⚡ Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and moreThe Hacker News·Jun 10, 04:47 UTC · Jun 10, 2026Malware in the wildCVE-2025-6543CVE-2025-5777CVE-2025-49825+23 CVEs60
Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code TunnelsThe Hacker News·May 30, 06:13 UTC · May 30, 2026Threat actor157
From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by ChineseCisco Talos·May 19, 10:00 UTC · May 19, 2026Malware130
DPRK-Linked Hackers Use GitHub as C2 in MultiThe Hacker News·Apr 9, 04:56 UTC · Apr 9, 2026Malware142
ThreatsDay Bulletin: PQC Push, AI Vuln Hunting, Pirated Traps, Phishing Kits & 20 More StoriesThe Hacker News·Mar 26, 17:13 UTC · Mar 26, 2026Phishing & fraud42
ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ StoriesThe Hacker News·Jan 24, 08:04 UTC · Jan 24, 2026Vulnerability55
⚡ Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AIThe Hacker News·Jan 20, 09:20 UTC · Jan 20, 2026Exploit / PoCCVE-2025-29824CVE-2025-2775CVE-2025-2776+19 CVEs60
⚡ Weekly Recap: Fortinet Exploits, RedLine Clipjack, NTLM Crack, Copilot Attack & MoreThe Hacker News·Jan 20, 07:01 UTC · Jan 20, 2026Exploit / PoC in the wildCVE-2025-6415560
ThreatsDay Bulletin: AI Voice Cloning Exploit, Wi-Fi Kill Switch, PLC Vulns, and 14 More StoriesThe Hacker News·Jan 19, 06:25 UTC · Jan 19, 2026VulnerabilityCVE-2025-62507CVE-2025-23304CVE-2026-22584160
⚡ Weekly Recap: AI Automation Exploits, Telecom Espionage, Prompt Poaching & MoreThe Hacker News·Jan 12, 16:26 UTC · Jan 12, 2026Threat actorCVE-2026-21858CVE-2025-22224CVE-2025-22225+1 CVEs60
North Korea–linked APT Kimsuky behind quishing attacks, FBI warnsSecurity Affairs·Jan 10, 15:34 UTC · Jan 10, 2026Threat actorCVE-2019-0708CVE-2017-1188260
ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More StoriesThe Hacker News·Jan 8, 16:52 UTC · Jan 8, 2026Vulnerability in the wildCVE-2024-36401CVE-2007-0671CVE-2002-036760
Attackers deliver ShadowPad via newly patched WSUS RCE bugSecurity Affairs·Nov 24, 12:35 UTC · Nov 24, 2025Vulnerability in the wildCVE-2025-5928760
⚡ Weekly Recap: Hyper-V Malware, Malicious AI Bots, RDP Exploits, WhatsApp Lockdown and MoreThe Hacker News·Nov 10, 12:51 UTC · Nov 10, 2025MalwareCVE-2025-21042160
⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & MoreThe Hacker News·Nov 3, 17:59 UTC · Nov 3, 2025Threat actorCVE-2025-61932CVE-2025-55315CVE-2025-10680+18 CVEs160
New HttpTroy Backdoor Poses as VPN Invoice in Targeted Cyberattack on South KoreaThe Hacker News·Nov 3, 10:42 UTC · Nov 3, 2025Malware42
ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & MoreThe Hacker News·Oct 3, 04:59 UTC · Oct 3, 2025MalwareCVE-2024-3400CVE-2017-792160
CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target EnterprisesThe Hacker News·Jul 18, 04:54 UTC · Jul 18, 2025Exploit / PoC in the wildCVE-2025-5777CVE-2023-4966CVE-2025-6543+1 CVEs60
New APT32 Malware Campaign Targets Cambodian GovernmentRecorded Future·Jul 15, 00:00 UTC · Jul 15, 2025Malware55
⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and MoreThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462CVE-2025-32463CVE-2025-20309+23 CVEs60
North Korean Hackers Target Web3 with Nim Malware and Use ClickFix in BabyShark CampaignThe Hacker News·Jul 3, 09:00 UTC · Jul 3, 2025Malware42
⚡ Weekly Recap: APT Intrusions, AI Malware, ZeroThe Hacker News·Jun 3, 04:04 UTC · Jun 3, 2025Malware in the wildCVE-2025-3935CVE-2025-47577CVE-2025-2760+14 CVEs60
Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and ProxywareThe Hacker News·Jun 2, 10:07 UTC · Jun 2, 2025VulnerabilityCVE-2025-32432CVE-2021-44228CVE-2022-26134+1 CVEs47
New Self-Spreading Malware Infects Docker Containers to Mine Dero CryptocurrencyThe Hacker News·May 27, 16:23 UTC · May 27, 2025Malware42
⚡ Weekly Recap: APT Campaigns, Browser Hijacks, AI Malware, Cloud Breaches and Critical CVEsThe Hacker News·May 26, 13:00 UTC · May 26, 2025MalwareCVE-2025-4427CVE-2025-4428CVE-2025-34025+7 CVEs60
North Korean Konni APT Targets Ukraine with Malware to track Russian Invasion ProgressThe Hacker News·May 15, 00:00 UTC · May 15, 2025Malware42
Earth Ammit Breached Drone Supply Chains via ERP in VENOM, TIDRONE CampaignsThe Hacker News·May 15, 00:00 UTC · May 15, 2025Data breach60
Play Ransomware Exploited Windows CVE-2025-29824 as ZeroThe Hacker News·May 8, 05:38 UTC · May 8, 2025RansomwareCVE-2025-29824CVE-2024-2616960
⚡ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025RansomwareCVE-2025-29824CVE-2024-11859CVE-2025-3102+17 CVEs60
Kimsuky APT exploited BlueKeep RDP flaw in attacks against South Korea and JapanSecurity Affairs·Apr 21, 18:25 UTC · Apr 21, 2025Threat actorCVE-2019-0708CVE-2017-1188260
Kimsuky Exploits BlueKeep RDP Vulnerability to Breach Systems in South Korea and JapanThe Hacker News·Apr 21, 16:42 UTC · Apr 21, 2025VulnerabilityCVE-2019-0708CVE-2017-1188260
2,500+ Truesight.sys Driver Variants Exploited to Bypass EDR and Deploy HiddenGh0st RATThe Hacker News·Mar 22, 04:08 UTC · Mar 22, 2025Malware42
Cisco, Hitachi, Microsoft, and Progress Flaws Actively Exploited—CISA Sounds AlarmThe Hacker News·Mar 4, 16:12 UTC · Mar 4, 2025Exploit / PoC in the wildCVE-2023-20118CVE-2022-43939CVE-2022-43769+2 CVEs60
Cybercriminals Use Eclipse Jarsigner to Deploy XLoader Malware via ZIP ArchivesThe Hacker News·Mar 4, 03:50 UTC · Mar 4, 2025Malware155
New Malware Campaign Uses Cracked Software to Spread Lumma and ACR StealerThe Hacker News·Feb 24, 16:58 UTC · Feb 24, 2025MalwareCVE-2024-4357260
North Korea-linked APt Emerald Sleet is using a new tacticSecurity Affairs·Feb 12, 11:55 UTC · Feb 12, 2025Malware42
Kimsuky Group used custom RDP Wrapper versionSecurity Affairs·Feb 8, 18:15 UTC · Feb 8, 2025Threat actor57
North Korean APT Kimsuky Uses forceCopy Malware to Steal BrowserThe Hacker News·Feb 7, 03:40 UTC · Feb 7, 2025Malware42
Ransomware Targets ESXi Systems via Stealthy SSH Tunnels for C2 OperationsThe Hacker News·Jan 28, 13:08 UTC · Jan 28, 2025Ransomware57
North Korean Hackers Pull Off $308M Bitcoin Heist from Crypto Firm DMM BitcoinThe Hacker News·Dec 27, 06:13 UTC · Dec 27, 2024Vulnerability42