Technology ❯ Cybersecurity ❯ Threat Actors

Malware

Remote Access Tools Exploitation Techniques Zero-Day Exploits Privilege Escalation TeamPCP Proof of Concept Infostealers Overstep Payment Skimmers Trojanized Software

Ghost CMS Flaw Used to Poison More Than 700 Websites With ClickFix Malware

By stealing admin API keys through an SQL injection, attackers can inject cloaked scripts that trick visitors into running Windows commands.

cPanel Flaw Under Active Attack by Long-Running Group Deploying 'Filemanager'

Microsoft Defender Zero-Days Are Being Exploited as Two Remain Unpatched

LiteLLM Supply-Chain Breach Put Backdoored PyPI Releases in Developers’ Workflows

CISA Flags BeyondTrust RCE as Used in Ransomware Attacks

Mandiant Links AI-Driven Crypto Theft to North Korea’s UNC1069 With Seven macOS Malware Families

North Korea–Linked Group Uses Deepfake Calls to Infect Crypto Workers’ Macs

Trust Wallet Ties $8.5 Million Chrome Extension Theft to Shai-Hulud Supply-Chain Breach

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

Unpatched Gogs Zero-Day Is Under Active Exploitation, 700+ Servers Compromised

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

AI Pentest Tool 'Villager' Nears 11,000 PyPI Downloads as Researchers Flag Abuse Risk

HexStrike‑AI Attracts Criminal Use as Citrix NetScaler Zero‑Days Face Rapid Exploitation

SonicWall Blames Patched CVE-2024-40766 for Akira Ransomware Attacks

Active Zero-Day Exploit of WordPress Alone Theme Sees Over 120,000 Blocked Attempts