Nexcorium Mirai variant exploits TBK DVR flaw to launch DDoS attacksSecurity Affairs·Apr 18, 10:05 UTC · Apr 18, 2026VulnerabilityCVE-2024-3721CVE-2017-1721535
Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet CampaignThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026MalwareCVE-2025-68613CVE-2025-7544CVE-2023-46604+2 CVEs60
Masjesu botnet targets IoT devices while evading highSecurity Affairs·Apr 9, 14:06 UTC · Apr 9, 2026Malware55
SentinelOne autonomous detection blocks trojaned LiteLLM triggered by Claude CodeSecurity Affairs·Apr 1, 08:59 UTC · Apr 1, 2026Malware42
Friday Squid Blogging: Bioluminescent Bacteria in SquidSchneier on Security·Mar 28, 00:45 UTC · Mar 28, 2026Malware30
Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes WiperThe Hacker News·Mar 25, 14:32 UTC · Mar 25, 2026MalwareCVE-2026-33634160
TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI CredentialsThe Hacker News·Mar 25, 06:34 UTC · Mar 25, 2026Data breachCVE-2026-33634160
New Ubuntu Flaw Enables Local Attackers to Gain Root AccessInfosecurity Magazine·Mar 18, 15:45 UTC · Mar 18, 2026VulnerabilityCVE-2026-388860
⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & MoreThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-3909CVE-2026-3910CVE-2026-3913+40 CVEs260
Immutable Linux distribution Nitrux 6.0.0 adds GPU passthrough, boot-level recovery, C++ update systemHelp Net Security·Mar 4, 00:00 UTC · Mar 4, 2026Vulnerability30
Google GTIG disrupted China-linked APT UNC2814 halting attacks on 53 orgs in 42 countriesSecurity Affairs·Feb 26, 08:29 UTC · Feb 26, 2026Data breach57
ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More StoriesThe Hacker News·Jan 8, 16:52 UTC · Jan 8, 2026Vulnerability in the wildCVE-2024-36401CVE-2007-0671CVE-2002-036760
React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple SectorsThe Hacker News·Dec 11, 04:19 UTC · Dec 11, 2025MalwareCVE-2025-5518260
North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT MalwareThe Hacker News·Dec 10, 07:33 UTC · Dec 10, 2025MalwareCVE-2025-5518260
⚡ Weekly Recap: USB Malware, React2Shell, WhatsApp Worms, AI IDE Bugs & MoreThe Hacker News·Dec 9, 04:05 UTC · Dec 9, 2025MalwareCVE-2025-55182CVE-2025-6389CVE-2025-66516+19 CVEs60
UNC2891 Money Mule Network Reveals Full Scope of ATM Fraud OperationInfosecurity Magazine·Nov 20, 16:00 UTC · Nov 20, 2025Phishing & fraud42
Sprout: Open-source bootloader built for speed and securityHelp Net Security·Nov 13, 00:00 UTC · Nov 13, 2025Malware55
APT36 Targets Indian Government with GolangThe Hacker News·Oct 27, 08:18 UTC · Oct 27, 2025Threat actorCVE-2025-8088160
LinkPro Linux Rootkit Uses eBPF to Hide and Activates via Magic TCP PacketsThe Hacker News·Oct 17, 04:34 UTC · Oct 17, 2025MalwareCVE-2024-2389747
UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology SectorsThe Hacker News·Sep 25, 15:04 UTC · Sep 25, 2025MalwareCVE-2023-46805CVE-2024-2188760
Chinese Hackers Use ‘BRICKSTORM’ Backdoor to Breach US FirmsInfosecurity Magazine·Sep 25, 12:30 UTC · Sep 25, 2025Malware55
CHILLYHELL macOS Backdoor and ZynorRAT RAT Threaten macOS, Windows, and Linux SystemsThe Hacker News·Sep 10, 13:04 UTC · Sep 10, 2025Malware142
Pakistan-linked APT36 abuses Linux .desktop files to drop custom malware in new campaignSecurity Affairs·Aug 25, 08:37 UTC · Aug 25, 2025Malware42
Security Affairs newsletter Round 526 by Pierluigi PaganiniSecurity Affairs·Jun 8, 11:24 UTC · Jun 8, 2025Data breachCVE-2025-5054CVE-2025-4598CVE-2025-442860
New Linux VulnerabilitiesSchneier on Security·Jun 3, 11:07 UTC · Jun 3, 2025VulnerabilityCVE-2025-5054CVE-2025-459835
Cryptojacking Campaign Exploits DevOps APIs Using Off-theThe Hacker News·Jun 3, 07:04 UTC · Jun 3, 2025Threat actorCVE-2020-14144160
Duping Cloud Functions: An emerging serverless attack vectorCisco Talos·May 20, 10:00 UTC · May 20, 2025Vulnerability30
The Windows Subsystem for Linux goes open sourceHelp Net Security·May 20, 00:00 UTC · May 20, 2025Industry130
Avocado OS: Open-source Linux platform for embedded systemsHelp Net Security·Apr 28, 00:00 UTC · Apr 28, 2025Policy & legal55
21 years since its inception, GNU Shepherd 1.0.0 is releasedHelp Net Security·Dec 10, 00:00 UTC · Dec 10, 2024Industry30
XML-RPC npm Library Turns Malicious, Steals Data, Deploys Crypto MinerThe Hacker News·Nov 29, 04:52 UTC · Nov 29, 2024Data breach57
New Gafgyt Botnet Variant Targets Weak SSH Passwords for GPU Crypto MiningThe Hacker News·Aug 15, 00:00 UTC · Aug 15, 2024Malware30
Cryptojacking campaign targets exposed Docker APIsSecurity Affairs·Jun 19, 07:31 UTC · Jun 19, 2024Threat actor57
Are Your Nagios XI Servers Turning Into Cryptocurrency Miners for Attackers?Palo Alto Unit 42·Jun 6, 12:45 UTC · Jun 6, 2024Exploit / PoCCVE-2021-2529650
Container Escape to Shadow Admin: GKE Autopilot VulnerabilitiesPalo Alto Unit 42·Jun 5, 23:26 UTC · Jun 5, 2024VulnerabilityCVE-2020-855447
Fail2Ban: Ban hosts that cause multiple authentication errorsHelp Net Security·Jun 5, 07:43 UTC · Jun 5, 2024Tools130
North Korean Kimsuky used a new Linux backdoor in recent attacksSecurity Affairs·May 19, 11:13 UTC · May 19, 2024Malware42
Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094)Help Net Security·Apr 8, 13:25 UTC · Apr 8, 2024VulnerabilityCVE-2024-309460
Chinese Groups Deploy New TTPs to Exploit Ivanti VulnerabilitiesInfosecurity Magazine·Apr 5, 15:00 UTC · Apr 5, 2024VulnerabilityCVE-2023-46805CVE-2024-21887CVE-2024-2189347
Binarly released a free online scanner to detect the CVE-2024Security Affairs·Apr 2, 17:44 UTC · Apr 2, 2024VulnerabilityCVE-2024-309447