Search: “Shadowserver Foundation”

202 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 81 Exploit / PoC 69 Ransomware 48 Malware 46 Data breach 12 Phishing & fraud 10 Threat actor 7 Industry 3 Advisory 3 Policy & legal 2 AI tools & infra 1 Tools 1 Model release 1

SeverityAll critical 202 high 54 medium 19 low 5 info 4

How the Shadowserver Foundation helps network defenders with free intelligence feeds

Help Net SecurityDec 5, 00:00 UTC · Dec 5, 2024Ransomware

60

Mirai-like botnet is exploiting recently disclosed Zyxel NAS flaw

Security AffairsJun 25, 16:52 UTC · Jun 25, 2024Malware in the wildCVE-2024-29973 CVE-2023-27992

60

Fortinet FortiWeb flaw CVE-2025

Security AffairsJul 19, 16:25 UTC · Jul 19, 2025Exploit / PoC in the wildCVE-2025-25257

60

CrushFTP Vulnerability Exploited Following Disclosure Issues

Infosecurity MagazineApr 3, 16:00 UTC · Apr 3, 2025Vulnerability in the wildCVE-2025-31161 CVE-2025-2825

60

Experts warn of exploit attempt for Ivanti vTM bug

Security AffairsAug 19, 09:35 UTC · Aug 19, 2024Ransomware CVE-2024-7593

60

+20,000 internet-exposed VMware ESXi instances vulnerable to CVE-2024

Security AffairsAug 1, 20:28 UTC · Aug 1, 2024Ransomware in the wildCVE-2024-37085

60

A botnet exploits e GeoVision zero

Security AffairsNov 17, 04:53 UTC · Nov 17, 2024Malware CVE-2024-11120

60

U.S. CISA adds GoVision device flaws to its Known Exploited Vulnerabilities catalog

Security AffairsMay 8, 08:04 UTC · May 8, 2025Exploit / PoC in the wildCVE-2024-6047 CVE-2024-11120

60

Hackers already installed web shells on 581 Citrix servers in CVE-2023

Security AffairsAug 2, 20:50 UTC · Aug 2, 2023Exploit / PoC in the wildCVE-2023-3519

60

Tens of thousands of IPs vulnerable to Fortinet flaw dubbed 'must patch' by feds

CyberScoopOct 14, 16:22 UTC · Oct 14, 2024Vulnerability in the wild

60

New CrushFTP Critical Vulnerability Exploited in the Wild

Infosecurity MagazineJul 21, 14:00 UTC · Jul 21, 2025Exploit / PoC in the wildCVE-2025-54309 CVE-2025-31161

60

CISA Warns of CrushFTP Vulnerability Exploitation in the Wild

Infosecurity MagazineApr 8, 12:20 UTC · Apr 8, 2025Exploit / PoC in the wildCVE-2025-31161 CVE-2025-2825 CVE-2024-2825

60

Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed

Security AffairsJul 1, 19:49 UTC · Jul 1, 2026Exploit / PoC in the wildCVE-2026-46817

60

New MOVEit Transfer critical bug is actively exploited

Security AffairsJun 26, 19:54 UTC · Jun 26, 2024Vulnerability in the wildCVE-2024-5805 CVE-2024-5806

60

Over 80,000 servers hit as roundcube RCE bug gets rapidly exploited

Security AffairsJun 11, 11:43 UTC · Jun 11, 2025Vulnerability CVE-2025-49113

60

CISA: Patch Critical GeoServer GeoTools Bug Now

Infosecurity MagazineJul 17, 09:30 UTC · Jul 17, 2024Vulnerability in the wildCVE-2024-36401

60

CVE-2026-10520 Exploited: Ivanti Sentry Gateways Compromised Shortly After Patch Release

Security AffairsJun 12, 18:42 UTC · Jun 12, 2026Vulnerability in the wildCVE-2026-10520 CVE-2026-1340 CVE-2026-1603

60

Microsoft Exchange flaw CVE-2024

Security AffairsFeb 21, 07:33 UTC · Feb 21, 2024Ransomware in the wildCVE-2024-21410

60

HelloKitty Ransomware Group Exploiting Apache ActiveMQ Vulnerability

The Hacker NewsNov 4, 04:55 UTC · Nov 4, 2023Ransomware in the wildCVE-2023-46604

60

Cozy Bear Hackers Target JetBrains TeamCity Servers in Global Campaign

Infosecurity MagazineDec 14, 15:30 UTC · Dec 14, 2023Threat actor CVE-2023-42793

60

Shadowserver: Get free access to timely, critical Internet security data

Help Net SecurityJun 1, 12:29 UTC · Jun 1, 2023Industry

55

Week in review: Veeam Service Provider Console flaws fixed, Patch Tuesday forecast

Help Net SecurityDec 8, 00:00 UTC · Dec 8, 2024Vulnerability CVE-2024-42448 CVE-2024-42449 CVE-2024-41713+1 CVEs

60

SAP Flaw Exploited by Ransomware Groups and Chinese

Infosecurity MagazineMay 15, 15:15 UTC · May 15, 2025Ransomware in the wildCVE-2025-31324 CVE-2025-42999

60

No, I Did Not Hack Your MS Exchange Server

Krebs on SecurityMar 28, 18:16 UTC · Mar 28, 2021Exploit / PoC in the wild

60

FIN8-linked actor targets Citrix NetScaler systems

Security AffairsAug 29, 15:14 UTC · Aug 29, 2023Ransomware CVE-2023-3519

60

Operation Endgame targets malware networks in global crackdown

CyberScoopNov 13, 14:49 UTC · Nov 13, 2025Malware in the wild

60

⚡ THN Weekly Recap: New Attacks, Old Tricks, Bigger Impact

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Ransomware CVE-2025-25015 CVE-2025-22224 CVE-2025-22225+18 CVEs

60

Over 28,000 Citrix instances remain exposed to critical RCE flaw CVE-2025

Security AffairsAug 27, 19:05 UTC · Aug 27, 2025Vulnerability in the wildCVE-2025-7775 CVE-2025-7776 CVE-2025-8424

60

Over 840k Cisco systems affected by Equation Group flaw CVE-2016

Security AffairsSep 21, 12:37 UTC · Sep 21, 2016Exploit / PoC CVE-2016-6415

60

Hundreds of Citrix Endpoints Compromised With Webshells

Infosecurity MagazineAug 3, 10:00 UTC · Aug 3, 2023Exploit / PoC CVE-2023-3519 CVE-2023-3466 CVE-2023-3467

60

Hundreds of Citrix NetScaler ADC and Gateway Servers Hacked in Major Cyber Attack

The Hacker NewsAug 8, 03:59 UTC · Aug 8, 2023Data breach CVE-2023-3519 CVE-2023-24489

60

Researchers track dozens of organizations affected by React2Shell compromises tied to China’s MSS

The RecordDec 8, 16:31 UTC · Dec 8, 2025Exploit / PoC in the wildCVE-2025-55182

60

Warning: Over 2,000 Palo Alto Networks Devices Hacked in Ongoing Attack Campaign

The Hacker NewsNov 23, 06:38 UTC · Nov 23, 2024Threat actor in the wildCVE-2024-0012 CVE-2024-9474

60

Cops in several countries bust Avalanche, biggest ever botnet business

CyberScoopDec 1, 22:24 UTC · Dec 1, 2016Malware in the wild

60

Citrix Patches Three Zero Days as One Sees Active Exploitation

Infosecurity MagazineAug 27, 11:10 UTC · Aug 27, 2025Vulnerability in the wildCVE-2025-7775 CVE-2025-7776 CVE-2025-8424+1 CVEs

60

Attackers Exploit RCE Flaw as 14,000 F5 BIG

Security AffairsApr 6, 13:08 UTC · Apr 6, 2026Vulnerability in the wildCVE-2025-53521

60

Shadowserver finds 6,000+ likely vulnerable SmarterMail servers exposed online

Security AffairsJan 27, 15:28 UTC · Jan 27, 2026Exploit / PoC in the wildCVE-2026-23760

60

U.S. CISA adds Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog

Security AffairsJul 20, 13:38 UTC · Jul 20, 2025Exploit / PoC in the wildCVE-2025-25257

60

CrushFTP CVE-2025

Security AffairsApr 1, 14:09 UTC · Apr 1, 2025Ransomware in the wildCVE-2025-2825

60

PHP addressed critical RCE potentially impacting millions of servers

Security AffairsJun 9, 13:27 UTC · Jun 9, 2024Vulnerability CVE-2024-4577 CVE-2012-1823

60