⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0The Hacker News·Jul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030CVE-2026-60137CVE-2026-15409+26 CVEs160
Phishing campaign impersonating Booking.com targets hospitality sector with malwareThe Record·Jul 16, 00:00 UTC · Jul 16, 2026Malware30
ClickFix is changing the economics of social engineeringHelp Net Security·Jul 15, 00:00 UTC · Jul 15, 2026Phishing & fraud30
Pakistani Police Systems Hit by Chinese and Indian EspionageInfosecurity Magazine·Jul 13, 14:45 UTC · Jul 13, 2026Threat actor57
Hackers Weaponize Balochistan Police Portal in MultiThe Hacker News·Jul 11, 17:49 UTC · Jul 11, 2026Malware42
222 GitHub Repositories Linked to Fake Go Package Malware OperationSecurity Affairs·Jul 10, 10:23 UTC · Jul 10, 2026Malware42
ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More StoriesThe Hacker News·Jul 9, 15:09 UTC · Jul 9, 2026Phishing & fraudCVE-2026-918160
Telegram-Based Millenium RAT Campaign Infects 60,000 DevicesInfosecurity Magazine·Jun 29, 14:30 UTC · Jun 29, 2026Malware42
Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials RecoveredThe Hacker News·Jun 25, 08:42 UTC · Jun 25, 2026Malware in the wild160
Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress SitesThe Hacker News·Jun 19, 17:13 UTC · Jun 19, 2026Ransomware60
14,971 WordPress Sites Cleaned in Global SocGholish TakedownSecurity Affairs·Jun 19, 13:41 UTC · Jun 19, 2026Ransomware60
One Telecom Provider Hosted Most of the Middle East ’s Active C2 InfrastructureSecurity Affairs·May 22, 07:29 UTC · May 22, 2026Malware42
Threat Activity Enablers: The Backbone of Today’s Threat LandscapeRecorded Future·May 6, 00:00 UTC · May 6, 2026Ransomware57
PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian NetworksThe Hacker News·Apr 27, 14:07 UTC · Apr 27, 2026Vulnerability42
Cybercriminals hijack DNS to build stealth attack networksHelp Net Security·Apr 23, 13:30 UTC · Apr 23, 2026Malware30
Formbook Malware Campaign Uses Multiple Obfuscation TechniquesInfosecurity Magazine·Apr 20, 15:01 UTC · Apr 20, 2026Malware30
DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser CredentialsThe Hacker News·Mar 31, 06:09 UTC · Mar 31, 2026Malware30
GPUGate Malware Uses Google Ads and Fake GitHub Commits to Target IT FirmsThe Hacker News·Feb 26, 14:31 UTC · Feb 26, 2026Malware30
Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025The Hacker News·Jan 29, 06:06 UTC · Jan 29, 2026Vulnerability in the wildCVE-2025-8088CVE-2025-621860
Cybercriminals Deploy CORNFLAKE.V3 Backdoor via ClickFix Tactic and Fake CAPTCHA PagesThe Hacker News·Jan 27, 14:14 UTC · Jan 27, 2026Malware42
Fake Booking Emails Redirect Hotel Staff to Fake BSoD Pages Delivering DCRatThe Hacker News·Jan 7, 04:22 UTC · Jan 7, 2026Malware30
H1 2025 Malware and Vulnerability TrendsRecorded Future·Nov 13, 00:00 UTC · Nov 13, 2025Vulnerability in the wild60
⚡ Weekly Recap: Hyper-V Malware, Malicious AI Bots, RDP Exploits, WhatsApp Lockdown and MoreThe Hacker News·Nov 10, 12:51 UTC · Nov 10, 2025MalwareCVE-2025-21042160
Hackers posing as Kyrgyz officials target Russian agencies in cyber espionage campaignThe Record·Oct 23, 15:19 UTC · Oct 23, 2025Threat actor57
TA558 Uses AI-Generated Scripts to Deploy Venom RAT in Brazil Hotel AttacksThe Hacker News·Sep 17, 18:30 UTC · Sep 17, 2025MalwareCVE-2017-019960
Chinese AI Villager Pen Testing Tool Hits 11,000 PyPI DownloadsInfosecurity Magazine·Sep 16, 16:00 UTC · Sep 16, 2025Malware in the wild57
Malicious Infrastructure Finds Stability with aurologic GmbHRecorded Future·Aug 27, 00:00 UTC · Aug 27, 2025Policy & legal55
From fake CAPTCHAs to RATs: Inside 2025's cyber deception threat trendsHelp Net Security·Aug 8, 00:00 UTC · Aug 8, 2025Ransomware57
Hackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing FiltersThe Hacker News·Jul 21, 06:30 UTC · Jul 21, 2025Malware42
Malware-as-a-Service Campaign Exploits GitHub to Deliver PayloadsInfosecurity Magazine·Jul 17, 16:00 UTC · Jul 17, 2025Malware30
⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and MoreThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462CVE-2025-32463CVE-2025-20309+23 CVEs60
Blind Eagle Uses Proton66 Hosting for Phishing, RAT Deployment on Colombian BanksThe Hacker News·Jun 30, 14:57 UTC · Jun 30, 2025MalwareCVE-2024-4345147
Cyber Criminals Exploit Open-Source Tools to Compromise Financial Institutions Across AfricaThe Hacker News·Jun 26, 08:08 UTC · Jun 26, 2025Ransomware57
200+ Trojanized GitHub Repositories Found in Campaign Targeting Gamers and DevelopersThe Hacker News·Jun 21, 09:10 UTC · Jun 21, 2025Malware42
Widespread Campaign Targets Cybercriminals and GamersInfosecurity Magazine·Jun 4, 13:30 UTC · Jun 4, 2025Threat actor57
Initial Access Brokers Target Brazil Execs via NFThe Hacker News·May 9, 11:40 UTC · May 9, 2025VulnerabilityCVE-2017-1188247
Experts shared up-to-date C2 domains and other artifacts related to recent MintsLoader attacksSecurity Affairs·May 5, 11:24 UTC · May 5, 2025Malware30
Pakistan-Linked Hackers Expand Targets in India with CurlBack RAT and Spark RATThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2025Malware30
Developers Beware: Lazarus Group Uses Fake Coding Tests to Spread MalwareThe Hacker News·Apr 10, 12:17 UTC · Apr 10, 2025Malware42