PolKit vulnerability can give attackers root on many Linux distros (CVE-2021-4034)Help Net Security·Jan 26, 00:00 UTC · Jan 26, 2022VulnerabilityCVE-2021-403435
Alchimist: A new attack framework in Chinese for Mac, Linux and WindowsCisco Talos·Oct 13, 12:00 UTC · Oct 13, 2022Exploit / PoC in the wildCVE-2021-4034160
FritzFrog botnet exploits Log4Shell, PwnKit vulnerabilitiesHelp Net Security·Feb 1, 00:00 UTC · Feb 1, 2024VulnerabilityCVE-2021-44228CVE-2021-403435
Week in review: PolKit vulnerability, fake tax apps pushing malware, EU's bug bounty for open sourceHelp Net Security·Feb 28, 14:42 UTC · Feb 28, 2022VulnerabilityCVE-2021-403460
PwnKit: Local Privilege Escalation bug affects major Linux distrosSecurity Affairs·Jan 26, 11:12 UTC · Jan 26, 2022VulnerabilityCVE-2021-403435
July 2026 CVE LandscapeRecorded Future·Aug 7, 00:00 UTC · Aug 7, 2026Ransomware in the wildCVE-2025-3248CVE-2008-4128CVE-2017-17215+78 CVEs60
Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant StagedSecurity Affairs·Jul 24, 12:10 UTC · Jul 24, 2026VulnerabilityCVE-2021-4034CVE-2021-3156CVE-2017-726935
Hacker Runs Hermes AI Agent Unattended for PostThe Hacker News·Jul 24, 10:15 UTC · Jul 24, 2026VulnerabilityCVE-2026-31431CVE-2026-43284CVE-2026-43500+2 CVEs35
What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistantKaspersky Securelist·May 29, 07:00 UTC · May 29, 2026VulnerabilityCVE-2025-55182CVE-2023-4911CVE-2021-4034+3 CVEs60
Experts spotted a new stealthy Linux malware dubbed ShikitegaSecurity Affairs·Mar 26, 23:11 UTC · Mar 26, 2026MalwareCVE-2021-4034CVE-2021-349335
Chinese Hackers Murky, Genesis, and Glacial Panda Escalate Cloud and Telecom EspionageThe Hacker News·Feb 24, 14:01 UTC · Feb 24, 2026Threat actorCVE-2023-3519CVE-2025-3928CVE-2016-5195+1 CVEs60
CL-STA-0969 Installs Covert Malware in Telecom Networks During 10The Hacker News·Aug 4, 13:40 UTC · Aug 4, 2025MalwareCVE-2016-5195CVE-2021-4034CVE-2021-315660
Nation-state group CL-STA-0969 targeted Southeast Asian telecoms in 2024Security Affairs·Aug 4, 07:29 UTC · Aug 4, 2025Threat actorCVE-2016-5195CVE-2021-4034CVE-2021-315660
Linux systems targeted with stealthy “Perfctl” cryptomining malwareHelp Net Security·Oct 7, 00:00 UTC · Oct 7, 2024MalwareCVE-2021-403447
Analyzing the vulnerability landscape in Q2 2024Kaspersky Securelist·Aug 21, 07:41 UTC · Aug 21, 2024VulnerabilityCVE-2018-0802CVE-2017-11882CVE-2017-0199+6 CVEs60
ExCobalt Cybercrime group targets Russian organizations in multiple sectorsSecurity Affairs·Jun 24, 07:39 UTC · Jun 24, 2024Data breachCVE-2022-2586CVE-2021-3156CVE-2021-4034+6 CVEs60
ExCobalt Cyber Gang Targets Russian Sectors with New GoRed BackdoorThe Hacker News·Jun 23, 18:07 UTC · Jun 23, 2024MalwareCVE-2019-13272CVE-2021-3156CVE-2021-4034+1 CVEs47
FritzFrog Returns with Log4Shell and PwnKit, Spreading Malware Inside Your NetworkThe Hacker News·Feb 2, 04:51 UTC · Feb 2, 2024MalwareCVE-2021-4034CVE-2024-22768CVE-2024-22772+1 CVEs35
Looney Tunables: New Linux Flaw Enables Privilege Escalation on Major DistributionsThe Hacker News·Oct 4, 14:57 UTC · Oct 4, 2023VulnerabilityCVE-2023-4911CVE-2021-3156CVE-2021-3560+2 CVEs35
New LABRAT Campaign Exploits GitLab Flaw for Cryptojacking and Proxyjacking ActivitiesThe Hacker News·Aug 19, 06:07 UTC · Aug 19, 2023Malware in the wildCVE-2021-22205CVE-2021-403460
North Korean Hackers Exploit Unpatched Zimbra Devices in 'No Pineapple' CampaignThe Hacker News·Feb 3, 07:08 UTC · Feb 3, 2023VulnerabilityCVE-2022-27925CVE-2022-37042CVE-2021-403447
CISA CVE-2021-3493 to Known Exploited Vulnerabilities CatalogSecurity Affairs·Oct 21, 13:49 UTC · Oct 21, 2022Exploit / PoC in the wildCVE-2021-3493CVE-2021-4034CVE-2022-4135260
New Chinese Malware Attack Framework Targets Windows, macOS, and Linux SystemsThe Hacker News·Oct 17, 02:42 UTC · Oct 17, 2022MalwareCVE-2021-403447
Discovery of Alchimist C2 tool, revealed a new attack frameworkSecurity Affairs·Oct 13, 14:59 UTC · Oct 13, 2022VulnerabilityCVE-2021-403447
Hackers Targeting Unpatched Atlassian Confluence Servers to Deploy Crypto MinersThe Hacker News·Sep 22, 06:17 UTC · Sep 22, 2022Vulnerability in the wildCVE-2022-26134CVE-2021-403460
New Stealthy Shikitega Malware Targeting Linux Systems and IoT DevicesThe Hacker News·Sep 8, 06:00 UTC · Sep 8, 2022MalwareCVE-2021-4034CVE-2021-349347
CISA Warns of Active Exploitation of 'PwnKit' Linux Vulnerability in the WildThe Hacker News·Jul 1, 15:53 UTC · Jul 1, 2022Exploit / PoC in the wildCVE-2021-4034CVE-2021-30533CVE-2022-29499+5 CVEs60
12-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root AccessThe Hacker News·Jan 27, 04:34 UTC · Jan 27, 2022Exploit / PoCCVE-2021-4034CVE-2021-3560CVE-2022-018550