ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts— and 15 More StoriesThe Hacker News·Dec 4, 16:05 UTC · Dec 4, 2025Phishing & fraud55
August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
Analysis of TAG-140 Campaign and DRAT V2 Development Targeting Indian Government OrganizationsRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Malware42
Fantasy Hub: Russian-sold Android RAT boasts full device espionage as MaaSSecurity Affairs·Nov 11, 15:21 UTC · Nov 11, 2025Malware30
SesameOp: New backdoor exploits OpenAI API for covert C2Security Affairs·Nov 4, 17:06 UTC · Nov 4, 2025Malware42
Wordfence blocks 8.7M attacks exploiting old GutenKit and Hunk Companion flawsSecurity Affairs·Oct 27, 08:40 UTC · Oct 27, 2025VulnerabilityCVE-2024-9234CVE-2024-9707CVE-2024-1197260
FileFix Campaign Using Steganography and Multistage PayloadsInfosecurity Magazine·Sep 17, 16:45 UTC · Sep 17, 2025Threat actor in the wild60
Gh0st RAT-based GodRAT attacks financial organizationsKaspersky Securelist·Aug 19, 19:42 UTC · Aug 19, 2025Malware42
Malicious Code in XZ Utils for Linux Systems Enables Remote Code ExecutionThe Hacker News·Aug 13, 10:32 UTC · Aug 13, 2025VulnerabilityCVE-2024-309447
SonicWall fixed critical flaw in SMA 100 devices exploited in Overstep malware attacksSecurity Affairs·Jul 24, 13:01 UTC · Jul 24, 2025MalwareCVE-2025-40599CVE-2024-3847560
GhostContainer backdoor for Exchange serversKaspersky Securelist·Jul 17, 08:00 UTC · Jul 17, 2025MalwareCVE-2020-068847
UNC6148 deploys Overstep malware on SonicWall devices, possibly for ransomware operationsSecurity Affairs·Jul 17, 07:47 UTC · Jul 17, 2025RansomwareCVE-2024-3847560
WhisperGate Malware Corrupts Computers in UkraineRecorded Future·Jul 15, 00:00 UTC · Jul 15, 2025Malware42
LapDogs: China-nexus hackers Hijack 1,000+ SOHO devices for espionageSecurity Affairs·Jun 28, 13:29 UTC · Jun 28, 2025Threat actorCVE-2015-1548CVE-2017-1766360
Prometei botnet activity has surged since March 2025Security Affairs·Jun 25, 07:34 UTC · Jun 25, 2025Malware42
Famous Chollima deploying Python version of GolangGhost RATCisco Talos·Jun 18, 10:00 UTC · Jun 18, 2025Malware130
Anubis Ransomware Encrypts and Wipes Files, Making Recovery Impossible Even After PaymentThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025Ransomware57
catdoc zero-day, NVIDIA, High-Logic FontCreator and Parallel vulnerabilitiesCisco Talos·Jun 11, 14:03 UTC · Jun 11, 2025Exploit / PoCCVE-2024-48877CVE-2024-52035CVE-2024-54028+6 CVEs60
Cybercriminals Target AI Users with Malware-Loaded Installers Posing as Popular ToolsThe Hacker News·May 30, 03:56 UTC · May 30, 2025Malware42
China-linked APT41 used Google Calendar as C2 to control its TOUGHPROGRESS malwareSecurity Affairs·May 29, 11:17 UTC · May 29, 2025Malware30
Commvault CVE-2025-34028 Added to CISA KEV After Active Exploitation ConfirmedThe Hacker News·May 10, 06:43 UTC · May 10, 2025Exploit / PoC in the wildCVE-2025-34028CVE-2025-392860
Experts shared up-to-date C2 domains and other artifacts related to recent MintsLoader attacksSecurity Affairs·May 5, 11:24 UTC · May 5, 2025Malware30
Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux ServersThe Hacker News·May 1, 06:38 UTC · May 1, 2025MalwareCVE-2016-8655CVE-2016-519547
Amateur Hacker Leverages Bulletproof Hosting Server to Spread MalwareInfosecurity Magazine·Apr 3, 14:00 UTC · Apr 3, 2025Malware42
Friday Squid Blogging: The Colossal SquidSchneier on Security·Feb 7, 22:02 UTC · Feb 7, 2025Exploit / PoC45
Wireshark 4.4.2: Security updates, bug fixes, updated protocol supportHelp Net Security·Jan 9, 08:56 UTC · Jan 9, 2025Vulnerability30
The EAGERBEE backdoor may be related to the CoughingDown actorKaspersky Securelist·Jan 6, 08:02 UTC · Jan 6, 2025Malware42
SmokeLoader Malware Resurfaces, Targeting Manufacturing and IT in TaiwanThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2024MalwareCVE-2017-0199CVE-2017-1188235
BootKitty Linux UEFI bootkit spotted exploiting LogoFAIL flawsSecurity Affairs·Dec 3, 08:11 UTC · Dec 3, 2024Exploit / PoCCVE-2023-4023850
Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux KernelsThe Hacker News·Dec 2, 16:30 UTC · Dec 2, 2024RansomwareCVE-2023-4023860
Bootkitty is the first UEFI Bootkit designed for Linux systemsSecurity Affairs·Nov 27, 21:01 UTC · Nov 27, 2024Ransomware45
New Bootkit “Bootkitty” Targets Linux Systems via UEFIInfosecurity Magazine·Nov 27, 16:30 UTC · Nov 27, 2024Exploit / PoC60
SideWinder APT’s postKaspersky Securelist·Oct 15, 10:00 UTC · Oct 15, 2024VulnerabilityCVE-2017-1188247
Previously unseen Msupedge backdoor targeted a university in TaiwanSecurity Affairs·Aug 20, 17:27 UTC · Aug 20, 2024MalwareCVE-2024-457760
Tusk campaign uses infostealers and clippers for financial gainKaspersky Securelist·Aug 15, 12:00 UTC · Aug 15, 2024Malware30
APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt StrikeCisco Talos·Aug 1, 12:00 UTC · Aug 1, 2024Threat actorCVE-2018-0824160
Why CISOs need to build cyber fault tolerance into their businessHelp Net Security·Jun 10, 00:00 UTC · Jun 10, 2024Tools55
#Infosec2024: Experts Share How CISOs Can Manage ChangeInfosecurity Magazine·Jun 6, 14:30 UTC · Jun 6, 2024Policy & legal55
Hackers Exploit Legitimate Packer Software to Spread Malware UndetectedThe Hacker News·Jun 6, 09:54 UTC · Jun 6, 2024Malware30