Search: “bootkit”

165 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 53 Vulnerability 52 Exploit / PoC 27 Ransomware 22 Threat actor 4 Data breach 4 Phishing & fraud 1 Advisory 1 Policy & legal 1

SeverityAll critical 73 high 59 medium 31 low 2 info 0

Week in review: LastPass breach, GCP data exfiltration, UEFI bootkit

Help Net SecurityMar 5, 00:00 UTC · Mar 5, 2023Ransomware

60

MosaicRegressor: Lurking in the Shadows of UEFI

Kaspersky SecurelistOct 5, 10:00 UTC · Oct 5, 2020Vulnerability

42

China-Linked FishMonger Ports SprySOCKS to Windows With Kernel-Level Stealth and UEFI Bootkit Hints

Security AffairsJun 17, 08:10 UTC · Jun 17, 2026Vulnerability CVE-2023-24932

47

⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero

The Hacker NewsOct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-21043

60

HybridPetya ransomware bypasses UEFI Secure Boot echoing Petya/NotPetya

Security AffairsSep 13, 12:06 UTC · Sep 13, 2025Ransomware

57

Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)

Help Net SecurityMay 9, 00:00 UTC · May 9, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-24932 CVE-2022-21882+10 CVEs1

60

MoonBounce: the dark side of UEFI firmware

Kaspersky SecurelistJan 20, 10:00 UTC · Jan 20, 2022Malware

42

New 'MosaicRegressor' UEFI Bootkit Malware Found Active in the Wild

The Hacker NewsOct 6, 08:33 UTC · Oct 6, 2020Malware

30

Zebrocy’s Multilanguage Malware Salad

Kaspersky SecurelistJun 3, 14:00 UTC · Jun 3, 2019Malware

42

Just about every Windows and Linux device vulnerable to new LogoFAIL firmware attack

Ars Technica · SecurityDec 6, 15:02 UTC · Dec 6, 2023Exploit / PoC

60

NSA Releases Guide to Mitigate BlackLotus Bootkit Infections

Infosecurity MagazineJun 26, 16:30 UTC · Jun 26, 2023Vulnerability CVE-2022-21894

35

Oh, what a boot

Kaspersky SecurelistJun 23, 10:00 UTC · Jun 23, 2020Malware

42

Thunderstrike hack

Security AffairsSep 30, 11:42 UTC · Sep 30, 2017Vulnerability

42

Microsoft’s Secure Boot has been broken for a decade and no one noticed until now

Ars Technica · SecurityJul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2015-53811

60

Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware

The Hacker NewsSep 27, 12:13 UTC · Sep 27, 2025Exploit / PoC in the wildCVE-2025-20362 CVE-2025-20333 CVE-2025-20363

60

FinSpy: unseen findings

Kaspersky SecurelistSep 28, 14:45 UTC · Sep 28, 2021Exploit / PoC

57

MBRFilter — Open Source Tool to Protect Against 'Master Boot Record' Malware

The Hacker NewsOct 20, 16:33 UTC · Oct 20, 2016Malware

42

Kaspersky Security Bulletin 2008: Malware Evolution January

Kaspersky SecurelistSep 24, 10:00 UTC · Sep 24, 2008Malware

42

200,000 Linux systems from Framework are shipped with signed UEFI components vulnerable to Secure Boot bypass

Security AffairsOct 15, 14:22 UTC · Oct 15, 2025Ransomware CVE-2022-34302 CVE-2023-48733 CVE-2024-7344

60

HybridPetya Mimics NotPetya, Adds UEFI Compromise

Infosecurity MagazineSep 15, 16:45 UTC · Sep 15, 2025Ransomware CVE-2024-7344

60

THN Recap: Top Cybersecurity Threats, Tools and Tips (Nov 25

The Hacker NewsDec 2, 11:25 UTC · Dec 2, 2024Ransomware CVE-2024-9680 CVE-2024-49039 CVE-2024-11680+14 CVEs

60

Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2023Ransomware in the wildCVE-2023-28252 CVE-2022-24521 CVE-2022-37969+6 CVEs

60

Advanced threat predictions for 2023

Kaspersky SecurelistNov 14, 08:00 UTC · Nov 14, 2022Ransomware in the wild

60

MoonBounce UEFI implant spotted in a targeted APT41 attack

Security AffairsJan 21, 11:59 UTC · Jan 21, 2022Threat actor

57

APT annual review 2021

Kaspersky SecurelistNov 30, 10:00 UTC · Nov 30, 2021Data breach in the wild

60

TrickBoot feature allows TrickBot bot to run UEFI attacks

Security AffairsDec 3, 14:32 UTC · Dec 3, 2020Ransomware in the wild

60

IT threat evolution Q2 2020

Kaspersky SecurelistSep 3, 10:00 UTC · Sep 3, 2020Vulnerability

42

Bug in widely used bootloader opens Windows, Linux devices to persistent compromise

Help Net SecurityAug 3, 11:37 UTC · Aug 3, 2020Malware CVE-2020-10713

47

The Windows 8.1 Kernel Patch Protection

Cisco TalosAug 14, 19:22 UTC · Aug 14, 2014Vulnerability

30

The Careto/Mask APT: Frequently Asked Questions

Kaspersky SecurelistFeb 10, 21:03 UTC · Feb 10, 2014Exploit / PoC CVE-2012-0773

60

Kaspersky Security Bulletin 2009. Malware Evolution 2009

Kaspersky SecurelistFeb 17, 17:16 UTC · Feb 17, 2010Malware

30

11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Vulnerability CVE-2026-8863 CVE-2026-10797

47

China-Linked SprySOCKS Backdoor Expands to Windows with Driver

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026Malware CVE-2023-24932

47

Patch Tuesday, January 2026 Edition

Krebs on SecurityJan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2026-20805 CVE-2026-20952 CVE-2026-20953+6 CVEs1

60

September 2025 CVE Landscape

Recorded FutureOct 17, 00:00 UTC · Oct 17, 2025Exploit / PoC in the wildCVE-2025-53690 CVE-2021-21311 CVE-2025-20333+6 CVEs

60

ThreatsDay Bulletin: $15B Crypto Bust, Satellite Spying, Billion

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Vulnerability

55

UK NCSC warns that attackers exploited Cisco firewall zero-days to deploy RayInitiator and LINE VIPER malware

Security AffairsSep 26, 11:49 UTC · Sep 26, 2025Exploit / PoC CVE-2025-20362 CVE-2025-20333 CVE-2025-20363

60

HybridPetya: (Proof-of-concept?) ransomware can bypass UEFI Secure Boot

Help Net SecuritySep 12, 00:00 UTC · Sep 12, 2025Ransomware CVE-2024-7344

60

Week in review: Google fixes zero-day vulnerability in Chrome, critical SQL injection flaw in FortiWeb

Help Net SecurityJul 20, 00:00 UTC · Jul 20, 2025Exploit / PoC in the wildCVE-2025-6558 CVE-2025-25257

60

Microsoft Warns of StilachiRAT: A Stealthy RAT Targeting Credentials and Crypto Wallets

The Hacker NewsMar 18, 07:00 UTC · Mar 18, 2025Malware

42