Search: “evals”

244 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 72 Malware 50 Exploit / PoC 24 AI safety & security 17 Model release 16 AI research 12 Data breach 10 AI industry 9 Ransomware 8 Threat actor 8 AI tools & infra 5 Policy & legal 4 Advisory 3 Research 3

SeverityAll critical 63 high 61 medium 58 low 15 info 48

SesameOp: New backdoor exploits OpenAI API for covert C2

Security AffairsNov 4, 17:06 UTC · Nov 4, 2025Malware

42

Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks

The Hacker NewsOct 31, 07:59 UTC · Oct 31, 2025Ransomware

60

CISA Flags VMware Zero-Day Exploited by China

The Hacker NewsOct 31, 07:09 UTC · Oct 31, 2025Exploit / PoC in the wildCVE-2025-41244

60

U.S. CISA adds XWiki Platform, and Broadcom VMware Aria Operations and VMware Tools flaws to its Known Exploited Vulnerabilities catalog

Security AffairsOct 30, 23:15 UTC · Oct 30, 2025Exploit / PoC in the wildCVE-2025-24893 CVE-2025-41244

60

Active Exploits Hit Dassault and XWiki — CISA Confirms Critical Flaws Under Attack

The Hacker NewsOct 30, 09:41 UTC · Oct 30, 2025Exploit / PoC in the wildCVE-2025-6204 CVE-2025-6205 CVE-2025-24893+1 CVEs

60

Redis patches 13-Year-Old Lua flaw enabling Remote Code Execution

Security AffairsOct 8, 09:10 UTC · Oct 8, 2025Vulnerability CVE-2025-49844

60

13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely

The Hacker NewsOct 7, 09:30 UTC · Oct 7, 2025Vulnerability in the wildCVE-2025-49844

60

Redis patches critical "RediShell" RCE vulnerability, update ASAP! (CVE-2025-49844)

Help Net SecurityOct 7, 00:00 UTC · Oct 7, 2025Vulnerability in the wildCVE-2025-49844

60

CISA Flags Meteobridge CVE-2025-4008 Flaw as Actively Exploited in the Wild

The Hacker NewsOct 3, 08:23 UTC · Oct 3, 2025Exploit / PoC in the wildCVE-2025-4008 CVE-2025-21043 CVE-2017-1000353+2 CVEs

60

How threat actors breached U.S. federal civilian agency by exploiting a GeoServer flaw

Security AffairsSep 24, 10:16 UTC · Sep 24, 2025Data breach in the wildCVE-2024-36401

60

Linux Malware Delivered via Malicious RAR Filenames Evades Antivirus Detection

The Hacker NewsAug 22, 15:33 UTC · Aug 22, 2025Malware

42

⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More

The Hacker NewsAug 5, 04:38 UTC · Aug 5, 2025Malware in the wildCVE-2025-40596 CVE-2025-40597 CVE-2025-40598+8 CVEs

60

Shell No! (Part 2) Introducing Cknife, China Chopper’s Sibling

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability

42

Shell No! Adversary Web Shell Trends and Mitigations (Part 1)

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability

42

Free AI coding security rules now available on GitHub

Help Net SecurityJun 17, 00:00 UTC · Jun 17, 2025AI safety & security

30

Crypto Developers Targeted by Python Malware Disguised as Coding Challenges

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2025Malware1

30

North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages

The Hacker NewsApr 7, 06:39 UTC · Apr 7, 2025Malware

42

Hiding WordPress malware in the mu

Security AffairsApr 1, 07:45 UTC · Apr 1, 2025Malware

55

SideWinder APT attacks in H2 2024

Kaspersky SecurelistMar 10, 10:01 UTC · Mar 10, 2025Vulnerability CVE-2017-11882

47

Unmasking the new persistent attacks on Japan

Cisco TalosMar 6, 11:00 UTC · Mar 6, 2025Vulnerability CVE-2024-45771

60

Kaspersky SOC analyzes an incident involving a web shell used as a backdoor

Kaspersky SecurelistFeb 28, 04:00 UTC · Feb 28, 2025Malware

42

Decades-Old Security Vulnerabilities Found in Ubuntu's Needrestart Package

The Hacker NewsNov 20, 10:24 UTC · Nov 20, 2024Vulnerability CVE-2024-48990 CVE-2024-48991 CVE-2024-48992+2 CVEs

35

Writing a BugSleep C2 server and detecting its traffic with Snort

Cisco TalosOct 30, 10:00 UTC · Oct 30, 2024Malware1

30

U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog

Security AffairsOct 25, 07:40 UTC · Oct 25, 2024Exploit / PoC in the wildCVE-2024-20481 CVE-2024-37383

60

Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials

The Hacker NewsOct 21, 12:12 UTC · Oct 21, 2024Vulnerability CVE-2024-37383

35

Unknown threat actors exploit Roundcube Webmail flaw in phishing campaign

Security AffairsOct 21, 06:28 UTC · Oct 21, 2024Threat actor CVE-2024-37383

50

North Korean Hackers Target Developers with Malicious npm Packages

The Hacker NewsAug 31, 15:12 UTC · Aug 31, 2024Malware

42

CISA adds OSGeo GeoServer GeoTools bug to its Known Exploited Vulnerabilities catalog

Security AffairsJul 16, 14:57 UTC · Jul 16, 2024Exploit / PoC in the wildCVE-2024-36401

60

Hidden between the tags: Insights into spammers’ evasion techniques in HTML Smuggling

Cisco TalosJul 10, 12:00 UTC · Jul 10, 2024Malware

42

Threat Brief: CVE-2022

Palo Alto Unit 42Jun 5, 22:35 UTC · Jun 5, 2024Vulnerability in the wildCVE-2022-1388

60

Hackers Exploiting LiteSpeed Cache Bug to Gain Full Control of WordPress Sites

The Hacker NewsMay 8, 14:05 UTC · May 8, 2024Vulnerability in the wildCVE-2023-40000

60

Threat actors are exploiting critical Magento vulnerability CVE-2024-20720 to install a persistent backdoor on e

Security AffairsApr 5, 20:41 UTC · Apr 5, 2024Vulnerability CVE-2024-20720

60

Chinese Groups Deploy New TTPs to Exploit Ivanti Vulnerabilities

Infosecurity MagazineApr 5, 15:00 UTC · Apr 5, 2024Vulnerability CVE-2023-46805 CVE-2024-21887 CVE-2024-21893

47

Winter Vivern APT exploited zero-day in Roundcube webmail software in recent attacks

Security AffairsOct 26, 05:20 UTC · Oct 26, 2023Exploit / PoC CVE-2020-35730 CVE-2022-27926 CVE-2023-5631

60

$260 Million AI Company Releases Undeletable Chatbot That Gives Detailed Instructions on Murder, Ethnic Cleansing

404 MediaSep 30, 12:50 UTC · Sep 30, 2023Model release

50

The many vulnerabilities Talos discovered in SOHO and industrial wireless routers post

Cisco TalosAug 2, 12:00 UTC · Aug 2, 2023Vulnerability

30

A Data Exfiltration Attack Scenario: The Porsche Experience

The Hacker NewsJul 28, 11:48 UTC · Jul 28, 2023Exploit / PoC

60

What is a web shell?

Cisco TalosMay 26, 12:00 UTC · May 26, 2023Ransomware

45

Quarterly Report: Incident Response Trends in Q1 2023

Cisco TalosApr 26, 12:00 UTC · Apr 26, 2023Ransomware

57

Muhstik Botnet Targeting Redis Servers Using Recently Disclosed Vulnerability

Security AffairsMar 28, 20:43 UTC · Mar 28, 2022Vulnerability CVE-2022-0543 CVE-2019-2725 CVE-2017-10271+1 CVEs

47