Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer CampaignThe Hacker News·Apr 29, 08:29 UTC · Apr 29, 2026Malware42
⚡ Weekly Recap: Fast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & MoreThe Hacker News·Apr 28, 07:38 UTC · Apr 28, 2026MalwareCVE-2025-20333CVE-2025-20362CVE-2026-40372+20 CVEs147
Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2The Hacker News·Apr 24, 09:29 UTC · Apr 24, 2026Malware42
Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR ToolsThe Hacker News·Apr 6, 10:07 UTC · Apr 6, 2026Ransomware57
Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD SecretsThe Hacker News·Mar 24, 06:31 UTC · Mar 24, 2026Data breach57
North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for CrossThe Hacker News·Mar 3, 06:20 UTC · Mar 3, 2026Malware42
Matrix Push C2 Uses Browser Notifications for Fileless, CrossThe Hacker News·Dec 9, 08:03 UTC · Dec 9, 2025RansomwareCVE-2025-5928760
Legit tools, illicit uses: Velociraptor, Nezha turned against victimsHelp Net Security·Oct 15, 11:50 UTC · Oct 15, 2025RansomwareCVE-2025-626460
New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCsThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Malware42
Abandoned Sogou Zhuyin Update Server Hijacked, Weaponized in Taiwan Espionage CampaignThe Hacker News·Aug 30, 11:54 UTC · Aug 30, 2025Threat actor57
VSCode Marketplace Removes Two Extensions Deploying EarlyThe Hacker News·Mar 24, 11:10 UTC · Mar 24, 2025Ransomware57
China-Linked MirrorFace Deploys ANEL and AsyncRAT in New Cyber Espionage OperationThe Hacker News·Mar 19, 06:51 UTC · Mar 19, 2025Malware42
Mustang Panda Deploys Advanced Malware to Spy on AsiaThe Hacker News·Sep 10, 09:57 UTC · Sep 10, 2024Malware42
Japanese Cryptocurrency Exchange Falls Victim to JokerSpy macOS Backdoor AttackThe Hacker News·Jun 28, 05:25 UTC · Jun 28, 2023Malware42
Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver MalwareThe Hacker News·Jan 18, 05:17 UTC · Jan 18, 2023Malware142
Hackers Can Abuse Visual Studio Marketplace to Target Developers with Malicious ExtensionsThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2023Ransomware57
Ubuntu Linux for Windows 10 Released — Yes, You Read it RightThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2017Industry142
Microsoft urges Azure users to update PowerShell to fix RCE flawSecurity Affairs·Jul 2, 17:43 UTC · Jul 2, 2021VulnerabilityCVE-2021-2670147
MoonPeak malware from North Korean actors unveils new details on attacker infrastructureCisco Talos·Aug 21, 10:00 UTC · Aug 21, 2024Malware42
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP ConfigsThe Hacker News·Jun 26, 13:53 UTC · Jun 26, 2026Exploit / PoCCVE-2026-12957CVE-2026-12958CVE-2025-59536+2 CVEs60
GitVenom campaign targets gamers and crypto investors by posing as fake GitHub projectsSecurity Affairs·Feb 26, 06:27 UTC · Feb 26, 2025Threat actor157
Phorpiex botnet shuts down, source code goes up for saleThe Record·Dec 15, 00:00 UTC · Dec 15, 2022Malware42
North Korea-linked Zinc APT posed as Samsung recruiters to target security firmsSecurity Affairs·Nov 28, 12:11 UTC · Nov 28, 2021RansomwareCVE-2017-1623860
“Red October”. Detailed Malware Description 2. Second Stage of AttackKaspersky Securelist·Jan 17, 16:08 UTC · Jan 17, 2013Malware42
“Red October”. Detailed Malware Description 4. Second Stage of AttackKaspersky Securelist·Jan 17, 16:06 UTC · Jan 17, 2013Malware42
North Korean Hackers Target Cryptocurrency Users on LinkedIn with RustDoor MalwareThe Hacker News·Sep 19, 09:24 UTC · Sep 19, 2024Malware42
Fake GitHub projects distribute stealers in GitVenom campaignKaspersky Securelist·Feb 25, 06:21 UTC · Feb 25, 2025Malware42
Hackers Using Microsoft Build Engine to Deliver Malware FilelesslyThe Hacker News·May 15, 00:00 UTC · May 15, 2021Malware42
42Crunch API Scan helps enterprises to solve security challenges during the development workflowsHelp Net Security·Dec 11, 14:53 UTC · Dec 11, 2023Data breach57
A clearer picture of the CCleaner backdoor incidentHelp Net Security·Jun 26, 21:22 UTC · Jun 26, 2018Malware42
CISA Adds Microsoft .NET Vulnerability to KEV Catalog Due to Active ExploitationThe Hacker News·Aug 11, 03:38 UTC · Aug 11, 2023Exploit / PoC in the wildCVE-2023-3818060
GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target DevelopersThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Malware42
SolarWinds hack investigation reveals new Sunspot malwareHelp Net Security·Jan 12, 00:00 UTC · Jan 12, 2021Malware42