Search: “webshell”

437 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 124 Exploit / PoC 109 Malware 63 Ransomware 59 Threat actor 46 Data breach 28 Advisory 5 Policy & legal 4 Industry 2 Phishing & fraud 1

SeverityAll critical 288 high 129 medium 20 low 3 info 1

Microsoft pins on-prem SharePoint attacks on Chinese threat actors

Help Net SecurityJul 24, 15:45 UTC · Jul 24, 2025Threat actor in the wildCVE-2025-49706 CVE-2025-49704 CVE-2025-53770+1 CVEs

60

What to know about ToolShell, the SharePoint threat under mass exploitation

Ars Technica · SecurityJul 23, 20:14 UTC · Jul 23, 2025Vulnerability in the wildCVE-2025-49706 CVE-2025-49704

60

2,000 Palo Alto Networks devices compromised in latest attacks

Help Net SecurityFeb 19, 08:15 UTC · Feb 19, 2025Exploit / PoC CVE-2024-0012 CVE-2024-9474

60

China-linked APT group Winnti targets Japanese organizations

Security AffairsFeb 18, 16:10 UTC · Feb 18, 2025Threat actor

57

Chained Vulnerabilities Exploited in Ivanti Cloud Service Appliances

Infosecurity MagazineJan 23, 16:30 UTC · Jan 23, 2025Vulnerability CVE-2024-8963 CVE-2024-9379 CVE-2024-8190+1 CVEs1

60

Eagerbee backdoor targets govt entities and ISPs in Middle East

Security AffairsJan 7, 06:23 UTC · Jan 7, 2025Malware CVE-2021-26855

47

U.S. CISA adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog

Security AffairsDec 4, 07:56 UTC · Dec 4, 2024Exploit / PoC in the wildCVE-2023-45727 CVE-2024-11680 CVE-2024-11667

60

China-Based RedJuliett Targets Taiwan in Cyber Espionage Campaign

Infosecurity MagazineJun 24, 13:00 UTC · Jun 24, 2024Threat actor

60

SockDetour – a Silent, Fileless, Socketless Backdoor

Palo Alto Unit 42Jun 5, 23:28 UTC · Jun 5, 2024Malware CVE-2021-40539 CVE-2021-44077 CVE-2021-28799

47

Ivanti-linked breach of CISA potentially affected more than 100,000 individuals

CyberScoopMar 29, 20:05 UTC · Mar 29, 2024Data breach in the wild

60

Ivanti Releases Zero

Infosecurity MagazineFeb 1, 09:30 UTC · Feb 1, 2024Exploit / PoC in the wildCVE-2023-46805 CVE-2024-21887 CVE-2024-21888+1 CVEs

60

Two zero-day bugs in Ivanti Connect Secure actively exploited

Security AffairsJan 11, 15:03 UTC · Jan 11, 2024Exploit / PoC in the wildCVE-2023-46805 CVE-2024-21887

60

Two Ivanti Zero

Infosecurity MagazineJan 11, 09:30 UTC · Jan 11, 2024Exploit / PoC in the wildCVE-2023-46805 CVE-2024-21887 CVE-2023-35078+1 CVEs

60

Attackers are trying to exploit Apache Struts vulnerability (CVE-2023-50164)

Help Net SecurityDec 18, 09:23 UTC · Dec 18, 2023Vulnerability in the wildCVE-2023-50164

60

Ransomware group exploits Citrix NetScaler systems for initial access

Help Net SecurityAug 29, 00:00 UTC · Aug 29, 2023Ransomware in the wildCVE-2023-3519

60

CISA, experts warn of Citrix vulnerabilities being exploited by hackers

The RecordAug 16, 21:19 UTC · Aug 16, 2023Vulnerability CVE-2023-24489 CVE-2023-3519

47

Approximately 2000 Citrix NetScaler servers were backdoored in massive campaign

Security AffairsAug 16, 07:20 UTC · Aug 16, 2023Malware in the wildCVE-2023-3519

60

Citrix ADC zero-day exploitation: CISA releases details about attack on CI organization (CVE-2023-3519)

Help Net SecurityJul 24, 09:30 UTC · Jul 24, 2023Exploit / PoC in the wildCVE-2023-35191

60

Healthcare organizations in the crosshairs of cyberattackers

Help Net SecurityJul 18, 00:00 UTC · Jul 18, 2023Ransomware CVE-2021-44228 CVE-2022-22965

60

China-linked hackers target telecommunication providers in the Middle East

Security AffairsMar 24, 21:04 UTC · Mar 24, 2023Malware

42

Microsoft Exchange admins advised to expand antivirus scanning

Help Net SecurityFeb 27, 00:00 UTC · Feb 27, 2023Exploit / PoC

60

Fortinet FortiNAC CVE-2022-39952 flaw exploited in the wild hours after release of PoC exploit

Security AffairsFeb 23, 19:45 UTC · Feb 23, 2023Exploit / PoC in the wildCVE-2022-39952 CVE-2021-42756

60

Critical Microsoft Azure RCE flaw impacted multiple services

Security AffairsJan 19, 16:02 UTC · Jan 19, 2023Vulnerability

55

CISA orders civilian agencies to patch Zimbra bug after mass exploitation

The RecordJan 11, 00:00 UTC · Jan 11, 2023Vulnerability in the wildCVE-2022-37042 CVE-2022-27925 CVE-2022-27924

60

FBI: An APT abused a zero

The RecordDec 19, 00:00 UTC · Dec 19, 2022Exploit / PoC

60

FBI: Iranian threat actor trying to acquire leaked data on US organizations

The RecordDec 19, 00:00 UTC · Dec 19, 2022Data breach CVE-2019-10068 CVE-2008-3362 CVE-2014-4725+8 CVEs

50

Two Microsoft Exchange zero-days exploited by attackers (CVE-2022-41040, CVE-2022-41082)

Help Net SecurityOct 3, 10:39 UTC · Oct 3, 2022Vulnerability CVE-2022-41040 CVE-2022-41082

60

TAC-040 group used previously undetected Ljl Backdoor

Security AffairsAug 5, 08:52 UTC · Aug 5, 2022Malware CVE-2022-26134 CVE-2022-22965

47

Threat actors are actively exploiting CVE-2022-1388 RCE in F5 BIG

Security AffairsMay 10, 06:42 UTC · May 10, 2022Vulnerability CVE-2022-1388

60

Hackers breached a server of National Games of China before the event

Security AffairsFeb 7, 12:55 UTC · Feb 7, 2022Data breach

45

Tens of AccessPress WordPress themes compromised as part of a supply chain attack

Security AffairsJan 24, 20:33 UTC · Jan 24, 2022Vulnerability CVE-2021-24867

47

Determined APT is exploiting ManageEngine ServiceDesk Plus vulnerability (CVE-2021-44077)

Help Net SecurityDec 3, 00:00 UTC · Dec 3, 2021Vulnerability in the wildCVE-2021-44077 CVE-2021-336171

60

Zero-Day flaw in FatPipe products actively exploited, FBI warns

Security AffairsNov 18, 15:34 UTC · Nov 18, 2021Exploit / PoC in the wild

60

Nation-state actors target critical sectors by exploiting CVE-2021

Security AffairsNov 8, 10:37 UTC · Nov 8, 2021Threat actor in the wildCVE-2021-40539

60

CISA publishes malware analysis reports on samples targeting Pulse Secure devices

Security AffairsAug 26, 22:32 UTC · Aug 26, 2021Malware CVE-2021-22893 CVE-2021-22937 CVE-2020-8260

60

WARNING: Microsoft Exchange Under Attack With ProxyShell Flaws

The Hacker NewsAug 23, 13:28 UTC · Aug 23, 2021Ransomware in the wildCVE-2021-34473 CVE-2021-34523 CVE-2021-31207

60

Black Kingdom ransomware

Kaspersky SecurelistJun 17, 09:42 UTC · Jun 17, 2021Ransomware CVE-2021-27065 CVE-2019-11510 CVE-2021-26855+2 CVEs

60

Operation TunnelSnake

Kaspersky SecurelistMay 6, 10:00 UTC · May 6, 2021Vulnerability

42

APT trends report Q1 2021

Kaspersky SecurelistApr 27, 10:00 UTC · Apr 27, 2021Exploit / PoC in the wild

60

China-linked APT used Pulse Secure VPN zero-day to hack US defense contractors

Security AffairsApr 21, 05:38 UTC · Apr 21, 2021Exploit / PoC CVE-2021-22893

60