Search: “web shells”

2,213 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 549 Vulnerability 513 Ransomware 366 Exploit / PoC 352 Threat actor 212 Data breach 107 Phishing & fraud 40 Policy & legal 27 Advisory 16 Industry 13 AI safety & security 9 Tools 7 Research 6 AI tools & infra 4

SeverityAll critical 1001 high 847 medium 293 low 60 info 25

Chinese Groups Deploy New TTPs to Exploit Ivanti Vulnerabilities

Infosecurity MagazineApr 5, 15:00 UTC · Apr 5, 2024Vulnerability CVE-2023-46805 CVE-2024-21887 CVE-2024-21893

47

Hackers hosted tools on a Stanford University website for months

Help Net SecurityJun 26, 21:22 UTC · Jun 26, 2018Malware

30

Five Eyes Intelligence agencies warn of popular hacking tools

Security AffairsOct 12, 12:54 UTC · Oct 12, 2018Malware

55

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

The Hacker NewsAug 11, 05:48 UTC · Aug 11, 2026Vulnerability CVE-2026-18072 CVE-2026-64638

47

Researchers Identify Multiple China Hacker Groups Exploiting Ivanti Security Flaws

The Hacker NewsApr 6, 09:12 UTC · Apr 6, 2024Exploit / PoC CVE-2023-46805 CVE-2024-21887 CVE-2024-21893

60

Nation-State Actors Weaponize Ivanti VPN Zero

The Hacker NewsJan 17, 01:56 UTC · Jan 17, 2024Threat actor in the wildCVE-2023-46805 CVE-2024-218871

60

UK NHS: Threat actor targets VMware Horizon servers using Log4Shell exploits

The RecordJan 17, 00:00 UTC · Jan 17, 2023Threat actor

57

Hackers deploy DripDropper via Apache ActiveMQ flaw, patch systems to evade detection

Security AffairsAug 21, 16:30 UTC · Aug 21, 2025Vulnerability in the wildCVE-2023-46604

60

Chinese Hackers Exploit Ivanti CSA Zero-Days in Attacks on French Government, Telecoms

The Hacker NewsJul 3, 09:25 UTC · Jul 3, 2025Exploit / PoC in the wildCVE-2024-8963 CVE-2024-9380 CVE-2024-8190

60

Chinese-Speaking Hacker Group Targets Human Rights Studies in Middle East

The Hacker NewsSep 5, 16:19 UTC · Sep 5, 2024Vulnerability CVE-2023-26360 CVE-2021-34473 CVE-2021-34523+1 CVEs

60

Defending Microsoft Exchange from encrypted attacks with Cisco Secure IPS

Cisco TalosMar 23, 20:50 UTC · Mar 23, 2021Vulnerability CVE-2021-26855 CVE-2021-27065

60

CISA Issues Emergency Directive on In-the

The Hacker NewsMar 5, 06:35 UTC · Mar 5, 2021Data breach in the wildCVE-2021-26855

60

Large-scale Citrix NetScaler Gateway credential harvesting campaign exploits CVE-2023

Security AffairsOct 9, 22:02 UTC · Oct 9, 2023Threat actor in the wildCVE-2023-3519

60

China's Volt Typhoon botnet has re

Security AffairsNov 13, 19:16 UTC · Nov 13, 2024Malware CVE-2024-39717

60

Hackers exploited Centreon monitoring software to compromise IT providers

Help Net SecurityFeb 16, 00:00 UTC · Feb 16, 2021Vulnerability

42

CISA reveals new malware variant used on compromised Ivanti Connect Secure devices

Help Net SecurityApr 2, 08:43 UTC · Apr 2, 2025Malware in the wildCVE-2025-0282

60

No, I Did Not Hack Your MS Exchange Server

Krebs on SecurityMar 28, 18:16 UTC · Mar 28, 2021Exploit / PoC in the wild

60

Malicious IIS Extensions Gaining Popularity Among Cyber Criminals for Persistent Access

The Hacker NewsJul 27, 07:17 UTC · Jul 27, 2022Vulnerability

55

Hackers Targeting VoIP Servers By Exploiting Digium Phone Software

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2022Vulnerability CVE-2021-45461

47

Dutch NCSC Confirms Active Exploitation of Citrix NetScaler CVE-2025

The Hacker NewsAug 12, 08:36 UTC · Aug 12, 2025Exploit / PoC in the wildCVE-2025-6543 CVE-2025-5777

60

3 0Day in SonicWall Enterprise Email Security products actively exploited

Security AffairsApr 21, 10:25 UTC · Apr 21, 2021Exploit / PoC in the wildCVE-2021-20021 CVE-2021-20022 CVE-2021-20023+1 CVEs

60

Alert: 'Effluence' Backdoor Persists Despite Patching Atlassian Confluence Servers

The Hacker NewsNov 10, 08:58 UTC · Nov 10, 2023Malware CVE-2023-22515 CVE-2023-22518

60

Hackers go after SonicWall email appliances with three zero

The RecordJan 26, 00:00 UTC · Jan 26, 2023Exploit / PoC in the wildCVE-2021-20021 CVE-2021-20023 CVE-2021-20022

60

Hezbollah Hacker Group Targeted Telecoms, Hosting, ISPs Worldwide

The Hacker NewsJan 29, 10:08 UTC · Jan 29, 2021Vulnerability CVE-2019-3396 CVE-2019-11581 CVE-2012-3152

35

China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists

The Hacker NewsMay 2, 06:30 UTC · May 2, 2026Vulnerability CVE-2025-55182

60

NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon

The Hacker NewsJan 8, 07:04 UTC · Jan 8, 2022Ransomware in the wildCVE-2021-44228

60

Researchers Warn of Ongoing Attacks Exploiting Critical Zimbra Postjournal Flaw

The Hacker NewsOct 4, 06:25 UTC · Oct 4, 2024Exploit / PoC in the wildCVE-2024-45519

60

Experts Detail Malicious Code Dropped Using ManageEngine ADSelfService Exploit

The Hacker NewsNov 9, 03:15 UTC · Nov 9, 2021Exploit / PoC in the wildCVE-2021-405391

60

Asian State-Backed Group TGR-STA-1030 Breaches 70 Government, Infrastructure Entities

The Hacker NewsFeb 7, 11:03 UTC · Feb 7, 2026Exploit / PoC

60

Microsoft confirms Exchange zero

Security AffairsSep 30, 10:18 UTC · Sep 30, 2022Exploit / PoC in the wildCVE-2022-41040 CVE-2022-41082

60

Google, Mandiant expose malware and zero

Security AffairsOct 13, 08:35 UTC · Oct 13, 2025Malware in the wildCVE-2025-61882

60

CrowdStrike ties Oracle EBS RCE (CVE-2025

Security AffairsOct 7, 08:42 UTC · Oct 7, 2025Vulnerability in the wildCVE-2025-61882

60

Cacti Servers Under Attack as Majority Fail to Patch Critical Vulnerability

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2023Vulnerability in the wildCVE-2022-46169 CVE-2023-22952

60

Microsoft shares one-click ProxyLogon mitigation tool for Exchange servers

The RecordJan 24, 00:00 UTC · Jan 24, 2023Ransomware CVE-2021-26855

60

Hard-Coded 'b' Password in Sitecore XP Sparks Major RCE Risk in Enterprise Deployments

The Hacker NewsJun 19, 03:14 UTC · Jun 19, 2025Vulnerability in the wildCVE-2025-34509 CVE-2025-34510 CVE-2025-34511+3 CVEs

60

Quarterly Report: Incident Response trends from Winter 2020

Cisco TalosMar 24, 12:26 UTC · Mar 24, 2021Ransomware CVE-2021-26855 CVE-2020-5902 CVE-2019-18935

60

Hackers Exploiting Unpatched Critical Atlassian Confluence Zero

The Hacker NewsJun 3, 09:27 UTC · Jun 3, 2022Vulnerability in the wildCVE-2022-26134 CVE-2021-26084

60

Threat actors are hijacking the infamous Emotet botnet

Security AffairsJul 25, 08:25 UTC · Jul 25, 2020Malware

42

Server-side attacks, C&C in public clouds and other MDR cases we observed

Kaspersky SecurelistNov 2, 08:00 UTC · Nov 2, 2022Vulnerability

30

Hacktivist Group Twelve Targets Russian Entities with Destructive Cyber Attacks

The Hacker NewsOct 19, 07:30 UTC · Oct 19, 2024Ransomware CVE-2021-21972 CVE-2021-22005

60