Search: “kernel-mode”

236 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 971 Vulnerability 311 Ransomware 84 Exploit / PoC 68 Phishing & fraud 43 Threat actor 26 Advisory 22 Data breach 22 Policy & legal 7 Tools 2 AI research 1 Industry 1 AI safety & security 1

SeverityAll critical 236 high 1285 medium 32 low 2 info 4

Legit bootkits

Kaspersky SecurelistDec 1, 12:34 UTC · Dec 1, 2011Malware

55

Inside Win32k Exploitation: Background on Implementations of Win32k and Exploitation Methodologies

Palo Alto Unit 42Jun 5, 13:30 UTC · Jun 5, 2024Exploit / PoC in the wildCVE-2022-21882 CVE-2021-1732 CVE-2022-17321

60

XPAJ: Reversing a Windows x64 Bootkit

Kaspersky SecurelistJun 19, 18:16 UTC · Jun 19, 2012Ransomware

60

Decrement by one to rule them all: AsIO3.sys driver exploitation

Cisco TalosJun 26, 10:00 UTC · Jun 26, 2025Exploit / PoC CVE-2025-1533 CVE-2025-3464

60

Old certificate, new signature: Open-source tools forge signature timestamps on Windows drivers

Cisco TalosJul 11, 17:04 UTC · Jul 11, 2023Malware

55

Microsoft Patch Tuesday

Cisco TalosNov 8, 22:09 UTC · Nov 8, 2016Vulnerability CVE-2016-7212 CVE-2016-7248 CVE-2016-7205+8 CVEs

60

Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer's Network

Security AffairsJul 18, 14:01 UTC · Jul 18, 2026Malware

55

Daxin Resurfaces in Taiwan Alongside Stupig Pre

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Malware

55

Microsoft Patch Tuesday addresses 63 defects, including one actively exploited zero

CyberScoopNov 11, 20:49 UTC · Nov 11, 2025Vulnerability in the wildCVE-2025-62215 CVE-2025-60724 CVE-2025-60719+2 CVEs

60

Microsoft Releases Patches for 132 Vulnerabilities, Including 6 Under Active Attack

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2023Vulnerability in the wildCVE-2023-32046 CVE-2023-32049 CVE-2023-35311+2 CVEs1

60

BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

The Hacker NewsJun 23, 08:42 UTC · Jun 23, 2023Malware in the wildCVE-2022-218941

60

BlackLotus UEFI bootkit disables Windows security mechanisms

Help Net SecurityApr 17, 10:14 UTC · Apr 17, 2023Vulnerability in the wildCVE-2022-21894

60

The Slingshot APT FAQ

Kaspersky SecurelistMar 9, 15:20 UTC · Mar 9, 2018Exploit / PoC CVE-2007-5633 CVE-2010-1592 CVE-2009-0824

60

Microsoft Patch Tuesday

Cisco TalosMar 14, 21:26 UTC · Mar 14, 2017Vulnerability in the wildCVE-2017-0149 CVE-2017-0012 CVE-2017-0037+1 CVEs

60

Microsoft Patch Tuesday

Cisco TalosOct 11, 20:57 UTC · Oct 11, 2016Vulnerability CVE-2016-3393 CVE-2016-3396 CVE-2016-3270+16 CVEs

60

Microsoft Patch Tuesday

Cisco TalosAug 9, 19:15 UTC · Aug 9, 2016Vulnerability CVE-2016-3301 CVE-2016-3303 CVE-2016-3304+11 CVEs

60

Microsoft Patch Tuesday

Cisco TalosJul 12, 23:43 UTC · Jul 12, 2016Vulnerability CVE-2016-3204 CVE-2016-3238 CVE-2016-3239+7 CVEs

60

Microsoft Fixes 3 Zero

Security AffairsOct 15, 14:09 UTC · Oct 15, 2014Exploit / PoC in the wildCVE-2014-4114 CVE-2014-4148 CVE-2014-41131

60

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0

The Hacker NewsJul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030 CVE-2026-60137 CVE-2026-15409+26 CVEs

60

Microsoft Defender vulnerabilities exploited in the wild (CVE-2026-41091, CVE-2026-45498)

Help Net SecurityMay 21, 00:00 UTC · May 21, 2026Exploit / PoC in the wildCVE-2026-41091 CVE-2026-45498 CVE-2026-45584+2 CVEs

60

⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-346211

60

Qilin EDR killer infection chain

Cisco TalosApr 2, 10:00 UTC · Apr 2, 2026Ransomware

60

Kaspersky Global Report by Kaspersky Security Services 2026

Kaspersky SecurelistMar 25, 10:35 UTC · Mar 25, 2026Exploit / PoC in the wild

60

Google uncovers Coruna iOS Exploit Kit targeting iOS 13

Security AffairsMar 5, 09:03 UTC · Mar 5, 2026Exploit / PoC CVE-2021-30952 CVE-2022-48503 CVE-2023-43000+9 CVEs

60

Reynolds ransomware uses BYOVD to disable security before encryption

Security AffairsFeb 11, 15:00 UTC · Feb 11, 2026Ransomware CVE-2025-68947

60

⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & More

The Hacker NewsJan 5, 12:56 UTC · Jan 5, 2026Vulnerability CVE-2025-55182 CVE-2025-13915 CVE-2025-52691+7 CVEs

60

Microsoft Fixes Three Zero

Infosecurity MagazineDec 10, 09:45 UTC · Dec 10, 2025Exploit / PoC in the wildCVE-2025-62221 CVE-2025-54100 CVE-2025-64671+4 CVEs

60

Last Windows 10 Patch Tuesday Features Six Zero

Infosecurity MagazineOct 15, 10:45 UTC · Oct 15, 2025Vulnerability in the wildCVE-2025-59230 CVE-2025-24990 CVE-2025-47827+3 CVEs

60

⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero

The Hacker NewsOct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-21043

60

Analyzing the TTPs of hacktivists and APTs targeting Russian organizations

Kaspersky SecurelistSep 10, 14:00 UTC · Sep 10, 2025Data breach

60

Microsoft Patch Tuesday for September 2025 – Snort rules and prominent vulnerabilities

Cisco TalosSep 9, 19:15 UTC · Sep 9, 2025Vulnerability in the wildCVE-2025-54916 CVE-2025-54910 CVE-2025-54918+8 CVEs1

60

French cybersecurity agency confirms government affected by Ivanti hacks

The RecordJul 2, 12:09 UTC · Jul 2, 2025Exploit / PoC CVE-2024-8190 CVE-2024-8963 CVE-2024-9380

60

Kaspersky Managed Detection and Response report 2024

Kaspersky SecurelistFeb 20, 11:21 UTC · Feb 20, 2025Malware

55

Kaspersky ICS CERT predictions for the industrial threat landscape in 2025

Kaspersky SecurelistJan 29, 10:01 UTC · Jan 29, 2025Ransomware

60

CISA and FBI Raise Alerts on Exploited Flaws and Expanding HiatusRAT Campaign

The Hacker NewsDec 17, 06:34 UTC · Dec 17, 2024Malware in the wildCVE-2024-20767 CVE-2024-35250 CVE-2017-7921+6 CVEs

60

Microsoft Fixes 71 CVEs Including Actively Exploited Zero

Infosecurity MagazineDec 11, 10:15 UTC · Dec 11, 2024Ransomware in the wildCVE-2024-49138 CVE-2022-24521 CVE-2023-23376+3 CVEs1

60

Malware campaign abused flawed Avast Anti

Security AffairsNov 25, 14:10 UTC · Nov 25, 2024Malware

55

Crimeware and financial predictions for 2025

Kaspersky SecurelistNov 14, 09:01 UTC · Nov 14, 2024Ransomware

60

CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHub

The Hacker NewsSep 11, 06:02 UTC · Sep 11, 2024Ransomware CVE-2017-0144 CVE-2020-1472 CVE-2021-42278+3 CVEs1

60

AI, election security headline discussions at Black Hat and DEF CON

Cisco TalosAug 15, 18:00 UTC · Aug 15, 2024Ransomware in the wildCVE-2024-38184 CVE-2024-38185 CVE-2024-38186+3 CVEs1

60