Search: “bootkit”

66 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 21 Vulnerability 16 Ransomware 15 Malware 7 Threat actor 2 Data breach 2 Phishing & fraud 1 Advisory 1 Policy & legal 1

SeverityAll critical 59 high 7 medium 0 low 0 info 0

XPAJ: Reversing a Windows x64 Bootkit

Kaspersky SecurelistJun 19, 18:16 UTC · Jun 19, 2012Ransomware

60

BlackLotus UEFI bootkit disables Windows security mechanisms

Help Net SecurityApr 17, 10:14 UTC · Apr 17, 2023Vulnerability in the wildCVE-2022-21894

60

Bootkit 2009

Kaspersky SecurelistJun 9, 16:00 UTC · Jun 9, 2009Exploit / PoC

60

BlackLotus is first bootkit bypassing UEFI Secure Boot on Win 11

Security AffairsMar 1, 20:57 UTC · Mar 1, 2023Vulnerability CVE-2022-21894

60

Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux Kernels

The Hacker NewsDec 2, 16:30 UTC · Dec 2, 2024Ransomware CVE-2023-40238

60

BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

The Hacker NewsJun 23, 08:42 UTC · Jun 23, 2023Malware in the wildCVE-2022-218941

60

BlackLotus Malware Hijacks Windows Secure Boot Process

Schneier on SecurityMar 15, 00:00 UTC · Mar 15, 2023Malware in the wildCVE-2022-21894

60

New Bootkit “Bootkitty” Targets Linux Systems via UEFI

Infosecurity MagazineNov 27, 16:30 UTC · Nov 27, 2024Exploit / PoC

60

Critical vulnerability affecting most Linux distros allows for bootkits

Ars Technica · SecurityFeb 7, 01:37 UTC · Feb 7, 2024Vulnerability CVE-2023-40547

60

Week in review: LastPass breach, GCP data exfiltration, UEFI bootkit

Help Net SecurityMar 5, 00:00 UTC · Mar 5, 2023Ransomware

60

⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero

The Hacker NewsOct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-21043

60

Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)

Help Net SecurityMay 9, 00:00 UTC · May 9, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-24932 CVE-2022-21882+10 CVEs1

60

Just about every Windows and Linux device vulnerable to new LogoFAIL firmware attack

Ars Technica · SecurityDec 6, 15:02 UTC · Dec 6, 2023Exploit / PoC

60

Microsoft’s Secure Boot has been broken for a decade and no one noticed until now

Ars Technica · SecurityJul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2015-53811

60

Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware

The Hacker NewsSep 27, 12:13 UTC · Sep 27, 2025Exploit / PoC in the wildCVE-2025-20362 CVE-2025-20333 CVE-2025-20363

60

200,000 Linux systems from Framework are shipped with signed UEFI components vulnerable to Secure Boot bypass

Security AffairsOct 15, 14:22 UTC · Oct 15, 2025Ransomware CVE-2022-34302 CVE-2023-48733 CVE-2024-7344

60

HybridPetya Mimics NotPetya, Adds UEFI Compromise

Infosecurity MagazineSep 15, 16:45 UTC · Sep 15, 2025Ransomware CVE-2024-7344

60

THN Recap: Top Cybersecurity Threats, Tools and Tips (Nov 25

The Hacker NewsDec 2, 11:25 UTC · Dec 2, 2024Ransomware CVE-2024-9680 CVE-2024-49039 CVE-2024-11680+14 CVEs

60

Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2023Ransomware in the wildCVE-2023-28252 CVE-2022-24521 CVE-2022-37969+6 CVEs

60

Advanced threat predictions for 2023

Kaspersky SecurelistNov 14, 08:00 UTC · Nov 14, 2022Ransomware in the wild

60

APT annual review 2021

Kaspersky SecurelistNov 30, 10:00 UTC · Nov 30, 2021Data breach in the wild

60

TrickBoot feature allows TrickBot bot to run UEFI attacks

Security AffairsDec 3, 14:32 UTC · Dec 3, 2020Ransomware in the wild

60

The Careto/Mask APT: Frequently Asked Questions

Kaspersky SecurelistFeb 10, 21:03 UTC · Feb 10, 2014Exploit / PoC CVE-2012-0773

60

Patch Tuesday, January 2026 Edition

Krebs on SecurityJan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2026-20805 CVE-2026-20952 CVE-2026-20953+6 CVEs1

60

September 2025 CVE Landscape

Recorded FutureOct 17, 00:00 UTC · Oct 17, 2025Exploit / PoC in the wildCVE-2025-53690 CVE-2021-21311 CVE-2025-20333+6 CVEs

60

UK NCSC warns that attackers exploited Cisco firewall zero-days to deploy RayInitiator and LINE VIPER malware

Security AffairsSep 26, 11:49 UTC · Sep 26, 2025Exploit / PoC CVE-2025-20362 CVE-2025-20333 CVE-2025-20363

60

HybridPetya: (Proof-of-concept?) ransomware can bypass UEFI Secure Boot

Help Net SecuritySep 12, 00:00 UTC · Sep 12, 2025Ransomware CVE-2024-7344

60

Week in review: Google fixes zero-day vulnerability in Chrome, critical SQL injection flaw in FortiWeb

Help Net SecurityJul 20, 00:00 UTC · Jul 20, 2025Exploit / PoC in the wildCVE-2025-6558 CVE-2025-25257

60

Chinese national charged for hacking thousands of Sophos firewalls

Security AffairsDec 11, 10:20 UTC · Dec 11, 2024Policy & legal in the wildCVE-2020-12271

60

Sophos details five years of China-linked threat actors' activity targeting network devices worldwide

Security AffairsNov 2, 16:18 UTC · Nov 2, 2024Threat actor

60

Microsoft Patch Tuesday, May 2023 Edition

Krebs on SecurityMay 10, 07:06 UTC · May 10, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-24932 CVE-2023-24941+2 CVEs

60

Week in review: Finding stolen credentials on VirusTotal, BNPL attracting fraudsters

Help Net SecurityFeb 28, 14:42 UTC · Feb 28, 2022Phishing & fraud CVE-2021-35247

60

IT threat evolution Q3 2021

Kaspersky SecurelistNov 26, 12:00 UTC · Nov 26, 2021Exploit / PoC CVE-2021-40444

60

Advanced threat predictions for 2022

Kaspersky SecurelistNov 17, 10:00 UTC · Nov 17, 2021Ransomware

60

Japanese businesses are the latest victims of attacks disguised as ransomware

CyberScoopNov 3, 18:51 UTC · Nov 3, 2017Ransomware in the wild

60

Hacking 4G USB modems and SIM Card via SMS

Security AffairsDec 31, 13:37 UTC · Dec 31, 2014Exploit / PoC

60

Oil shipments, drone makers, and a poisoned code library targeted in recent APT campaigns

Help Net SecurityJun 19, 12:07 UTC · Jun 19, 2026Threat actor

60

ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories

The Hacker NewsJun 4, 14:00 UTC · Jun 4, 2026Malware in the wildCVE-2026-202301

60

FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches

The Hacker NewsApr 25, 08:20 UTC · Apr 25, 2026Vulnerability CVE-2025-20333 CVE-2025-20362

60

Friday Squid Blogging: Squid Fishing in Peru

Schneier on SecurityFeb 27, 22:04 UTC · Feb 27, 2026Ransomware

60