Search: “bootkit”

31 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 8 Vulnerability 8 Exploit / PoC 7 Ransomware 5 Data breach 2 Policy & legal 1

SeverityAll critical 26 high 5 medium 0 low 0 info 0

BlackLotus UEFI bootkit disables Windows security mechanisms

Help Net SecurityApr 17, 10:14 UTC · Apr 17, 2023Vulnerability in the wildCVE-2022-21894

60

BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

The Hacker NewsJun 23, 08:42 UTC · Jun 23, 2023Malware in the wildCVE-2022-218941

60

Diplomats Attacked with Firmware Bootkit

Infosecurity MagazineOct 5, 19:11 UTC · Oct 5, 2020Malware in the wild

57

BlackLotus Malware Hijacks Windows Secure Boot Process

Schneier on SecurityMar 15, 00:00 UTC · Mar 15, 2023Malware in the wildCVE-2022-21894

60

⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero

The Hacker NewsOct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-21043

60

Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)

Help Net SecurityMay 9, 00:00 UTC · May 9, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-24932 CVE-2022-21882+10 CVEs1

60

Microsoft’s Secure Boot has been broken for a decade and no one noticed until now

Ars Technica · SecurityJul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2015-53811

60

Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware

The Hacker NewsSep 27, 12:13 UTC · Sep 27, 2025Exploit / PoC in the wildCVE-2025-20362 CVE-2025-20333 CVE-2025-20363

60

Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2023Ransomware in the wildCVE-2023-28252 CVE-2022-24521 CVE-2022-37969+6 CVEs

60

Advanced threat predictions for 2023

Kaspersky SecurelistNov 14, 08:00 UTC · Nov 14, 2022Ransomware in the wild

60

APT annual review 2021

Kaspersky SecurelistNov 30, 10:00 UTC · Nov 30, 2021Data breach in the wild

60

TrickBoot feature allows TrickBot bot to run UEFI attacks

Security AffairsDec 3, 14:32 UTC · Dec 3, 2020Ransomware in the wild

60

Patch Tuesday, January 2026 Edition

Krebs on SecurityJan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2026-20805 CVE-2026-20952 CVE-2026-20953+6 CVEs1

60

September 2025 CVE Landscape

Recorded FutureOct 17, 00:00 UTC · Oct 17, 2025Exploit / PoC in the wildCVE-2025-53690 CVE-2021-21311 CVE-2025-20333+6 CVEs

60

Week in review: Google fixes zero-day vulnerability in Chrome, critical SQL injection flaw in FortiWeb

Help Net SecurityJul 20, 00:00 UTC · Jul 20, 2025Exploit / PoC in the wildCVE-2025-6558 CVE-2025-25257

60

Chinese national charged for hacking thousands of Sophos firewalls

Security AffairsDec 11, 10:20 UTC · Dec 11, 2024Policy & legal in the wildCVE-2020-12271

60

Microsoft Patch Tuesday, May 2023 Edition

Krebs on SecurityMay 10, 07:06 UTC · May 10, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-24932 CVE-2023-24941+2 CVEs

60

Sneaky malware BlackLotus can bypass important Windows boot functions

The RecordMar 10, 14:17 UTC · Mar 10, 2023Malware in the wild

57

Japanese businesses are the latest victims of attacks disguised as ransomware

CyberScoopNov 3, 18:51 UTC · Nov 3, 2017Ransomware in the wild

60

ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories

The Hacker NewsJun 4, 14:00 UTC · Jun 4, 2026Malware in the wildCVE-2026-202301

60

Cisco became aware of a new attack variant against Secure Firewall ASA and FTD devices

Security AffairsNov 6, 18:26 UTC · Nov 6, 2025Data breach in the wildCVE-2025-20333 CVE-2025-20362

60

Chrome Zero-Day Exploited to Deliver Italian Memento Labs' LeetAgent Spyware

The Hacker NewsNov 3, 17:57 UTC · Nov 3, 2025Exploit / PoC in the wildCVE-2025-27831

60

Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053)

Help Net SecurityJun 16, 13:26 UTC · Jun 16, 2025Exploit / PoC in the wildCVE-2025-33053 CVE-2025-33073 CVE-2025-33070+6 CVEs

60

CISA warns of RESURGE malware exploiting Ivanti flaw

Security AffairsMar 30, 23:13 UTC · Mar 30, 2025Malware in the wildCVE-2025-0282 CVE-2025-0283

60

Sophos mounted counter-offensive operation to foil Chinese attackers

Help Net SecurityOct 31, 00:00 UTC · Oct 31, 2024Exploit / PoC in the wildCVE-2022-1040

60

April’s Patch Tuesday Brings Record Number of Fixes

Krebs on SecurityApr 9, 20:55 UTC · Apr 9, 2024Vulnerability in the wildCVE-2024-20670 CVE-2024-29063 CVE-2024-29988+2 CVEs1

60

Microsoft patches two actively exploited zero-days (CVE-2024-29988, CVE-2024-26234)

Help Net SecurityApr 9, 00:00 UTC · Apr 9, 2024Exploit / PoC in the wildCVE-2024-29988 CVE-2024-26234 CVE-2024-21412+9 CVEs

60

Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited Zero

The Hacker NewsMay 15, 00:00 UTC · May 15, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-29325 CVE-2023-24932+1 CVEs

60

Week in review: Microsoft fixes two actively exploited bugs, MSI private code signing keys leaked

Help Net SecurityMay 14, 00:00 UTC · May 14, 2023Ransomware in the wildCVE-2023-29324 CVE-2023-29336 CVE-2023-249321

60

Microsoft Patch Tuesday for May 2023 fixed 2 zero

Security AffairsMay 10, 05:25 UTC · May 10, 2023Vulnerability in the wildCVE-2023-29336 CVE-2023-24932 CVE-2023-24941+2 CVEs

60

The anatomy of the MyKings botnet, and why it matters for security

CyberScoopDec 19, 14:41 UTC · Dec 19, 2019Malware in the wild

60