Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Intel Recorded Future Kaseya

• ClickFix campaign uses fake macOS utilities lures to deliver infostealers

  Microsoft Security Blog

  T1543.004 96% T1555.003 96% T1059.002 96%
  7 hours ago
• DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware

  The Hacker News

  T1195.002 97% T1071.001 77% T1059.004 65%
  1 day ago
• CVE-2026-31431: Copy Fail vs. rootless containers

  Hacker News (front page)

  T1068 93% T1059.004 92% T1611 91%
  1 day ago
• An LLM agent that runs on any Linux box

  Hacker News (front page)

  T1059.004 89%
  1 day ago
• Podman rootless containers and the Copy Fail exploit

  Lobsters — security tag

  T1611 75% T1055.001 67% T1610 67%
  2 days ago
• [local] Linux nf_tables 6.19.3 - Local Privilege Escalation

  Exploit-DB

  T1068 98% T1027.001 87% T1059.004 73%
  2 days ago
• Finding a RCE in my old TP-Link router

  Lobsters — security tag

  T1190 86% T1059.004 78% T1542.001 41%
  5 days ago
• PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials

  The Hacker News

  T1195.001 100% T1587 75% T1195.002 73%
  6 days ago
• [webapps] Python-Multipart 0.0.22 - Path Traversal

  Exploit-DB

  T1059.006 95% T1059.004 55%
  6 days ago
• [webapps] Frigate NVR 0.16.3 - Remote Code Execution

  Exploit-DB

  T1190 93% T1059.004 90% T1055.001 76%
  6 days ago
• [webapps] Cybersecurity AI (CAI) Framework 0.5.10 - Command Injection

  Exploit-DB

  T1059.004 98% T1059.006 36%
  6 days ago
• [webapps] SUSE Manager 4.3.15 - Code Execution

  Exploit-DB

  T1059.006 90% T1059.004 56% T1071.001 37%
  6 days ago
• [webapps] GeographicLib v2.5.1 - stack buffer overflow

  Exploit-DB

  T1059.004 97% T1587.004 69%
  2026-04-29
• Untangling a Linux Incident With an OpenAI Twist (Part 2)

  Huntress

  T1190 99% T1543.002 95% T1496 92%
  2026-04-22
• Bad Apples: Weaponizing native macOS primitives for movement and execution

  Cisco Talos Intelligence

  T1059.002 100% T1048.003 98% T1572 97%
  2026-04-21
• Untangling a Linux Incident With an OpenAI Twist

  Huntress

  T1059.004 97% T1496 75% T1543.002 72%
  2026-04-17
• Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise

  Microsoft Threat Intelligence

  T1548.006 100% T1543.004 97% T1555.003 97%
  2026-04-16
• [webapps] D-Link DIR-650IN - Authenticated Command Injection

  Exploit-DB

  T1190 86% T1059.004 52% T1068 50%
  2026-04-10
• [local] ZSH 5.9 - RCE

  Exploit-DB

  T1059.004 81% T1622 43%
  2026-04-09
• Hackers Are Attempting to Turn ComfyUI Servers Into a Cryptomining Proxy Botnet

  Censys

  T1070.003 96% T1018 84% T1098.004 84%
  2026-04-06
• Mitigating the Axios npm supply chain compromise

  Microsoft Threat Intelligence

  T1071.001 99% T1195.001 98% T1059.001 98%
  2026-04-01
• North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack

  Mandiant

  T1195.001 98% T1195.002 93% T1071.001 92%
  2026-03-31
• Compromised axios npm package delivers cross-platform RAT

  Datadog Security Labs

  T1195.001 98% T1059.001 97% T1195.002 94%
  2026-03-31
• ClickFix Campaigns Targeting Windows and macOS

  Recorded Future Blog

  T1059.001 97% T1074.001 97% T1204.004 95%
  2026-03-25
• CISOs in a Pinch: A Security Analysis of OpenClaw

  Trend Micro Research

  T1059.004 82%
  2026-03-10
• Beyond Electron: Attacking Alternative Desktop Application Frameworks

  Bishop Fox

  T1055.001 69% T1059.004 57% T1055.012 53%
  2026-03-03
• Exposing the Undercurrent: Disrupting the GRIDTIDE Global Cyber Espionage Campaign

  Mandiant

  T1041 80% T1102 79% T1059.004 62%
  2026-02-25
• Samsung Tizen OS | Version Through 9.0

  Bishop Fox

  T1059.004 96% T1190 88% T1055.001 55%
  2026-02-24
• Malicious OpenClaw Skills Used to Distribute Atomic macOS Stealer

  Trend Micro Research

  T1059.004 40%
  2026-02-23
• From BRICKSTORM to GRIMBOLT: UNC6201 Exploiting a Dell RecoverPoint for Virtual Machines Zero-Day

  Mandiant

  T1132.001 97% T1190 91% T1059.004 72%
  2026-02-17
• Tech impersonators: ClickFix and MacOS infostealers

  Datadog Security Labs

  T1555.003 99% T1543.001 95% T1204.004 94%
  2026-02-10
• Intego X9: When your macOS antivirus becomes your enemy

  Quarkslab

  T1068 95% T1490 61% T1059.004 50%
  2026-02-09
• CVE-2025-6978: Arbitrary Code Execution in the Arista NG Firewall

  Zero Day Initiative

  T1059.004 95% T1059.007 56% T1190 30%
  2026-02-05
• From Automation to Infection (Part II): Reverse Shells, Semantic Worms, and Cognitive Rootkits in OpenClaw Skills

  VirusTotal Blog

  T1098.004 98% T1059.004 85% T1059 85%
  2026-02-04
• Analyzing React2Shell Threat Actors

  F5 Labs

  T1059.004 98% T1190 93%
  2026-01-16
• ESXi Exploitation in the Wild

  Huntress

  T1068 98% T1055.001 88% T1486 81%
  2026-01-07
• There's Payloads, And Then There's pAIloads: A Look At Selected Opportunistic (And Possibly AI-"Enhanced") React2Shell Probes and Attacks

  GreyNoise

  T1059.004 77%
  2025-12-17
• CVE-2025-55182: React2Shell Analysis, Proof-of-Concept Chaos, and In-the-Wild Exploitation

  Trend Micro Research

  T1552.005 89% T1574.006 89% T1190 89%
  2025-12-10
• AI-Poisoning & AMOS Stealer: The Biggest Mac Threat | Huntress

  Huntress

  T1555.001 92% T1059.004 85% T1543.004 84%
  2025-12-09
• PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182

  Huntress

  T1543.002 99% T1070.003 99% T1105 98%
  2025-12-09
• ShellShock Makes a Comeback and RondoDox Changes Tactics

  F5 Labs

  T1059.004 98% T1190 97%
  2025-12-08
• AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows

  Trend Micro Research

  T1055.001 92% T1059.004 90% T1573 49%
  2025-12-08
• CVE-2025-55182 (React2Shell): Remote code execution in React Server Components and Next.js

  Datadog Security Labs

  T1059.004 83% T1083 70% T1190 66%
  2025-12-04
• Shai-hulud 2.0 Campaign Targets Cloud and Developer Ecosystems

  Trend Micro Research

  T1195.001 99% T1552.005 90% T1555.006 88%
  2025-11-27
• The Shai-Hulud 2.0 npm worm: analysis, and what you need to know

  Datadog Security Labs

  T1195.001 99% T1587 86% T1195.002 82%
  2025-11-25
• The Crown Prince, Nezha | Huntress

  Huntress

  T1059.001 96% T1505.003 96% T1583.001 92%
  2025-10-15
• RondoDox: From Targeting Pwn2Own Vulnerabilities to Shotgunning Exploits

  Trend Micro Research

  T1190 94% T1587.004 76% T1059.004 58%
  2025-10-09
• An MDR Analysis of the AMOS Stealer Campaign Targeting macOS via ‘Cracked’ Apps

  Trend Micro Research

  T1555.003 100% T1553.001 98% T1204.002 95%
  2025-09-04
• NoBooze1 Malware Targets TP-Link Routers via CVE-2019-9082

  F5 Labs

  T1027.002 99% T1027 94% T1190 91%
  2025-07-16
• Navigating Through The Fog

  The DFIR Report

  T1572 99% T1046 99% T1486 98%
  2025-04-28