T1059.003 - Windows Command Shell

Over 100 Ukrainian Websites Compromised by Malware Scheme

Critical RCE Vulnerabilities Discovered in Fortinet Products

Exploitation of PaperCut Vulnerabilities Threatens Educational Institutions

CISA Adds Critical Vulnerabilities in PAN-OS, Cisco, and Ahsay to KEV Catalog

Payload Ransomware Targets Global Organizations with ChaCha20 Encryption

Malicious Background Removal Tool Distributes RATs and Infostealers

New ChainScript RAT Exploits ClickFix Lures with Blockchain C2

Solana FakeFix Campaign Targets Developers with Malicious Packages

Malicious LNK Files Disguised as Documents Deliver Fileless Malware

ClearFake Campaigns Utilize WordlistLoader to Distribute Amatera Infostealer

SQL Injection Attack Enables Malware Deployment in Oracle Database

Fake CAPTCHA Scams Evolve into Malware Delivery Systems

OXLOADER Malware Loader Delivers CASTLESTEALER via Malicious Google Ads

New Remcos RAT Campaign Exploits CVE-2017-11882 via Phishing

Aerospace Phishing Campaign Uses AnyDesk for Remote Access and Data Exfiltration

Smoke#Screen Campaign Uses Fake Updates to Install Remote Access Tool

MiniPlasma Zero-Day Exploit Grants SYSTEM Access on Patched Windows Systems

HBO Max Account Compromise Fuels ClickFix Malware Campaign

JanelaRAT Malware Campaign Targets Latin American Financial Sector

SeasonalInvite Phishing Campaign Targets Users with Fake eCards

New Crypto Clipper Malware Uses USB and Tor for Stealthy Attacks

Ryuk Ransomware: Ongoing Threat to Large Organizations

AsyncRAT and SideCopy Campaigns Target Users with Multi-Stage Attacks

Nightmare-Eclipse Banned from GitHub and GitLab for Zero-Day Exploits

Microsoft Teams Exploited for Helpdesk Impersonation Attacks

Exposed Malware Delivery Lab Reveals AI-Driven Phishing Operations

LunexStealer Malware Campaign Compromises 100+ Ukrainian Websites

Deep#Door Python Backdoor Targets Windows Systems for Credential Theft

Toy Ghouls Use HiveMQ and Element for New Windows Backdoors

Multi-Stage PureLog Stealer Campaign Targets Key Industries via Copyright Lures

Arbitrary Command Execution Vulnerability in OpenClaw Windows Node

PavinLoader Malware Exploits ClickFix and Fake Downloads to Deploy Amatera Stealer

Targeted COVERT RAT Attacks on Argentina's Judicial Sector Using Court Docs and GitHub Payloads

GlassWorm Campaign Targets Developers with Malicious VS Code Extensions

Phishing Attacks Utilize Browser-in-the-Browser Technique with Rogue RMM Tools

Agentic AI Threats Demand Shift to Execution Runtime Security

Chinese-Speaking Groups Exploit BadIIS for SEO Manipulation in Asia

Multiple CVEs Discovered in Cisco IOS XR Software

Telerik UI Vulnerability Chain Enables Unauthenticated RCE Attacks

Hackers Exploit React Native Metro Vulnerability to Target Developers

CursorJack Vulnerability Exposes Code Execution Risks in AI Development Environments

Microsoft Blocks Macrium Reflect Driver in Windows 11 Updates

C2Looper Backdoor Exploits GitHub for Command-and-Control Operations

New Ransomware Scheme Targets Corporate Printers and BitLocker

Hackers massively spread malicious hijacker viruses through 100 hacked sites

Active Exploitation Alert: China-Nexus UAT-11587 Deploys Antino Backdoor Leveraging Microsoft 365 Outlook and OneDrive for Stealthy Cyber-Espionage in Asia and Middle East

Pretty Themes, Hidden Loaders: GlassWorm

GHSA R3x2 Vf2f Vvj8

Ryuk Ransomware Attack Chain Impact

CreateProcessA/W()

ClickFix Attacks Spread ChainScript RAT via Fake Spotify and Teams Installers

Execution Runtime Security in the Era of Agentic AI

TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data

Execution Runtime Security in the Era of Agentic AI

ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure

CVE-2026-45659: SharePoint Deserialization Flaw Enables RCE

Ready, Settra, Go: New Settra Ransomware Variant Deploys MeshAgent RMM

AsyncRAT Uses AutoIt in a Five-Stage Infection Chain

ClickFix attacks are tricking Mac and Windows users into hacking themselves

Hackers Hijack HBO Max's Reddit Account to Spread Malware via 108 Fake Ads

Us Sanctions North Korean Andariel

Hackers Hijack HBO Max Reddit Account to Spread ClickFix Malware

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

Fake CAPTCHAs are tricking people into hacking their own computers, and it's working

ClickFix attacks are tricking Mac and Windows users into hacking themselves

Hackers exploit Tencent app flaw to deploy GrayRabbit malware

Orion Policy Institute

cve-2018

SloppyRAT: A New Tool For Ransomware Attacks | ThreatLabz - Zscaler, Inc.

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

CVE Alert: CVE-2026-58599 – Microsoft

Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence

APTSimulator exploit

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE

PaperCut Flaws Exploited in Attacks on U.S. and European Schools

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Angry Birds: Toy Ghouls’ new toys

Microsoft warns fake CAPTCHA is tricking Windows users into running malware

Contagious Interview: Malware delivered through fake developer job interviews

Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks

Impersonating IT support: how threat actors turn a remote session into enterprise

Start free

PavinLoader Malware Spreads via ClickFix and Fake Download Campaigns