Malware & Exploits

Malware, exploited flaws, phishing and botnets, from the researchers who found them.

127stories this week

27today

the last seven days

Most fromThe Hacker News, BleepingComputer, SecurityWeek, Help Net Security

In the news hereMicrosoft8 Fortinet6 Linux5 GitHub5 Lazarus2 APT411 APT29 (Cozy Bear)1 Lumma Stealer1

Exploited
Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier

October 5, 2026

Global Cyber Security, Malware & Exploits, Nation-State Threats, Zero-Day Vulnerabilities, Threat Intelligence

Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched.
SecurityWeek
TTY Logs and the Data it Captures, (Sun, Oct 4th)

October 5, 2026

Malware & Exploits, Threat Intelligence

For an experiment, I created a script [1] that parses and send the TTY logs collected from actors or bots activity that run various commands after they successfully login the DShield sensor. Those TTY logs are sent daily at the end of each day to the DShield SIEM [2] to be correlated with all the…
SANS Internet Storm Center
Exploited
Citrix NetScaler vulnerability (CVE-2026-88779) in active exploitation

October 5, 2026

Malware & Exploits, Threat Intelligence

Categories: Threat Research Tags: advisory, vulnerability, Citrix…
Sophos X-Ops
Exploited
Citrix patches NetScaler SAML zero-day exploited in attacks

October 4, 2026

Cyber Security News, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution.
BleepingComputer
Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions

October 4, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

AI slop seems to be overwhelming bug bounty programs.
TechCrunch
User Agent Strings Curiosities, (Sun, Oct 4th)

October 4, 2026

Malware & Exploits, Threat Intelligence

Sometimes I have to smile, or my interest is triggered, when I review new User Agent Strings in the honeypot logs.
SANS Internet Storm Center
Warlock Ransomware Still Exploits Year-Old SharePoint Flaws to Hit Critical Infrastructure

October 4, 2026

Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Microsoft Security, Ransomware, Threat Intelligence

Warlock ransomware continues to exploit unpatched SharePoint flaws to breach water utilities, telecoms, governments, and universities worldwide. Warlock ransomware made headlines back in mid-2025 for exploiting a chain of SharePoint zero-days collectively dubbed ToolShell. More than a year later, the same group is still using that door, and it’s still getting in. Symantec tracks the…
Security Affairs
Anthropic’s super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows

October 3, 2026

AI in Cybersecurity, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, UK Cyber Attacks, UK Cyber Security News, AI & Emerging Technology, Threat Intelligence

Exploitation attempts came from China-hosted IP, VulnCheck researcher says…
The Register
Fake Zoom installer hides macOS backdoor CloudSyncD

October 3, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Jamf Threat Labs details CloudSyncD, a fake macOS Zoom installer that hides a phished password using invisible zero-width Unicode characters. Jamf Threat Labs found CloudSyncD while doing routine scanning on VirusTotal, buried inside a disguised Zoom client. They first spotted it on September 15, clearly still under construction, and within two days watched it move…
Security Affairs
YARA-X 1.21.0 Release, (Sat, Oct 3rd)

October 3, 2026

Enterprise & Cloud Security, Malware & Exploits, SOC & SIEM, Threat Intelligence

YARA-X&#;x26;#;39;s 1.21.0 release brings 5 improvements and 4 bugfixes.
SANS Internet Storm Center
Fortra Patches Critical Vulnerabilities in BoKS

October 3, 2026

Cyber Security News, Malware & Exploits, Threat Intelligence

The bugs could lead to authentication bypass, shell command execution, and memory corruption.
SecurityWeek
CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed

October 3, 2026

AI in Cybersecurity, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, AI & Emerging Technology, Threat Intelligence

GitLab fixes critical AI Gateway flaw that could let authenticated Duo users escape a prompt sandbox and execute commands on self-hosted gateways. GitLab has released patches for a critical vulnerability in its AI Gateway, tracked as CVE-2026-90970 (CVSS score of 9.9), that could allow an authenticated user with access to the Duo Agent Platform to…
Security Affairs

Your basket (items: 0)

Products in basket
Product	Details	Total
	Available on back-order Previous price: Discounted price:	Save

Malware & Exploits

Stay ahead in Cyber Security.