwareCVE-2017-1188260
Multi-Stage Malware Attack Uses .JSE and PowerShell to Deploy Agent Tesla and XLoaderThe Hacker News·Apr 18, 12:03 UTC · Apr 18, 2025MalwareCVE-2021-4044960
ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More StoriesThe Hacker News·Jul 9, 15:09 UTC · Jul 9, 2026Phishing & fraudCVE-2026-918160
ThreatsDay Bulletin: MS Teams Hack, MFA Hijacking, $2B Crypto Heist, Apple Siri Probe & MoreThe Hacker News·Oct 9, 14:32 UTC · Oct 9, 2025RansomwareCVE-2025-503760
ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More StoriesThe Hacker News·Jul 30, 15:25 UTC · Jul 30, 2026RansomwareCVE-2026-33017CVE-2026-21858CVE-2025-68613+5 CVEs60
⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and MoreThe Hacker News·May 11, 12:36 UTC · May 11, 2026Malware in the wildCVE-2026-6973CVE-2026-030060
⚡ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and MoreThe Hacker News·May 19, 14:35 UTC · May 19, 2025Exploit / PoC in the wildCVE-2025-30397CVE-2025-30400CVE-2025-32701+22 CVEs60
Cybercrime gang exploited VeraCore zero-day vulnerabilities for years (CVE-2025-25181, CVE-2024-57968)Help Net Security·Feb 11, 13:53 UTC · Feb 11, 2025Exploit / PoCCVE-2025-25181CVE-2024-57968160
Cyberattack Group 'Awaken Likho' Targets Russian Government with Advanced ToolsThe Hacker News·Oct 8, 11:17 UTC · Oct 8, 2024Threat actor60
APT-C-60 Group Exploit WPS Office Flaw to Deploy SpyGlace BackdoorThe Hacker News·Aug 29, 04:31 UTC · Aug 29, 2024MalwareCVE-2024-7262CVE-2024-726360
Lazarus Group Using Log4j Exploits to Deploy Remote Access TrojansThe Hacker News·Dec 12, 04:59 UTC · Dec 12, 2023MalwareCVE-2021-44228CVE-2021-44832CVE-2023-4279360
Kaspersky malware report for Q3 2023Kaspersky Securelist·Dec 1, 16:01 UTC · Dec 1, 2023MalwareCVE-2023-23397CVE-2023-2932460
Unmasking XE Group: Experts Reveal Identity of Suspected Cybercrime KingpinThe Hacker News·Jun 1, 14:55 UTC · Jun 1, 2023VulnerabilityCVE-2019-1893560
Threat Source newsletter (Nov. 17, 2022): Hot off the press! The Snort 2023 Calendar is hereCisco Talos·Nov 17, 19:01 UTC · Nov 17, 2022RansomwareCVE-2022-2046560
IT threat evolution Q3 2021Kaspersky Securelist·Nov 26, 12:00 UTC · Nov 26, 2021Exploit / PoCCVE-2021-4044460
Unknown ransomware gang uses SQL injection bug in BillQuick Web Suite to deploy ransomwareSecurity Affairs·Oct 25, 21:13 UTC · Oct 25, 2021RansomwareCVE-2021-42258CVE-2021-42344CVE-2021-42345+6 CVEs60
An overview of targeted attacks and APTs on LinuxKaspersky Securelist·Sep 10, 10:00 UTC · Sep 10, 2020Data breachCVE-2015-511960
APT review: what the world’s threat actors got up to in 2019Kaspersky Securelist·Dec 4, 10:00 UTC · Dec 4, 2019Threat actor60
IT threat evolution Q1 2019Kaspersky Securelist·May 23, 10:00 UTC · May 23, 2019Exploit / PoCCVE-2019-0797CVE-2018-858960
Elfin Hacking Group Targets Multiple U.S. and Saudi Arabian FirmsThe Hacker News·Mar 28, 08:18 UTC · Mar 28, 2019Exploit / PoC in the wildCVE-2018-2025060
APT28-linked trojan being developed in multiple programming languages, research showsCyberScoop·Dec 18, 22:59 UTC · Dec 18, 2018Malware in the wild160
CISCO fixed 3 critical issues in Elastic Services Controller and Ultra Services FrameworkSecurity Affairs·Jul 6, 08:22 UTC · Jul 6, 2017VulnerabilityCVE-2017-6713CVE-2017-6712CVE-2017-6711+2 CVEs60
IT threat evolution Q3 2016Kaspersky Securelist·Nov 3, 10:59 UTC · Nov 3, 2016Data breachCVE-2012-0158CVE-2014-635260
Monthly Malware Statistics: August 2010Kaspersky Securelist·Sep 1, 14:05 UTC · Sep 1, 2010MalwareCVE-2010-2568CVE-2010-1885CVE-2010-0886+3 CVEs60