Search: “shellcode”

257 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 485 Vulnerability 168 Exploit / PoC 114 Threat actor 104 Ransomware 89 Data breach 23 Phishing & fraud 10 Research 3 Policy & legal 3 Industry 3 AI safety & security 3 Advisory 2 AI tools & infra 1 Tools 1

SeverityAll critical 258 high 492 medium 243 low 14 info 2

Researchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT Systems

The Hacker NewsApr 24, 09:29 UTC · Apr 24, 2026Malware

55

Iranian Hackers Maintain 2-Year Access to Middle East CNI via VPN Flaws and Malware

The Hacker NewsJul 29, 09:05 UTC · Jul 29, 2025Malware CVE-2023-38950 CVE-2023-38951 CVE-2023-38952

60

⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462 CVE-2025-32463 CVE-2025-20309+23 CVEs

60

RomCom Exploits Zero-Day Firefox and Windows Flaws in Sophisticated Cyberattacks

The Hacker NewsNov 27, 04:06 UTC · Nov 27, 2024Exploit / PoC CVE-2024-9680 CVE-2024-49039 CVE-2023-36884

60

Industrial companies in Europe targeted with GuLoader

Help Net SecurityNov 7, 00:00 UTC · Nov 7, 2024Malware

55

Lazarus APT steals cryptocurrency and user data via a decoy MOBA game

Kaspersky SecurelistOct 23, 11:00 UTC · Oct 23, 2024Threat actor CVE-2024-4947

60

North Korean Hackers Deploy FudModule Rootkit via Chrome Zero

The Hacker NewsOct 23, 04:44 UTC · Oct 23, 2024Malware in the wildCVE-2024-7971 CVE-2024-4947 CVE-2024-5274+3 CVEs

60

CISA adds Cisco ASA and FTD and CrushFTP VFS flaws to its Known Exploited Vulnerabilities catalog

Security AffairsApr 25, 20:17 UTC · Apr 25, 2024Exploit / PoC in the wildCVE-2024-20353 CVE-2024-20359 CVE-2024-4040+1 CVEs

60

Nation-state actors exploited two zero-days in ASA and FTD firewalls to breach government networks

Security AffairsApr 24, 20:31 UTC · Apr 24, 2024Exploit / PoC CVE-2024-20353 CVE-2024-20359 CVE-2018-01011

60

Operation Triangulation attacks relied on an undocumented hardware feature

Security AffairsDec 28, 23:10 UTC · Dec 28, 2023Exploit / PoC CVE-2023-41990 CVE-2023-32434 CVE-2023-386061

60

Iranian Cyber Espionage Group Targets Financial and Government Sectors in Middle East

The Hacker NewsNov 3, 04:45 UTC · Nov 3, 2023Threat actor

60

ShroudedSnooper's HTTPSnoop Backdoor Targets Middle East Telecom Companies

The Hacker NewsSep 20, 04:36 UTC · Sep 20, 2023Malware1

55

North Korea-linked threat actors target cybersecurity experts with a zero

Security AffairsSep 8, 19:51 UTC · Sep 8, 2023Threat actor in the wild

60

New WinTapix.sys Malware Engages in Multi

The Hacker NewsMay 24, 06:20 UTC · May 24, 2023Malware

55

Bitter APT adds Bangladesh to their targets

Cisco TalosMay 11, 12:00 UTC · May 11, 2022Exploit / PoC CVE-2017-11882 CVE-2018-0798 CVE-2018-0802+1 CVEs

60

Microsoft warns of more disruptive BlueKeep Attacks

Security AffairsNov 8, 13:28 UTC · Nov 8, 2019Ransomware in the wildCVE-2019-0708

60

First mass BlueKeep exploitation spotted in the wild

Security AffairsNov 3, 14:21 UTC · Nov 3, 2019Exploit / PoC in the wildCVE-2019-0708

60

2 Zero-Days found in March were part of a cyber weapon in an early development stage

Security AffairsJul 3, 05:42 UTC · Jul 3, 2018Exploit / PoC CVE-2018-4990 CVE-2018-8120

60

Experts uncovered a watering hole attack on leading Hong Kong Telecom Site exploiting CVE-2018

Security AffairsMar 27, 07:34 UTC · Mar 27, 2018Exploit / PoC CVE-2018-4878

60

ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories

The Hacker NewsJul 9, 15:09 UTC · Jul 9, 2026Phishing & fraud CVE-2026-9181

60

PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage

The Hacker NewsMay 7, 17:58 UTC · May 7, 2026Vulnerability in the wildCVE-2026-0300

60

SloppyLemming Targets Pakistan and Bangladesh Governments Using Dual Malware Chains

The Hacker NewsMar 3, 06:53 UTC · Mar 3, 2026Malware

55

Notepad++ supply chain attack: Researchers reveal details, IoCs, targets

Help Net SecurityFeb 17, 10:13 UTC · Feb 17, 2026Exploit / PoC

60

APT28 exploits Microsoft Office flaw in Operation Neusploit

Security AffairsFeb 3, 12:13 UTC · Feb 3, 2026Threat actor in the wildCVE-2026-21509

60

Notepad++ infrastructure hack likely tied to China

Security AffairsFeb 3, 09:35 UTC · Feb 3, 2026Exploit / PoC

60

JackFix Uses Fake Windows Update Pop-Ups on Adult Sites to Deliver Multiple Stealers

The Hacker NewsDec 2, 05:40 UTC · Dec 2, 2025Malware

55

Dynamic binary instrumentation (DBI) with DynamoRio

Cisco TalosOct 30, 09:59 UTC · Oct 30, 2025Vulnerability

55

Memento Labs, the ghost of Hacking Team, has returned — or maybe it was never gone at all.

Security AffairsOct 27, 20:31 UTC · Oct 27, 2025Exploit / PoC CVE-2025-2783 CVE-2025-2857

60

Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePE

The Hacker NewsSep 3, 03:44 UTC · Sep 3, 2025Malware

55

Analyzing evolution of the PipeMagic malware

Security AffairsAug 19, 08:02 UTC · Aug 19, 2025Malware in the wildCVE-2025-29824 CVE-2017-0144

60

Taiwan Web Servers Breached by UAT-7237 Using Customized Open

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2025Data breach1

60

New APT32 Malware Campaign Targets Cambodian Government

Recorded FutureJul 15, 00:00 UTC · Jul 15, 2025Malware

55

Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero

The Hacker NewsJun 12, 15:47 UTC · Jun 12, 2025Vulnerability in the wildCVE-2025-33053 CVE-2025-47966 CVE-2025-32713+3 CVEs1

60

Earth Ammit Breached Drone Supply Chains via ERP in VENOM, TIDRONE Campaigns

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Data breach

60

Introducing ToyMaker, an initial access broker working in cahoots with double extortion gangs

Cisco TalosApr 23, 10:00 UTC · Apr 23, 2025Ransomware

60

Planet WGS-804HPT Industrial Switch flaws could be chained to achieve remote code execution

Security AffairsJan 20, 00:27 UTC · Jan 20, 2025Vulnerability CVE-2024-48871 CVE-2024-52320 CVE-2024-52558

60

An X user claimed a 7-Zip zero-day vulnerability, but 7

Security AffairsDec 31, 00:09 UTC · Dec 31, 2024Exploit / PoC

60

Russian group RomCom exploited Firefox and Tor Browser zero-days to target attacks Europe and North America

Security AffairsNov 27, 08:37 UTC · Nov 27, 2024Exploit / PoC in the wildCVE-2024-9680 CVE-2024-49039

60

RomCom hackers chained Firefox and Windows zero-days to deliver backdoor

Help Net SecurityNov 26, 00:00 UTC · Nov 26, 2024Malware CVE-2024-9680 CVE-2024-49039 CVE-2023-36884

60

Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw to Steal VPN Credentials

The Hacker NewsNov 18, 03:52 UTC · Nov 18, 2024Vulnerability

55