Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Intel Recorded Future Kaseya

• When DNSSEC goes wrong: how we responded to the .de TLD outage

  Cloudflare Blog

  T1482 71% T1572 41%
  6 hours ago
• UAT-8302 and its box full of malware

  Cisco Talos Intelligence

  T1053.005 100% T1087.002 98% T1055.001 97%
  1 day ago
• Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities

  Trend Micro Research

  T1195.001 98% T1574.006 98% T1014 96%
  2 days ago
• Bad Connection: Global telecom exploitation by covert surveillance actors

  Hacker News (front page)

  T1071.001 91% T1090.003 84% T1111 62%
  3 days ago
• New Deep#Door RAT uses stealth and persistence to target Windows

  Security Affairs

  T1572 98% T1059.001 95% T1056.001 67%
  4 days ago
• Sophisticated Deep#Door Backdoor Enables Espionage, Disruption

  SecurityWeek

  T1497 68% T1572 59% T1059.006 40%
  5 days ago
• Komari Red: The Monitoring Tool with a Built-in Reverse Shell

  Huntress

  T1003.002 98% T1021.002 95% T1021.001 88%
  6 days ago
• CVE-2026-23439 udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n

  MSRC Update Guide

  T1572 82%
  2026-04-25
• Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2

  The Hacker News

  T1204.002 97% T1572 43%
  2026-04-24
• PhantomRPC: A new privilege escalation technique in Windows RPC

  Kaspersky Securelist

  T1572 93% T1068 91% T1055.001 79%
  2026-04-24
• Snow Flurries: How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite

  Mandiant

  T1053.005 100% T1572 98% T1550.002 96%
  2026-04-23
• Bad Apples: Weaponizing native macOS primitives for movement and execution

  Cisco Talos Intelligence

  T1059.002 100% T1048.003 98% T1572 97%
  2026-04-21
• Nightmare-Eclipse Tooling Seen in Real-World Intrusion

  Huntress

  T1078 98% T1055.001 97% T1003.002 96%
  2026-04-20
• Cracks in the Bedrock: Escaping the AWS AgentCore Sandbox

  Palo Alto Unit 42

  T1071.004 99% T1572 98% T1525 94%
  2026-04-07
• ChatGPT Data Leakage via a Hidden Outbound Channel in the Code Execution Runtime

  Check Point Research

  T1572 85%
  2026-03-30
• Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack

  Trend Micro Research

  T1059.001 99% T1055.001 98% T1567.002 97%
  2026-03-16
• Unmasking an Attack Chain of MuddyWater

  Huntress

  T1059.001 96% T1071 57% T1021.001 43%
  2026-03-06
• New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages

  Trend Micro Research

  T1572 98% T1059.001 95% T1105 65%
  2026-03-05
• CVE-2025-37781 i2c: cros-ec-tunnel: defer probe if parent EC is not present

  MSRC Update Guide

  T1572 54% T1190 36%
  2026-02-18
• CVE-2022-43552 A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET curl would use a heap-allocated struct after it had been freed in its transfer shutdown code path.

  MSRC Update Guide

  T1572 96%
  2026-02-18
• Active Exploitation of SolarWinds Web Help Desk (CVE-2025-26399)

  Huntress

  T1112 100% T1059.001 100% T1190 100%
  2026-02-08
• ESXi Exploitation in the Wild

  Huntress

  T1068 98% T1055.001 88% T1486 81%
  2026-01-07
• PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182

  Huntress

  T1543.002 99% T1070.003 99% T1105 98%
  2025-12-09
• AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows

  Trend Micro Research

  T1055.001 92% T1059.004 90% T1573 49%
  2025-12-08
• Velociraptor Misuse, Pt. II: The Eye of the Storm

  Huntress

  T1505.003 99% T1486 94% T1059.001 92%
  2025-12-03
• PlushDaemon compromises network devices for adversary-in-the-middle attacks

  ESET WeLiveSecurity

  T1195.002 84% T1105 57% T1572 56%
  2025-11-19
• From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

  The DFIR Report

  T1486 99% T1003.003 99% T1218.007 98%
  2025-11-04
• Microsoft Store and WinGet: Security Risks for Corporate Environments

  Black Hills InfoSec

  T1572 99% T1505.001 72% T1187 63%
  2025-09-10
• Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

  The DFIR Report

  T1003.001 100% T1046 99% T1021.001 99%
  2025-09-08
• TAOTH Campaign Exploits End-of-Support Software to Target Traditional Chinese Users and Dissidents

  Trend Micro Research

  T1566.002 92% T1525 71% T1566.001 71%
  2025-08-28
• Netcat (nc) Cheatsheet

  Black Hills InfoSec

  T1046 98% T1021.001 52% T1572 33%
  2025-08-06
• NoBooze1 Malware Targets TP-Link Routers via CVE-2019-9082

  F5 Labs

  T1027.002 99% T1027 94% T1190 91%
  2025-07-16
• Boring Isn't Harmless: Common Cyberattack Tradecraft Risks | Huntress

  Huntress

  T1110 99% T1133 98% T1588.002 71%
  2025-06-05
• Navigating Through The Fog

  The DFIR Report

  T1572 99% T1046 99% T1486 98%
  2025-04-28
• !exploitable Episode Two - Enter the Matrix

  Doyensec

  T1572 76% T1190 71% T1574.001 38%
  2025-02-26
• Questions From a Beginner Threat Hunter

  Black Hills InfoSec

  T1071.004 93% T1095 89% T1040 78%
  2025-01-30
• Attack Tactics 9: Shadow Creds for PrivEsc w/ Kent & Jordan

  Black Hills InfoSec

  T1572 98% T1557.001 88% T1021.001 87%
  2025-01-20
• Introduction to Zeek Log Analysis

  Black Hills InfoSec

  T1095 98% T1654 92% T1071.004 86%
  2025-01-13
• The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access

  Volexity

  T1078 99% T1003.003 99% T1490 97%
  2024-11-22
• Making Sense of Alphabet Soup: 16 Security Terms and Acronyms You Should Know | Huntress

  Huntress

  T1056.001 100% T1486 99% T1219 97%
  2024-09-18
• When Trust Becomes a Trap: Foiling a Medical Software Hack | Huntress

  Huntress

  T1195.002 87% T1204.002 51% T1572 32%
  2024-07-23
• DISGOMOJI Malware Used to Target Indian Government

  Volexity

  T1027.002 98% T1057 98% T1068 97%
  2024-06-13
• Key Network Questions

  TaoSecurity (Bejtlich)

  T1572 82%
  2023-06-25
• Evasive File Smuggling with Skyhook

  Black Hills InfoSec

  T1572 35%
  2023-06-15
• Ssh… Don’t Tell Them I Am Not HTTPS: How Attackers Use SSH.exe as a Backdoor Into Your Network

  Black Hills InfoSec

  T1021.004 94% T1572 66% T1098.004 47%
  2023-03-21
• Forwarding Traffic Through SSH

  Black Hills InfoSec

  T1572 99% T1090.001 86% T1090.002 50%
  2023-02-23
• The DNS over HTTPS (DoH) Mess

  Black Hills InfoSec

  T1572 74% T1071.004 65% T1090.002 31%
  2022-02-15
• DNS Over HTTPS for Cobalt Strike

  Black Hills InfoSec

  T1572 96% T1090.004 67% T1665 45%
  2021-11-17
• Abusing Ngrok: Hackers at the End of the Tunnel | Huntress

  Huntress

  T1059.001 100% T1572 97% T1547.001 95%
  2021-03-16
• Hiding in Plain Sight: Part 2

  Huntress

  T1059.001 99% T1572 65% T1053.005 39%
  2020-08-20