Gamaredon Uses WinRAR Vulnerability to Launch Modular Spy Campaign on Ukrainian TargetsSecurity Affairs·Jun 4, 10:53 UTC · Jun 4, 2026VulnerabilityCVE-2025-808860
Fancy Bear spotted using real Kazak government documents in spearpishing campaignCyberScoop·Jan 15, 15:14 UTC · Jan 15, 2025Threat actor in the wild60
Predator Spyware Linked to Madagascar’s Government Ahead of ElectionInfosecurity Magazine·Oct 3, 14:30 UTC · Oct 3, 2023MalwareCVE-2023-41991CVE-2023-41992CVE-2023-41993160
Pro-Russian hackers upgrade DDoSia bot used to attack Ukraine, NATO countriesThe Record·Jun 30, 20:05 UTC · Jun 30, 2023Malware55
French Authorities Launch Operation to Remove PlugX Malware from Infected SystemsThe Hacker News·Jan 3, 04:54 UTC · Jan 3, 2025Malware55
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit ReposThe Hacker News·Jul 2, 07:29 UTC · Jul 2, 2026Exploit / PoCCVE-2025-64446CVE-2025-55182CVE-2025-14847+5 CVEs160
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against UkraineThe Hacker News·Jun 2, 18:21 UTC · Jun 2, 2026VulnerabilityCVE-2025-8088CVE-2026-2150960
FSB Group Gamaredon Hides Worm in Windows Data StreamsInfosecurity Magazine·Jun 1, 11:00 UTC · Jun 1, 2026Exploit / PoCCVE-2025-808860
Hackers Exploit Milesight Routers to Send Phishing SMS to European UsersThe Hacker News·Oct 2, 06:34 UTC · Oct 2, 2025Phishing & fraud in the wildCVE-2023-4326160
ViciousTrap Uses Cisco Flaw to Build Global Honeypot from 5,300 Compromised DevicesThe Hacker News·May 29, 08:55 UTC · May 29, 2025Exploit / PoC in the wildCVE-2023-20118CVE-2023-3978060
PolarEdge Botnet Exploits Cisco and Other Flaws to Hijack ASUS, QNAP, and Synology DevicesThe Hacker News·Mar 1, 07:54 UTC · Mar 1, 2025MalwareCVE-2023-2011860
Predator spyware endures even after widespread exposure, analysis showsCyberScoop·Mar 1, 15:22 UTC · Mar 1, 2024Malware in the wild60
UAT-7290 targets high value telecommunications infrastructure in South AsiaCisco Talos·Jan 8, 11:00 UTC · Jan 8, 2026Exploit / PoC60
China-Backed Hackers Leverage SIGTRAN, GSM Protocols to Infiltrate Telecom NetworksThe Hacker News·Nov 26, 04:37 UTC · Nov 26, 2024Vulnerability55
Helldown Ransomware Expands to Target VMware and Linux SystemsInfosecurity Magazine·Nov 19, 16:30 UTC · Nov 19, 2024Ransomware60
Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet AttacksThe Hacker News·Aug 31, 15:10 UTC · Aug 31, 2024VulnerabilityCVE-2024-7029CVE-2014-8361CVE-2017-1721560
China-Linked Hackers Suspected in ArcaneDoor Cyberattacks Targeting Network DevicesThe Hacker News·May 12, 14:25 UTC · May 12, 2024Exploit / PoCCVE-2024-20353CVE-2024-2035960
BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware DeliveryThe Hacker News·Aug 1, 05:19 UTC · Aug 1, 2026Malware55
This phishing kit looks more like BEC-as-aCyberScoop·Jul 1, 10:00 UTC · Jul 1, 2026Phishing & fraud55
ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, DeviceThe Hacker News·Jun 18, 15:29 UTC · Jun 18, 2026Exploit / PoCCVE-2026-20127160
ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & MoreThe Hacker News·Mar 19, 14:25 UTC · Mar 19, 2026Ransomware in the wildCVE-2024-55591CVE-2025-71257CVE-2025-71258+4 CVEs60
ThreatsDay Bulletin: OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ StoriesThe Hacker News·Feb 23, 10:23 UTC · Feb 23, 2026Vulnerability55
APT36 and SideCopy Launch Cross-Platform RAT Campaigns Against Indian EntitiesThe Hacker News·Feb 11, 17:14 UTC · Feb 11, 2026Malware55
ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ StoriesThe Hacker News·Feb 5, 17:14 UTC · Feb 5, 2026Vulnerability in the wild160
ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts— and 15 More StoriesThe Hacker News·Dec 4, 16:05 UTC · Dec 4, 2025Phishing & fraud55
Hackers Abuse Blockchain Smart Contracts to Spread Malware via Infected WordPress SitesThe Hacker News·Oct 17, 04:33 UTC · Oct 17, 2025Malware55
Threat Actor Mimo Targets Magento and Docker to Deploy Crypto Miners and ProxywareThe Hacker News·Jul 23, 17:15 UTC · Jul 23, 2025Threat actorCVE-2025-32432160
LapDogs: China-nexus hackers Hijack 1,000+ SOHO devices for espionageSecurity Affairs·Jun 28, 13:29 UTC · Jun 28, 2025Threat actorCVE-2015-1548CVE-2017-1766360
Thousands of ASUS Routers Hijacked in Stealthy Backdoor CampaignInfosecurity Magazine·May 29, 13:05 UTC · May 29, 2025MalwareCVE-2023-3978060
Cisco, Hitachi, Microsoft, and Progress Flaws Actively Exploited—CISA Sounds AlarmThe Hacker News·Mar 4, 16:12 UTC · Mar 4, 2025Exploit / PoC in the wildCVE-2023-20118CVE-2022-43939CVE-2022-43769+2 CVEs60
New Malware Campaign Uses Cracked Software to Spread Lumma and ACR StealerThe Hacker News·Feb 24, 16:58 UTC · Feb 24, 2025MalwareCVE-2024-4357260
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [20 January]The Hacker News·Jan 20, 12:04 UTC · Jan 20, 2025RansomwareCVE-2025-21333CVE-2025-21334CVE-2025-21335+36 CVEs160
Law enforcement action deletes PlugX malware from thousands of machinesCyberScoop·Jan 14, 17:33 UTC · Jan 14, 2025Malware in the wild60
CISA Warns of Active Exploitation of Flaws in Zyxel, ProjectSend, and CyberPanelThe Hacker News·Dec 5, 07:17 UTC · Dec 5, 2024Advisory in the wildCVE-2024-51378CVE-2023-45727CVE-2024-11680+4 CVEs60
Zyxel firewalls targeted in recent ransomware attacksSecurity Affairs·Nov 25, 21:04 UTC · Nov 25, 2024RansomwareCVE-2024-4205760
China Accuses U.S. of Fabricating Volt Typhoon to Hide Its Own Hacking CampaignsThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2024Threat actorCVE-2024-3971760
U.S. Court Orders NSO Group to Hand Over Pegasus Spyware Code to WhatsAppThe Hacker News·Mar 5, 15:54 UTC · Mar 5, 2024MalwareCVE-2019-356860
US sanctions Predator spyware makers for targeting gov’t officialsThe Record·Mar 5, 15:50 UTC · Mar 5, 2024Malware55
Predator spyware infrastructure taken down after exposureCyberScoop·Mar 4, 19:46 UTC · Mar 4, 2024Malware in the wild60
New Mispadu Banking Trojan Exploiting Windows SmartScreen FlawThe Hacker News·Feb 5, 15:49 UTC · Feb 5, 2024Malware in the wildCVE-2023-3602560