Malware & Exploits

Malware, exploited flaws, phishing and botnets, from the researchers who found them.

117stories this week

16today

the last seven days

Most fromThe Hacker News, BleepingComputer, SecurityWeek, Help Net Security

In the news hereMicrosoft8 GitHub6 Fortinet6 Linux6 Lazarus2 APT411 APT29 (Cozy Bear)1 Lumma Stealer1

Exploited
CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

September 25, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication bypass vulnerability (CVE-2026-5430) affecting multiple products from enterprise software provider WSO2.
BleepingComputer
Exploited
CVE-2026-87902: Critical Vulnerability in WordPress

September 25, 2026

Cyber Awareness & Education, Malware & Exploits, Security Awareness, Threat Intelligence

We explain in simple terms why the CVE-2026-87902 vulnerability is dangerous, and how to protect your company against it.
Kaspersky
Stopping IT Worker Scams Requires Revamped HR Process

September 25, 2026

Malware & Exploits, Phishing & Scams, Threat Intelligence

Training human-resource managers in the latest tactics and warning signs goes a long way toward blunting the threat, but automated analysis can help even more.
Dark Reading
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

September 25, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign. The affected GitHub Actions are listed below – actions-cool/issues-helper actions-cool/maintain-one-comment Visiting either of the repositories now shows the message: “Access to this…
The Hacker News
Exploited
ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft

September 25, 2026

Global Cyber Security, Malware & Exploits, Nation-State Threats, Ransomware, Threat Intelligence

Introduction As an update to the June 2026 post, ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit, Mandiant and Google Threat Intelligence Group (GTIG) have identified renewed mass exploitation of CVE-2026-35273 by UNC6240 (ShinyHunters), along with expanded global targeting across multiple sectors. In June, the threat actor exploited this vulnerability as a zero-day predominantly against…
Google Threat Intelligence
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence

September 25, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using a server-side decryption chain. The latest artifacts, per Jamf Threat Labs, continue to rely on the same JavaScript for Automation (JXA) dropper mechanism, but modify the lure and the delivery method. “Where earlier variants embedded…
The Hacker News
A Closer Look at Malware From the Macfinger ClickFix Campaign, (Fri, Sep 25th)

September 25, 2026

Malware & Exploits, Threat Intelligence

Introduction…
SANS Internet Storm Center
CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks

September 25, 2026

Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, SOC & SIEM, Threat Intelligence

Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
SecurityWeek
CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks

September 25, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Nation-State Threats, Threat Intelligence

Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
SecurityWeek
CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks

September 25, 2026

Automation & SOAR, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, AI & Emerging Technology, Threat Intelligence

Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
SecurityWeek
CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks

September 25, 2026

AI Attacks & Abuse, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, AI & Emerging Technology, Threat Intelligence

Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
SecurityWeek
CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks

September 25, 2026

AI in Cybersecurity, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, AI & Emerging Technology, Threat Intelligence

Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July.
SecurityWeek

Your basket (items: 0)

Products in basket
Product	Details	Total
	Available on back-order Previous price: Discounted price:	Save

Malware & Exploits

Stay ahead in Cyber Security.