Malware & Exploits

Malware, exploited flaws, phishing and botnets, from the researchers who found them.

117stories this week

16today

the last seven days

Most fromThe Hacker News, BleepingComputer, SecurityWeek, Help Net Security

In the news hereMicrosoft8 Fortinet6 Linux6 GitHub5 Lazarus2 APT411 APT29 (Cozy Bear)1 Lumma Stealer1

F5 addressed critical RCE flaws in NGINX

October 16, 2026

Malware & Exploits, Threat Intelligence

F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application delivery firm F5 announced fixes for eleven security issues in NGINX. Among them, critical vulnerabilities tracked as CVE-2026-15176 and CVE-2026-93479 could be exploited without authentication via crafted HTTP requests. Under certain conditions beyond their control, an…
Security Affairs
Linux kernel gets a fix for a flaw that enabled attackers to escape VMs

October 16, 2026

Malware & Exploits, UK Industry News, UK Cyber Security News, Threat Intelligence

The Linux kernel’s networking stack was found vulnerable to a guest-to-host escape attack, in which an attacker operating inside a virtual machine (VM) could cross the isolation boundary and access the underlying host. Dubbed PwnEscape and tracked as CVE-2026-99999, a flaw allowed guest-controlled packet metadata to trigger a write that changes an IPv4 header after…
CSO Online UK
Exploited
U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog

October 16, 2026

Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Atlassian flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Atlassian flaw, tracked as CVE-2026-21589 (CVSS score of 9.3), to its Known Exploited Vulnerabilities (KEV) catalog. In early October, threat actors started exploiting CVE-2026-21589, a critical arbitrary file access…
Security Affairs
Backdooring Open-Weight AI Models

October 16, 2026

Cyber Security News, Malware & Exploits, Threat Intelligence

This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in the title because it’s the most popular reason people download modified weights without verifying what’s inside. Abliteration is a cheap fine-tune that…
Schneier on Security
Exploited
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

October 16, 2026

Cyber Security News, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts.
SecurityWeek
Inbox flooded with sign-up messages? Email bombing explained

October 16, 2026

Malware & Exploits, Threat Intelligence

If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious…
ESET WeLiveSecurity
Fake Arch Linux AUR packages exploit typos to run malware with root privileges

October 16, 2026

Cyber Security News, Malware & Exploits, Threat Intelligence

Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community package source for Arch Linux and related distributions, hosting user-submitted build scripts for proprietary programs, beta builds and older software versions…
Help Net Security
F5, Juniper Networks Patch Critical Vulnerabilities

October 16, 2026

Cyber Security News, Malware & Exploits, Threat Intelligence

Successful exploitation of some of these issues could lead to remote code execution and full device takeover.
SecurityWeek
PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager

October 16, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

PEERSTITCH malware exploited FortiManager to expose 500+ firewalls, evade detection inside FortiOS memory, and maintain stealthy access. PEERSTITCH, a stealthy implant deployed during a prolonged intrusion, helped attackers maintain access to a telecom managed service provider after compromising its FortiManager appliance. Palo Alto Networks Unit 42 documented the operation, which began in September 2024 and…
Security Affairs
Malware evasion made easier with AI — but behavior still gives it away

October 16, 2026

AI Attacks & Abuse, Malware & Exploits, UK Industry News, UK Cyber Security News, AI & Emerging Technology, Threat Intelligence

Fresh research suggests recent panic over AI-generated malware may be overblown. Last month Anthropic detailed how Russia-linked cyberespionage group Midnight Blizzard used Claude to rebuild malware each time security tools flagged its backdoor as malign. “We observed GTG-20006 operate through customized AI-driven workflows that automated much of their operations from development, infrastructure acquisition, phishing, persistence…
CSO Online UK
Microsoft Patches Two Dozen RCE Flaws in Office

October 16, 2026

Cyber Security News, Enterprise & Cloud Security, Malware & Exploits, Microsoft Security, Threat Intelligence

In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office.
SecurityWeek
Exploited
BeyondTrust patches zero-day exploited in attacks since August

October 16, 2026

Cyber Security News, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August.
BleepingComputer

Your basket (items: 0)

Products in basket
Product	Details	Total
	Available on back-order Previous price: Discounted price:	Save

Malware & Exploits

Stay ahead in Cyber Security.