Search: “powershell”

810 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1207 Ransomware 610 Vulnerability 342 Threat actor 280 Exploit / PoC 193 Data breach 100 Phishing & fraud 68 Industry 32 Policy & legal 17 Advisory 11 Tools 6 Research 5 AI tools & infra 5 AI industry 4

SeverityAll critical 810 high 1304 medium 676 low 79 info 15

Unmasking the new persistent attacks on Japan

Cisco TalosMar 6, 11:00 UTC · Mar 6, 2025Vulnerability CVE-2024-45771

60

Twelve: from initial compromise to ransomware and wipers

Kaspersky SecurelistSep 20, 13:33 UTC · Sep 20, 2024Ransomware CVE-2021-21972 CVE-2021-22005

60

What Am I Supposed to Do With This Threat Intelligence?

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Data breach

60

New ExtraHop capabilities target malicious PowerShell use across enterprise environments

Help Net SecurityNov 5, 00:00 UTC · Nov 5, 2025Ransomware

60

Critical Flaws in PowerShell Gallery Enable Malicious Exploits

Infosecurity MagazineAug 17, 17:00 UTC · Aug 17, 2023Exploit / PoC

60

This Windows PowerShell Phish Has Scary Potential

Krebs on SecuritySep 19, 20:18 UTC · Sep 19, 2024Vulnerability

55

How ransomware abuses BitLocker

Kaspersky SecurelistMay 23, 12:00 UTC · May 23, 2024Ransomware

60

UAT

Cisco TalosMay 5, 10:00 UTC · May 5, 2026Exploit / PoC CVE-2025-09942

60

Using the Manager Attribute in Active Directory (AD) for Password Resets

The Hacker NewsOct 31, 15:56 UTC · Oct 31, 2021Phishing & fraud

55

CVE-2019-0803 Windows flaw exploited to deliver PowerShell Backdoor

Security AffairsApr 16, 07:03 UTC · Apr 16, 2019Vulnerability CVE-2019-0803 CVE-2019-08591

60

Using DCOM objects for remote command execution

Kaspersky SecurelistDec 19, 08:00 UTC · Dec 19, 2025Research1

55

New BYOVD loader behind DeadLock ransomware attack

Cisco TalosDec 9, 11:00 UTC · Dec 9, 2025Ransomware CVE-2024-51324

60

JackFix Uses Fake Windows Update Pop-Ups on Adult Sites to Deliver Multiple Stealers

The Hacker NewsDec 2, 05:40 UTC · Dec 2, 2025Malware

55

Actor Exploits Microsoft Exchange Server Vulnerabilities, Cortex XDR Blocks Harvesting of Credentials

Palo Alto Unit 42Jun 6, 13:23 UTC · Jun 6, 2024Vulnerability in the wildCVE-2021-26855 CVE-2021-26857 CVE-2021-26858+1 CVEs

60

Case Study: Incident Response is a relationship

Cisco TalosMay 17, 12:00 UTC · May 17, 2021Ransomware

60

Lemon Duck spreads its wings: Actors target Microsoft Exchange servers, incorporate new TTPs

Cisco TalosMay 7, 19:50 UTC · May 7, 2021Exploit / PoC CVE-2021-26855 CVE-2021-26857 CVE-2021-26858+1 CVEs1

60

Hafnium Update: Continued Microsoft Exchange Server Exploitation

Cisco TalosMar 10, 00:52 UTC · Mar 10, 2021Exploit / PoC

60

Microsoft Urges Azure Users to Update PowerShell to Patch RCE Flaw

The Hacker NewsJul 5, 06:42 UTC · Jul 5, 2021Vulnerability CVE-2021-26701

60

For many crooks, malware is out and PowerShell attacks are in, IBM says

CyberScoopFeb 26, 14:22 UTC · Feb 26, 2019Malware in the wild

60

91% of critical incidents involve known, legitimate binaries like PowerShell

Help Net SecurityJun 28, 00:00 UTC · Jun 28, 2018Malware

55

The Gentlemen RaaS: rapid growth and a new ransomware variant

Kaspersky SecurelistJun 30, 10:06 UTC · Jun 30, 2026Ransomware1

60

"PowerDrop" PowerShell Malware Targets US Aerospace Industry

Infosecurity MagazineJun 7, 16:30 UTC · Jun 7, 2023Malware

55

Microsoft Confirms Two Exchange Zero

Infosecurity MagazineSep 30, 15:30 UTC · Sep 30, 2022Exploit / PoC in the wildCVE-2022-41040 CVE-2022-41082

60

Quarterly Report: Incident Response trends in Q1 2022

Cisco TalosApr 26, 13:11 UTC · Apr 26, 2022Ransomware in the wildCVE-2021-44228 CVE-2021-45046 CVE-2021-22204+1 CVEs

60

A closer look at fileless malware, beyond the network

Help Net SecurityJan 4, 00:00 UTC · Jan 4, 2021Malware

55

In Q2 2020, there was an average of 419 new threats per minute

Help Net SecurityNov 6, 00:00 UTC · Nov 6, 2020Ransomware

60

LimeRAT spreads in the wild

Security AffairsApr 9, 16:50 UTC · Apr 9, 2019Malware

55

Fileless attacks against enterprise networks

Kaspersky SecurelistFeb 8, 08:58 UTC · Feb 8, 2017Exploit / PoC

60

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Ransomware1

60

Spear Phishing Attacks Target Organizations in Ukraine, Payloads Include the Document Stealer OutSteel and the Downloader SaintBot

Palo Alto Unit 42Jun 5, 23:28 UTC · Jun 5, 2024Malware CVE-2017-11882

60

Microsoft confirms Exchange zero

Security AffairsSep 30, 10:18 UTC · Sep 30, 2022Exploit / PoC in the wildCVE-2022-41040 CVE-2022-41082

60

Lazarus and the tale of three RATs

Cisco TalosSep 8, 12:01 UTC · Sep 8, 2022Threat actor

60

Iranian Hackers Exploit Log4j Vulnerability to Deploy PowerShell Backdoor

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2022Vulnerability CVE-2021-44228

60

CVE-2019-2725 Oracle WebLogic flaw exploited in cryptojacking campaign

Security AffairsJun 11, 05:53 UTC · Jun 11, 2019Vulnerability in the wildCVE-2019-2725

60

The return of the AdvisorsBot malware

Security AffairsFeb 1, 16:46 UTC · Feb 1, 2019Malware CVE-2017-11882

60

CloudZ RAT potentially steals OTP messages using Pheno plugin

Cisco TalosMay 5, 10:00 UTC · May 5, 2026Malware

55

Cybersecurity on a budget: Strategies for an economic downturn

Cisco TalosOct 29, 10:00 UTC · Oct 29, 2025Ransomware

60

Cryptocurrency Miner and Clipper Malware Spread via SourceForge Cracked Software Listings

The Hacker NewsMay 20, 08:07 UTC · May 20, 2025Malware

55

Multi-Stage Malware Attack Uses .JSE and PowerShell to Deploy Agent Tesla and XLoader

The Hacker NewsApr 18, 12:03 UTC · Apr 18, 2025Malware CVE-2021-40449

60

TookPS distributed under the guise of UltraViewer, AutoCAD, and Ableton

Kaspersky SecurelistApr 2, 10:00 UTC · Apr 2, 2025Malware

55