Search: “Shadowserver Foundation”

282 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 81 Exploit / PoC 67 Ransomware 48 Malware 46 Data breach 12 Phishing & fraud 10 Threat actor 7 Industry 3 Advisory 3 Policy & legal 2 AI tools & infra 1 Tools 1 Model release 1

SeverityAll critical 201 high 53 medium 19 low 5 info 4

Authorities takedown global proxy network SocksEscort

CyberScoopMar 12, 16:40 UTC · Mar 12, 2026Exploit / PoC in the wild

60

CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed

The Hacker NewsMar 12, 05:18 UTC · Mar 12, 2026Vulnerability in the wildCVE-2025-68613 CVE-2026-27577

60

Week in review: Weaponized OAuth redirection logic delivers malware, Patch Tuesday forecast

Help Net SecurityMar 8, 00:00 UTC · Mar 8, 2026Vulnerability CVE-2025-14500 CVE-2026-28289 CVE-2026-20128+1 CVEs

60

Global Takedown Neutralizes Tycoon2FA Phishing Service

Infosecurity MagazineMar 4, 16:00 UTC · Mar 4, 2026Phishing & fraud

42

CVE-2025-64328 exploitation impacts 900 Sangoma FreePBX instances

Security AffairsMar 1, 10:01 UTC · Mar 1, 2026Vulnerability in the wildCVE-2025-64328

60

Roundcube RCE: Dark web activity signals imminent attacks (CVE-2025-49113)

Help Net SecurityFeb 23, 10:54 UTC · Feb 23, 2026Vulnerability in the wildCVE-2025-49113 CVE-2024-42009 CVE-2025-68461

60

Week in review: Exploited newly patched BeyondTrust RCE, United Airlines CISO on building resilience

Help Net SecurityFeb 15, 00:00 UTC · Feb 15, 2026Vulnerability in the wildCVE-2026-1731 CVE-2024-12356 CVE-2026-1281+2 CVEs

60

Ivanti EPMM exploitation: Researchers warn of "sleeper" webshells

Help Net SecurityFeb 11, 00:00 UTC · Feb 11, 2026Data breach in the wildCVE-2026-1281 CVE-2026-13401

60

Ivanti provides temporary patches for actively exploited EPMM zero-day (CVE-2026-1281)

Help Net SecurityFeb 2, 10:44 UTC · Feb 2, 2026Exploit / PoC in the wildCVE-2026-1281 CVE-2026-1340

60

Two High-Severity n8n Flaws Allow Authenticated Remote Code Execution

The Hacker NewsJan 29, 16:54 UTC · Jan 29, 2026Vulnerability CVE-2026-1470 CVE-2026-0863 CVE-2026-21858

47

Ongoing Attacks Exploiting Critical RCE Vulnerability in Legacy D

The Hacker NewsJan 7, 09:23 UTC · Jan 7, 2026Vulnerability in the wildCVE-2026-0625

60

⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & More

The Hacker NewsJan 5, 12:56 UTC · Jan 5, 2026Vulnerability CVE-2025-55182 CVE-2025-13915 CVE-2025-52691+7 CVEs

60

Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability

The Hacker NewsJan 3, 08:24 UTC · Jan 3, 2026Vulnerability in the wildCVE-2020-12812

60

RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers

The Hacker NewsJan 1, 09:19 UTC · Jan 1, 2026Malware CVE-2025-55182 CVE-2023-1389 CVE-2025-24893

60

US, Australia say ‘MongoBleed’ bug being exploited

The RecordDec 29, 22:07 UTC · Dec 29, 2025Data breach CVE-2025-14847

60

Hundreds of Arrests as Operation Sentinel Recovers $3m

Infosecurity MagazineDec 23, 09:30 UTC · Dec 23, 2025Ransomware

60

WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability

The Hacker NewsDec 23, 04:10 UTC · Dec 23, 2025Vulnerability in the wildCVE-2025-14733 CVE-2025-59718 CVE-2025-59719+1 CVEs

60

574 arrests, $3 million recovered in Africa-wide cybercrime crackdown

Help Net SecurityDec 22, 00:00 UTC · Dec 22, 2025Ransomware

60

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

The Hacker NewsDec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-29927 CVE-2025-66478

60

React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2025Exploit / PoC in the wildCVE-2025-55182 CVE-2021-44228

60

React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple Sectors

The Hacker NewsDec 11, 04:19 UTC · Dec 11, 2025Malware CVE-2025-55182

60

Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation

The Hacker NewsDec 9, 06:18 UTC · Dec 9, 2025Exploit / PoC in the wildCVE-2025-55182

60

⚡ Weekly Recap: USB Malware, React2Shell, WhatsApp Worms, AI IDE Bugs & More

The Hacker NewsDec 9, 04:05 UTC · Dec 9, 2025Malware CVE-2025-55182 CVE-2025-6389 CVE-2025-66516+19 CVEs

60

React2Shell Under Active Exploitation by China

Infosecurity MagazineDec 8, 11:40 UTC · Dec 8, 2025Exploit / PoC in the wildCVE-2025-55182

60

August 2025 CVE Landscape

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088 CVE-2025-7775 CVE-2025-57819+5 CVEs

60

Operation Endgame Dismantles Rhadamanthys, Venom RAT, and Elysium Botnet in Global Crackdown

The Hacker NewsNov 17, 14:23 UTC · Nov 17, 2025Malware

42

CISA Flags Critical WatchGuard Fireware Flaw Exposing 54,000 Fireboxes to No

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2025Exploit / PoC in the wildCVE-2025-9242 CVE-2025-62215 CVE-2025-12480

60

Too many Cisco ASA firewalls still unsecure despite zero-day attack alerts

Help Net SecurityNov 13, 12:09 UTC · Nov 13, 2025Exploit / PoC CVE-2025-20333 CVE-2025-20362 CVE-2025-20352

60

"Patched" but still exposed: US federal agencies must remediate Cisco flaws (again)

Help Net SecurityNov 13, 00:00 UTC · Nov 13, 2025Vulnerability in the wildCVE-2025-20333 CVE-2025-20362 CVE-2025-12480+2 CVEs

60

Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over Devices

The Hacker NewsOct 22, 04:20 UTC · Oct 22, 2025Ransomware CVE-2025-9242 CVE-2025-3600 CVE-2025-36604

60

Critical WatchGuard Fireware OS Flaw Enables Remote Code Execution

Infosecurity MagazineOct 21, 11:42 UTC · Oct 21, 2025Vulnerability CVE-2025-9242

60

Criminal SIM Card Supply Network Busted by Europol

Infosecurity MagazineOct 20, 12:15 UTC · Oct 20, 2025Ransomware

45

F5 breach exposes 262,000 BIG

Security AffairsOct 20, 09:34 UTC · Oct 20, 2025Data breach

60

SIMCARTEL operation: Europol takes down SIM

Security AffairsOct 18, 09:42 UTC · Oct 18, 2025Ransomware

57

Scanning Activity on Palo Alto Networks Portals Jump 500% in One Day

The Hacker NewsOct 10, 14:03 UTC · Oct 10, 2025Vulnerability CVE-2025-20333 CVE-2025-20362

60

Microsoft: Critical GoAnywhere Bug Exploited in Medusa Ransomware Camp

Infosecurity MagazineOct 7, 09:45 UTC · Oct 7, 2025Ransomware in the wildCVE-2025-10035 CVE-2024-1709 CVE-2023-48788

60

Detour Dog Caught Running DNS-Powered Malware Factory for Strela Stealer

The Hacker NewsOct 4, 14:36 UTC · Oct 4, 2025Malware

42

Netscaler vulnerability was exploited as zero-day for nearly two months (CVE-2025-6543)

Help Net SecurityAug 29, 09:22 UTC · Aug 29, 2025Exploit / PoC in the wildCVE-2025-6543 CVE-2025-5777

60

Interpol-led crackdown disrupts cybercrime networks in Africa that caused $485 million in losses

CyberScoopAug 22, 16:03 UTC · Aug 22, 2025Ransomware

60

Interpol-Led African Cybercrime Crackdown Leads to 1209 Arrests

Infosecurity MagazineAug 22, 13:20 UTC · Aug 22, 2025Ransomware

60