GBHackers·23h ago highRed Heron Exploits Critical Gitea Flaw to Steal Repositories and Deploy Linux Rootkit#gitea#red-heron#cve-2026-60004 in the wild 3 min1
CSO Online·16d ago highStealth rootkit targeting F5 BIG-IP could expose enterprise identity gateways#big-ip-apm#cve-2025-53521#f5 in the wild 3 min
Help Net Security·17d ago highHackers deploy Linux rootkit on F5 BIG-IP APM devices, hiding web shell in memory#apache#apm#big-ip in the wild 4 min1
Security Affairs·17d ago highPoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory#apache#apm#big-ip in the wild 6 min1
BleepingComputer·18d ago highHackers breach F5 BIG-IP APM devices to deploy Linux rootkit#apache#big-ip#eset in the wild 3 min
Palo Alto Unit 42·Aug 19, 2026Eleethub: A Cryptocurrency Mining Botnet with Rootkit for Self#botnet#cryptomining#defense-evasion in the wild 6 min
Security Affairs·Aug 16, 2026Mustang Panda Upgrades CoolClient With a Kernel Rootkit#coolclient#dll-sideloading#espionage in the wild 7 min2
The Hacker News·Aug 15, 2026Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth#apt#coolclient#honeymyte in the wild 5 min2
Kaspersky Securelist·Aug 14, 2026APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit#apt#backdoor#coolclient in the wild
Security Affairs·Aug 13, 2026 highNorth Korean Lazarus Group Uses Windows Zero#backdoor#cve-2026-68820#lazarus-group in the wild 4 min1
Help Net Security·Aug 12, 2026 highLazarus hackers pair fake job offers with Windows zero-day exploit#apt#backdoor#dll-sideloading in the wild 4 min