Magnitude exploit kitKaspersky Securelist·Jun 24, 10:00 UTC · Jun 24, 2020Ransomware in the wildCVE-2018-8174CVE-2018-8653CVE-2019-1367+3 CVEs60
The curious case of a CVE-2012Kaspersky Securelist·Aug 6, 13:11 UTC · Aug 6, 2013RansomwareCVE-2012-015860
APT Group UPS Targets US Government with Hacking Team Flash ExploitPalo Alto Unit 42·Nov 1, 09:47 UTC · Nov 1, 2018Threat actorCVE-2015-5119CVE-2015-311360
UPS: Observations on CVE-2015-3113, Prior ZeroPalo Alto Unit 42·Nov 1, 09:48 UTC · Nov 1, 2018VulnerabilityCVE-2015-3113CVE-2014-1776CVE-2014-633260
2016 Updates to Shifu Banking TrojanPalo Alto Unit 42·Jan 6, 20:00 UTC · Jan 6, 2017MalwareCVE-2016-0167CVE-2015-0003160
September 2025 CVE LandscapeRecorded Future·Oct 17, 00:00 UTC · Oct 17, 2025Exploit / PoC in the wildCVE-2025-53690CVE-2021-21311CVE-2025-20333+6 CVEs60
February 2026 CVE Landscape: 13 Critical Vulnerabilities Mark 43% Drop from JanuaryRecorded Future·Mar 13, 00:00 UTC · Mar 13, 2026Vulnerability in the wildCVE-2025-15556CVE-2026-21513CVE-2026-21533+4 CVEs160
Unmasking the new persistent attacks on JapanCisco Talos·Mar 6, 11:00 UTC · Mar 6, 2025VulnerabilityCVE-2024-4577160
New malicious web shell from the Tropic Trooper group is found in the Middle EastKaspersky Securelist·Sep 5, 08:02 UTC · Sep 5, 2024Vulnerability in the wildCVE-2021-34473CVE-2021-34523CVE-2021-31207+1 CVEs60
ArcaneDoor - New espionage-focused campaign found targeting perimeter network devicesCisco Talos·Apr 24, 15:54 UTC · Apr 24, 2024Threat actorCVE-2025-20333CVE-2025-20362CVE-2025-20363+3 CVEs60
T9000: Advanced Modular Backdoor Uses Complex AntiPalo Alto Unit 42·Nov 1, 10:04 UTC · Nov 1, 2018MalwareCVE-2012-1856CVE-2015-164160
BlackOasis APT and new targeted attacks leveraging zeroKaspersky Securelist·Oct 16, 14:28 UTC · Oct 16, 2017Exploit / PoC in the wildCVE-2017-11292CVE-2017-8759CVE-2016-4117+2 CVEs60
China-Linked Hackers Exploit VMware ESXi ZeroThe Hacker News·Jan 12, 16:25 UTC · Jan 12, 2026Ransomware in the wildCVE-2025-22224CVE-2025-22225CVE-2025-2222660
Most interesting IR cases in 2023: insider threats and moreKaspersky Securelist·Sep 3, 11:01 UTC · Sep 3, 2024Ransomware60
Kaspersky malware report for Q3 2023Kaspersky Securelist·Dec 1, 16:01 UTC · Dec 1, 2023MalwareCVE-2023-23397CVE-2023-2932460
Deadglyph: New Advanced Backdoor with Distinctive Malware TacticsThe Hacker News·Sep 23, 12:03 UTC · Sep 23, 2023MalwareCVE-2018-8611CVE-2019-079760
Alchimist: A new attack framework in Chinese for Mac, Linux and WindowsCisco Talos·Oct 13, 12:00 UTC · Oct 13, 2022Exploit / PoC in the wildCVE-2021-4034160
Internet Explorer and Windows zeroKaspersky Securelist·Aug 12, 07:00 UTC · Aug 12, 2020Exploit / PoCCVE-2020-0986CVE-2020-1380CVE-2020-0674+3 CVEs60
New win32k zero day: CVE-2019Kaspersky Securelist·Apr 15, 10:00 UTC · Apr 15, 2019Exploit / PoCCVE-2018-8453CVE-2018-8589CVE-2018-8611+2 CVEs60
InPage zero-day exploit used to attack financial institutions in AsiaKaspersky Securelist·Nov 23, 08:59 UTC · Nov 23, 2016Exploit / PoCCVE-2012-0158CVE-2017-1282460
APT37 combines cloud storage and USB implants to infiltrate airSecurity Affairs·Mar 2, 12:38 UTC · Mar 2, 2026Threat actor60
August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
Mem3nt0 moriKaspersky Securelist·Oct 27, 03:00 UTC · Oct 27, 2025Exploit / PoC in the wildCVE-2025-278360
Chinese APT Group Targets Web Hosting Services in TaiwanInfosecurity Magazine·Aug 18, 13:45 UTC · Aug 18, 2025Threat actor60
Hackers backdoored Cisco ASA devices via two zero-days (CVE-2024-20353, CVE-2024-20359)Help Net Security·Apr 24, 00:00 UTC · Apr 24, 2024VulnerabilityCVE-2024-20353CVE-2024-20359CVE-2024-2035860
4-year campaign backdoored iPhones using possibly the most advanced exploit everArs Technica · Security·Dec 27, 17:03 UTC · Dec 27, 2023MalwareCVE-2023-32434CVE-2023-32435CVE-2023-38606+1 CVEs160
Authors of Purple Fox EK adds 2 Microsoft exploitsSecurity Affairs·Jul 7, 14:00 UTC · Jul 7, 2020Exploit / PoC in the wildCVE-2020-0674CVE-2019-1458CVE-2018-8120+1 CVEs60
First Cyber Attack 'Mass Exploiting' BlueKeep RDP Flaw Spotted in the WildThe Hacker News·Nov 3, 11:34 UTC · Nov 3, 2019RansomwareCVE-2019-070860
Chrome 0-day exploit CVE-2019Kaspersky Securelist·Nov 1, 16:00 UTC · Nov 1, 2019Exploit / PoCCVE-2019-1372060
Let It Ride: The Sofacy Group’s DealersChoice Attacks ContinuePalo Alto Unit 42·Nov 1, 10:41 UTC · Nov 1, 2018Exploit / PoC in the wildCVE-2016-7855CVE-2016-7255CVE-2015-7645160
Two Zero-Day Exploits Found After Someone Uploaded 'Unarmed' PoC to VirusTotalThe Hacker News·Jul 4, 14:08 UTC · Jul 4, 2018Exploit / PoCCVE-2018-4990CVE-2018-812060
Iranian Hackers Maintain 2-Year Access to Middle East CNI via VPN Flaws and MalwareThe Hacker News·Jul 29, 09:05 UTC · Jul 29, 2025MalwareCVE-2023-38950CVE-2023-38951CVE-2023-3895260
⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and MoreThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462CVE-2025-32463CVE-2025-20309+23 CVEs60
RomCom Exploits Zero-Day Firefox and Windows Flaws in Sophisticated CyberattacksThe Hacker News·Nov 27, 04:06 UTC · Nov 27, 2024Exploit / PoCCVE-2024-9680CVE-2024-49039CVE-2023-3688460
Lazarus APT steals cryptocurrency and user data via a decoy MOBA gameKaspersky Securelist·Oct 23, 11:00 UTC · Oct 23, 2024Threat actorCVE-2024-494760
North Korean Hackers Deploy FudModule Rootkit via Chrome ZeroThe Hacker News·Oct 23, 04:44 UTC · Oct 23, 2024Malware in the wildCVE-2024-7971CVE-2024-4947CVE-2024-5274+3 CVEs60
CISA adds Cisco ASA and FTD and CrushFTP VFS flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Apr 25, 20:17 UTC · Apr 25, 2024Exploit / PoC in the wildCVE-2024-20353CVE-2024-20359CVE-2024-4040+1 CVEs60