Search: “XLab”

66 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 44 Vulnerability 10 Exploit / PoC 7 Ransomware 2 Industry 1 Data breach 1 Threat actor 1

SeverityAll critical 29 high 14 medium 21 low 2 info 0

From Android TVs to routers: the xlabs_v1 Mirai

Security AffairsMay 7, 10:15 UTC · May 7, 2026Vulnerability

30

Who Benefited from the Aisuru and Kimwolf Botnets?

Krebs on SecurityJan 9, 08:46 UTC · Jan 9, 2026Malware

30

Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption

The Hacker NewsJul 27, 17:16 UTC · Jul 27, 2026Malware CVE-2025-9528

35

New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens

The Hacker NewsJul 17, 17:12 UTC · Jul 17, 2026Malware CVE-2026-39987 CVE-2026-41176 CVE-2022-22947+1 CVEs

47

4,300+ Outdated Routers Hijacked in Stealthy Spy Infrastructure by AryStinger malware

Security AffairsJun 22, 08:27 UTC · Jun 22, 2026Malware CVE-2013-3307 CVE-2016-5681 CVE-2025-11837

60

Mirai-Based xlabs_v1 Botnet Exploits ADB to Hijack IoT Devices for DDoS Attacks

The Hacker NewsMay 6, 20:21 UTC · May 6, 2026Malware

30

AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network

The Hacker NewsJun 22, 06:57 UTC · Jun 22, 2026Malware CVE-2013-3307 CVE-2016-5681 CVE-2025-11837

35

RustDuck: The Botnet That's Still Small but Engineering Like It Plans to Grow

Security AffairsJul 1, 10:25 UTC · Jul 1, 2026Malware in the wildCVE-2025-29635 CVE-2017-17215 CVE-2024-1781+1 CVEs1

60

Kimwolf Botnet Hijacks 1.8 Million Android TVs, Launches Large

The Hacker NewsDec 22, 04:46 UTC · Dec 22, 2025Malware

30

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

The Hacker NewsJun 30, 17:45 UTC · Jun 30, 2026Malware in the wildCVE-2017-17215 CVE-2025-29635 CVE-2024-1781+1 CVEs1

60

Dysphoria Botnet Uses Blockchain Domains to Hide C2 Infrastructure

Security AffairsJul 28, 19:08 UTC · Jul 28, 2026Malware CVE-2025-55182 CVE-2017-17215

35

The Kimwolf Botnet is Stalking Your Local Network

Krebs on SecurityJan 2, 15:06 UTC · Jan 2, 2026Malware

42

DDoS Botnet Aisuru Blankets US ISPs in Record DDoS

Krebs on SecurityOct 10, 17:41 UTC · Oct 10, 2025Malware

30

PHP backdoor looks to be work of Chinese

CyberScoopDec 16, 19:15 UTC · Dec 16, 2024Malware in the wild

60

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

The Hacker NewsJun 26, 07:33 UTC · Jun 26, 2026Vulnerability CVE-2026-26980

60

cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2026-419401

60

Stealthy hackers exploit cPanel flaw in active backdoor campaign (CVE-2026-41940)

Help Net SecurityMay 12, 00:00 UTC · May 12, 2026Vulnerability CVE-2026-41940

47

Massive Android botnet Kimwolf infects millions, strikes with DDoS

Security AffairsDec 21, 08:09 UTC · Dec 21, 2025Malware

30

Vo1d Botnet's Peak Surpasses 1.59M Infected Android TVs, Spanning 226 Countries

The Hacker NewsMar 10, 04:01 UTC · Mar 10, 2025Malware

42

Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet

The Hacker NewsJan 23, 05:18 UTC · Jan 23, 2025Exploit / PoC CVE-2013-3307 CVE-2016-20016 CVE-2017-5259+7 CVEs1

60

New Mirai Botnet Exploits Zero

Infosecurity MagazineJan 8, 10:45 UTC · Jan 8, 2025Malware CVE-2024-12856

60

New Glutton Malware Exploits Popular PHP Frameworks Like Laravel and ThinkPHP

The Hacker NewsDec 17, 04:40 UTC · Dec 17, 2024Malware1

55

May 2026 CVE Landscape

Recorded FutureJun 15, 00:00 UTC · Jun 15, 2026Exploit / PoC in the wildCVE-2008-4250 CVE-2009-1537 CVE-2009-3459+19 CVEs

60

Attackers exploit cPanel CVE-2026

Security AffairsMay 12, 11:41 UTC · May 12, 2026Ransomware in the wildCVE-2026-419401

60

DoJ Disrupts 3 Million-Device IoT Botnets Behind Record 31.4 Tbps Global DDoS Attacks

The Hacker NewsMar 20, 16:10 UTC · Mar 20, 2026Malware

30

Happy 16th Birthday, KrebsOnSecurity.com!

Krebs on SecurityDec 30, 23:00 UTC · Dec 30, 2025Malware

42

APT36 Targets Indian Government with Golang

The Hacker NewsOct 27, 08:18 UTC · Oct 27, 2025Threat actor CVE-2025-8088

60

Researchers Warn of MystRodX Backdoor Using DNS and ICMP Triggers for Stealthy Control

The Hacker NewsSep 8, 14:09 UTC · Sep 8, 2025Malware

42

Brazil expert discovers Oracle flaw that allows massive DDoS attacks

Security AffairsOct 17, 12:39 UTC · Oct 17, 2018Exploit / PoC

45

Lumen disrupts AISURU and Kimwolf botnet by blocking over 550 C2 servers

Security AffairsJan 15, 09:25 UTC · Jan 15, 2026Malware

30

Kimwolf botnet leverages residential proxies to hijack 2M+ Android devices

Security AffairsJan 5, 15:11 UTC · Jan 5, 2026Malware

55

⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More

The Hacker NewsNov 24, 12:32 UTC · Nov 24, 2025Malware in the wildCVE-2025-58034 CVE-2025-64446 CVE-2025-13223+12 CVEs

60

ShadowV2 Botnet Exploits Misconfigured AWS Docker Containers for DDoS-for

The Hacker NewsSep 23, 12:30 UTC · Sep 23, 2025Malware1

30

KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS

Krebs on SecurityMay 20, 22:27 UTC · May 20, 2025Exploit / PoC

60

Gayfemboy Botnet targets Four

Security AffairsJan 8, 19:14 UTC · Jan 8, 2025Malware CVE-2024-12856 CVE-2013-3307 CVE-2021-35394+1 CVEs

60

Mirai Botnet Variant Exploits Four-Faith Router Vulnerability for DDoS Attacks

The Hacker NewsJan 8, 10:30 UTC · Jan 8, 2025Vulnerability in the wildCVE-2024-12856 CVE-2013-3307 CVE-2013-7471+11 CVEs

60

Iran-Linked IOCONTROL Malware Targets SCADA and Linux

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2024Malware

55

New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks

The Hacker NewsJul 7, 16:51 UTC · Jul 7, 2024Malware

42

New Golang Zergeca Botnet appeared in the threat landscape

Security AffairsJul 5, 09:39 UTC · Jul 5, 2024Malware

30

Hackers Exploit Legitimate Packer Software to Spread Malware Undetected

The Hacker NewsJun 6, 09:54 UTC · Jun 6, 2024Malware

30