Search: “Cobalt”

1,349 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 482 Malware 346 Vulnerability 152 Threat actor 151 Exploit / PoC 81 Data breach 42 Industry 29 Policy & legal 25 Phishing & fraud 17 Advisory 8 AI safety & security 8 AI tools & infra 5 Research 2 AI research 1

SeverityAll critical 441 high 715 medium 139 low 45 info 10

A Multi-Method Approach to Identifying Rogue Cobalt Strike Servers

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Ransomware

57

Identifying Rogue Cobalt Strike Servers: A Recorded Future Approach

Recorded FutureAug 12, 00:00 UTC · Aug 12, 2025Vulnerability

42

Blowing Cobalt Strike Out of the Water With Memory Analysis

Palo Alto Unit 42Jun 5, 17:24 UTC · Jun 5, 2024Ransomware

57

Attackers use domain fronting technique to target Myanmar with Cobalt Strike

Cisco TalosNov 16, 12:00 UTC · Nov 16, 2021Ransomware

57

How to Detect Cobalt Strike: An Inside Look at the Popular Commercial Post

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Ransomware

57

New campaign uses government, union-themed lures to deliver Cobalt Strike beacons

Cisco TalosSep 28, 12:12 UTC · Sep 28, 2022Threat actor CVE-2017-0199

60

Cobalt Partner Program offers new opportunities for partners

Help Net SecurityMar 15, 00:00 UTC · Mar 15, 2021Vulnerability

30

APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt Strike

Cisco TalosAug 1, 12:00 UTC · Aug 1, 2024Threat actor CVE-2018-08241

60

Microsoft leads effort to disrupt illicit use of Cobalt Strike, a dangerous hacking tool in the wrong hands

CyberScoopApr 6, 16:00 UTC · Apr 6, 2023Ransomware in the wild

60

New Snort, ClamAV coverage strikes back against Cobalt Strike

Cisco TalosSep 21, 04:01 UTC · Sep 21, 2020Ransomware1

57

The Cobalt Hacking crew is still active even after the arrest of its leader

Security AffairsMay 29, 05:17 UTC · May 29, 2018Ransomware

60

Live Cybersecurity Webinar — Deconstructing Cobalt Strike

The Hacker NewsJun 11, 08:17 UTC · Jun 11, 2021Vulnerability

30

CobaltSpam tool can flood Cobalt Strike malware servers

The RecordDec 13, 00:00 UTC · Dec 13, 2022Malware

42

IndigoDrop spreads via military

Cisco TalosJun 22, 17:40 UTC · Jun 22, 2020Exploit / PoC

45

Cisco Talos Advisory on Adversaries Targeting the Healthcare and Public Health Sector

Cisco TalosOct 30, 21:30 UTC · Oct 30, 2020Advisory

42

A Cobalt Strike flaw exposed attackers' infrastructure

Security AffairsMar 3, 13:17 UTC · Mar 3, 2019Vulnerability

30

New Techniques to Uncover and Attribute Cobalt Gang Commodity Builders and Infrastructure Revealed

Palo Alto Unit 42Nov 5, 08:54 UTC · Nov 5, 2018Vulnerability CVE-2017-0199

35

Cobalt cybercrime gang targets Russian and Romanian banks

Security AffairsSep 1, 09:34 UTC · Sep 1, 2018Malware

42

Operation Morpheus took down 593 Cobalt Strike servers used by threat actors

Security AffairsJul 3, 18:24 UTC · Jul 3, 2024Threat actor1

60

Cobalt crime gang is using again CobInt in attacks on former soviet states

Security AffairsSep 13, 08:01 UTC · Sep 13, 2018Vulnerability CVE-2017-8570 CVE-2017-11882 CVE-2018-0802+1 CVEs

47

Cobalt adds Autonomous Pentest to scale application security testing

Help Net SecurityJul 23, 00:00 UTC · Jul 23, 2026Threat actor

60

China-Nexus TAG-112 Compromises Tibetan Websites to Distribute Cobalt Strike

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Vulnerability

42

Unmasking the new persistent attacks on Japan

Cisco TalosMar 6, 11:00 UTC · Mar 6, 2025Vulnerability CVE-2024-45771

60

Manjusaka: A Chinese sibling of Sliver and Cobalt Strike

Cisco TalosAug 2, 12:00 UTC · Aug 2, 2022Malware

55

Cobalt names Eric Brinkman as Chief Product Officer

Help Net SecurityFeb 26, 00:00 UTC · Feb 26, 2021Industry

55

Microsoft aims at stopping cybercriminals from using cracked copies of Cobalt Strike

Security AffairsApr 7, 10:38 UTC · Apr 7, 2023Ransomware

60

'Cobalt Group' launches new campaign against banks in Romania, Russia

CyberScoopAug 30, 22:43 UTC · Aug 30, 2018Threat actor in the wild

60

Cobalt adds continuous pentesting AI capabilities to scale offensive security and real-world risk

Help Net SecurityMar 25, 10:01 UTC · Mar 25, 2026Vulnerability

55

Number of Unauthorized Cobalt Strike Copies Plummets 80%

Infosecurity MagazineMar 10, 09:30 UTC · Mar 10, 2025Threat actor

45

HelpSystems Patch Falls Short, RCE Vulnerability in Cobalt Strike Remains

Infosecurity MagazineOct 18, 17:00 UTC · Oct 18, 2022Vulnerability CVE-2022-42948 CVE-2022-39197

47

Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon’s Reach to Linux and macOS

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2025Ransomware

57

SOC files: an APT41 attack on government IT services in Africa

Kaspersky SecurelistJul 21, 08:00 UTC · Jul 21, 2025Threat actor

60

Malicious use of Cobalt Strike down 80% after crackdown, Fortra says

The RecordMar 7, 19:06 UTC · Mar 7, 2025Ransomware

57

UK’s NCA Leads Major Cobalt Strike Takedown

Infosecurity MagazineJul 4, 09:30 UTC · Jul 4, 2024Ransomware

57

Microsoft Takes Legal Action to Disrupt Cybercriminals' Illegal Use of Cobalt Strike Tool

The Hacker NewsApr 8, 04:44 UTC · Apr 8, 2023Ransomware

57

Threat actor ports Cobalt Strike beacon to Linux, uses it in attacks

The RecordDec 13, 00:00 UTC · Dec 13, 2022Threat actor

57

Google seeks to make Cobalt Strike useless to attackers

Help Net SecurityNov 21, 00:00 UTC · Nov 21, 2022Threat actor

45

Experts found a link between a Magecart group and Cobalt Group

Security AffairsOct 8, 14:14 UTC · Oct 8, 2019Vulnerability CVE-2017-0199

47

Bug in Cobalt Strike pentesting tool used to identify malicious servers

Help Net SecurityMar 1, 00:00 UTC · Mar 1, 2019Malware

42

Additional Entities Targeted by DarkSide Affiliate, TAG-21; Links to WellMess and Sliver Infrastructure

Recorded FutureJul 15, 00:00 UTC · Jul 15, 2025Ransomware

57