Malware & Exploits

Malware, exploited flaws, phishing and botnets, from the researchers who found them.

128stories this week

29today

the last seven days

Most fromThe Hacker News, BleepingComputer, SecurityWeek, Help Net Security

In the news hereMicrosoft8 Fortinet6 GitHub5 npm and PyPI4 Lazarus2 APT411 APT29 (Cozy Bear)1 Lumma Stealer1

Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

October 12, 2026

Cyber Security News, Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Microsoft Security, Threat Intelligence

A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ClickFix delivery, shortcut-based persistence, and remote command execution capabilities.
BleepingComputer
SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin

October 12, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Attackers are exploiting SonicWall SMA 1000 vulnerability, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after its public disclosure. Attackers have begun exploiting a critical flaw in SonicWall SMA 1000 appliances, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after public disclosure. The vulnerability is a server-side request forgery (SSRF) flaw that requires…
Security Affairs
Exploited
Bricksforge WordPress Plugin Vulnerability Exploited in the Wild

October 12, 2026

Cyber Security News, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites.
SecurityWeek
GitLab warns of max severity code execution vulnerability

October 12, 2026

Cyber Security News, Malware & Exploits, Threat Intelligence

GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances.
BleepingComputer
Low-cost Android phones are arriving with malware that owners can’t uninstall

October 12, 2026

Cyber Security News, Malware & Exploits, Threat Intelligence

People who buy low-cost Android phones from online marketplaces may be carrying malware that was placed on the device before it reached them, Bitdefender has found. The campaign, dubbed Midnight Mimosa, runs on budget Android devices from different brands built on MediaTek platforms. The malware ships in the device firmware, is present before the owner…
Help Net Security
Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

October 12, 2026

Cyber Security News, Malware & Exploits, Threat Intelligence

Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forgery (SSRF) that could allow a remote attacker “to direct the appliance to issue requests…
The Hacker News
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

October 12, 2026

Cyber Security News, Malware & Exploits, Threat Intelligence

A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The…
The Hacker News
What to do when a data breach notice doesn’t say much

October 12, 2026

Data Breaches, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next.
ESET WeLiveSecurity
Critical SonicWall Vulnerability Exploited Days After Disclosure

October 12, 2026

Cyber Security News, Malware & Exploits, Threat Intelligence

CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations.
SecurityWeek
How scammers exploit small business owners’ biggest worries

October 12, 2026

Malware & Exploits, Phishing & Scams, Threat Intelligence

Running a small business means dealing with problems you can’t always control: finding good employees, keeping costs down, bringing in enough sales, paying taxes and planning for what’s next. Scammers often take advantage of those pressures, offering solutions that turn out to be scams. Key takeaways: * Labor quality or availability was the top problem…
Bitdefender
AI vulnerability patching has a grading problem

October 12, 2026

AI in Cybersecurity, Cyber Security News, Malware & Exploits, AI & Emerging Technology, Threat Intelligence

Researchers at Northwestern University tested AI coding agents on 112 real security bugs. They found that a patch which stops a crash often fails the checks the project’s maintainers wrote for the fix. With Claude Opus 4.7, third of the patches that made the crash go away still failed those maintainer tests. If you’re thinking…
Help Net Security
Bitdefender finds preinstalled Android malware you can’t uninstall, seen in 150 countries

October 11, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Bitdefender finds Midnight Mimosa, preinstalled Android malware on cheap MediaTek phones that fakes ad clicks, drops apps and builds a proxy botnet. Bitdefender researchers discovered a campaign called Midnight Mimosa involving preinstalled Android malware on low-cost phones from different brands that use MediaTek platforms. The malware is built into the device firmware and may be…
Security Affairs

Your basket (items: 0)

Products in basket
Product	Details	Total
	Available on back-order Previous price: Discounted price:	Save

Malware & Exploits

Stay ahead in Cyber Security.