Search: “bootkit”

73 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 53 Vulnerability 52 Exploit / PoC 27 Ransomware 22 Threat actor 4 Data breach 4 Phishing & fraud 1 Advisory 1 Policy & legal 1

SeverityAll critical 73 high 59 medium 31 low 2 info 0

XPAJ: Reversing a Windows x64 Bootkit

Kaspersky SecurelistJun 19, 18:16 UTC · Jun 19, 2012Ransomware

60

BlackLotus UEFI bootkit disables Windows security mechanisms

Help Net SecurityApr 17, 10:14 UTC · Apr 17, 2023Vulnerability in the wildCVE-2022-21894

60

Bootkit 2009

Kaspersky SecurelistJun 9, 16:00 UTC · Jun 9, 2009Exploit / PoC

60

Windows and Linux users: The deadline to update Secure Boot keys is near

Ars Technica · SecurityJun 17, 11:15 UTC · Jun 17, 2026Vulnerability1

55

Stealthy firmware bootkit leveraged by APT in targeted attacks

Help Net SecurityJan 21, 00:00 UTC · Jan 21, 2022Malware

55

BlackLotus is first bootkit bypassing UEFI Secure Boot on Win 11

Security AffairsMar 1, 20:57 UTC · Mar 1, 2023Vulnerability CVE-2022-21894

60

BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

The Hacker NewsJun 23, 08:42 UTC · Jun 23, 2023Malware in the wildCVE-2022-218941

60

Third Firmware Bootkit Discovered

Infosecurity MagazineJan 20, 17:00 UTC · Jan 20, 2022Malware

55

New Bootkit “Bootkitty” Targets Linux Systems via UEFI

Infosecurity MagazineNov 27, 16:30 UTC · Nov 27, 2024Exploit / PoC

60

Legit bootkits

Kaspersky SecurelistDec 1, 12:34 UTC · Dec 1, 2011Malware

55

Critical vulnerability affecting most Linux distros allows for bootkits

Ars Technica · SecurityFeb 7, 01:37 UTC · Feb 7, 2024Vulnerability CVE-2023-40547

60

Week in review: LastPass breach, GCP data exfiltration, UEFI bootkit

Help Net SecurityMar 5, 00:00 UTC · Mar 5, 2023Ransomware

60

⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero

The Hacker NewsOct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-21043

60

Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)

Help Net SecurityMay 9, 00:00 UTC · May 9, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-24932 CVE-2022-21882+10 CVEs1

60

Just about every Windows and Linux device vulnerable to new LogoFAIL firmware attack

Ars Technica · SecurityDec 6, 15:02 UTC · Dec 6, 2023Exploit / PoC

60

Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware

The Hacker NewsSep 27, 12:13 UTC · Sep 27, 2025Exploit / PoC in the wildCVE-2025-20362 CVE-2025-20333 CVE-2025-20363

60

THN Recap: Top Cybersecurity Threats, Tools and Tips (Nov 25

The Hacker NewsDec 2, 11:25 UTC · Dec 2, 2024Ransomware CVE-2024-9680 CVE-2024-49039 CVE-2024-11680+14 CVEs

60

Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2023Ransomware in the wildCVE-2023-28252 CVE-2022-24521 CVE-2022-37969+6 CVEs

60

Advanced threat predictions for 2023

Kaspersky SecurelistNov 14, 08:00 UTC · Nov 14, 2022Ransomware in the wild

60

APT annual review 2021

Kaspersky SecurelistNov 30, 10:00 UTC · Nov 30, 2021Data breach in the wild

60

The Careto/Mask APT: Frequently Asked Questions

Kaspersky SecurelistFeb 10, 21:03 UTC · Feb 10, 2014Exploit / PoC CVE-2012-0773

60

Patch Tuesday, January 2026 Edition

Krebs on SecurityJan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2026-20805 CVE-2026-20952 CVE-2026-20953+6 CVEs1

60

September 2025 CVE Landscape

Recorded FutureOct 17, 00:00 UTC · Oct 17, 2025Exploit / PoC in the wildCVE-2025-53690 CVE-2021-21311 CVE-2025-20333+6 CVEs

60

ThreatsDay Bulletin: $15B Crypto Bust, Satellite Spying, Billion

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Vulnerability

55

UK NCSC warns that attackers exploited Cisco firewall zero-days to deploy RayInitiator and LINE VIPER malware

Security AffairsSep 26, 11:49 UTC · Sep 26, 2025Exploit / PoC CVE-2025-20362 CVE-2025-20333 CVE-2025-20363

60

Week in review: Google fixes zero-day vulnerability in Chrome, critical SQL injection flaw in FortiWeb

Help Net SecurityJul 20, 00:00 UTC · Jul 20, 2025Exploit / PoC in the wildCVE-2025-6558 CVE-2025-25257

60

Chinese national charged for hacking thousands of Sophos firewalls

Security AffairsDec 11, 10:20 UTC · Dec 11, 2024Policy & legal in the wildCVE-2020-12271

60

Sophos details five years of China-linked threat actors' activity targeting network devices worldwide

Security AffairsNov 2, 16:18 UTC · Nov 2, 2024Threat actor

60

Microsoft Patch Tuesday, May 2023 Edition

Krebs on SecurityMay 10, 07:06 UTC · May 10, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-24932 CVE-2023-24941+2 CVEs

60

Week in review: Finding stolen credentials on VirusTotal, BNPL attracting fraudsters

Help Net SecurityFeb 28, 14:42 UTC · Feb 28, 2022Phishing & fraud CVE-2021-35247

60

IT threat evolution Q3 2021

Kaspersky SecurelistNov 26, 12:00 UTC · Nov 26, 2021Exploit / PoC CVE-2021-40444

60

Advanced threat predictions for 2022

Kaspersky SecurelistNov 17, 10:00 UTC · Nov 17, 2021Ransomware

60

Japanese businesses are the latest victims of attacks disguised as ransomware

CyberScoopNov 3, 18:51 UTC · Nov 3, 2017Ransomware in the wild

60

Hacking 4G USB modems and SIM Card via SMS

Security AffairsDec 31, 13:37 UTC · Dec 31, 2014Exploit / PoC

60

TDSS

Kaspersky SecurelistAug 5, 12:10 UTC · Aug 5, 2010Malware

55

Oil shipments, drone makers, and a poisoned code library targeted in recent APT campaigns

Help Net SecurityJun 19, 12:07 UTC · Jun 19, 2026Threat actor

60

ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories

The Hacker NewsJun 4, 14:00 UTC · Jun 4, 2026Malware in the wildCVE-2026-202301

60

FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches

The Hacker NewsApr 25, 08:20 UTC · Apr 25, 2026Vulnerability CVE-2025-20333 CVE-2025-20362

60

Friday Squid Blogging: Squid Fishing in Peru

Schneier on SecurityFeb 27, 22:04 UTC · Feb 27, 2026Ransomware

60

Cisco ASA zero-day vulnerabilities exploited in sophisticated attacks

Help Net SecurityNov 13, 13:30 UTC · Nov 13, 2025Exploit / PoC CVE-2025-20362 CVE-2025-20333 CVE-2025-20363

60