Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

• Malicious OpenClaw Skill Targets Agentic AI Workflows to Deploy RATs and Stealers

  GBHackers

  T1056.001 84% T1055.001 83% T1059.001 67%
  3 hours ago
• An exploitable integer overflow in Lix (CVE-2026-44028)

  Lobsters — security tag

  T1055.001 80%
  17 hours ago
• Hackers Abuse DAEMON Tools Distribution Channel to Deliver Malicious Payloads

  GBHackers

  T1059.001 98% T1543.004 95% T1195.002 89%
  20 hours ago
• C/C++ checklist challenges, solved

  Trail of Bits

  T1548.002 99% T1134 96% T1068 91%
  23 hours ago
• UAT-8302 and its box full of malware

  Cisco Talos Intelligence

  T1053.005 100% T1087.002 98% T1055.001 97%
  1 day ago
• CloudZ RAT potentially steals OTP messages using Pheno plugin

  Cisco Talos Intelligence

  T1053.005 100% T1105 100% T1204.002 84%
  1 day ago
• ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows

  The Hacker News

  T1195.002 92% T1055.001 75% T1195.001 60%
  1 day ago
• CVE-2026-31431: Copy Fail vs. rootless containers

  Hacker News (front page)

  T1068 93% T1059.004 92% T1611 91%
  1 day ago
• Podman rootless containers and the Copy Fail exploit

  Lobsters — security tag

  T1611 75% T1055.001 67% T1610 67%
  1 day ago
• uutils coreutils CVEs

  Lobsters — security tag

  T1068 87% T1055.001 75% T1222.002 71%
  1 day ago
• [local] Linux Kernel proc_readdir_de() 6.18-rc5 - Local Privilege Escalation

  Exploit-DB

  T1068 99% T1070.004 71% T1055.001 59%
  2 days ago
• [local] Linux nf_tables 6.19.3 - Local Privilege Escalation

  Exploit-DB

  T1068 98% T1027.001 87% T1059.004 73%
  2 days ago
• Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities

  Trend Micro Research

  T1195.001 98% T1574.006 98% T1014 96%
  2 days ago
• New Deep#Door RAT uses stealth and persistence to target Windows

  Security Affairs

  T1572 98% T1059.001 95% T1056.001 67%
  4 days ago
• Sophisticated Deep#Door Backdoor Enables Espionage, Disruption

  SecurityWeek

  T1497 68% T1572 59% T1059.006 40%
  4 days ago
• Great responsibility, without great power

  Cisco Talos Intelligence

  T1055.001 90% T1204.002 85% T1036.005 73%
  5 days ago
• ClickFix Removes Your Background but Leaves the Malware

  Huntress

  T1055.001 99% T1055.012 99% T1555.003 99%
  5 days ago
• EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades

  The Hacker News

  T1547.001 99% T1608.006 73% T1071 71%
  5 days ago
• Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India

  Kaspersky Securelist

  T1071.001 97% T1486 96% T1566.001 96%
  6 days ago
• [local] Windows 11 25H2 - Heap Overflow

  Exploit-DB

  T1059.001 99% T1068 94% T1190 86%
  6 days ago
• [webapps] NiceGUI 3.6.1 - Path Traversal

  Exploit-DB

  T1059.006 77% T1055.001 48%
  6 days ago
• [webapps] Frigate NVR 0.16.3 - Remote Code Execution

  Exploit-DB

  T1190 93% T1059.004 90% T1055.001 76%
  6 days ago
• Weekly Threat Bulletin – April 29th, 2026

  F5 Labs

  T1195.001 99% T1190 98% T1003.001 93%
  6 days ago
• VECT: Ransomware by design, Wiper by accident

  Check Point Research

  T1486 99% T1679 95% T1059.012 90%
  2026-04-28
• Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE

  The Hacker News

  T1190 96% T1055.001 41%
  2026-04-28
• GTFOBins

  Lobsters — security tag

  T1055.001 51%
  2026-04-28
• Researchers Uncover Pre-Stuxnet ‘fast16’ Malware Targeting Engineering Software

  The Hacker News

  T1055.001 62% T1588.002 60% T1068 49%
  2026-04-25
• PhantomRPC: A new privilege escalation technique in Windows RPC

  Kaspersky Securelist

  T1572 93% T1068 91% T1055.001 79%
  2026-04-24
• fast16 | Mystery ShadowBrokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet

  SentinelOne Labs

  T1012 80% T1569.002 79% T1112 79%
  2026-04-23
• Newly Deciphered Sabotage Malware May Have Targeted Iran’s Nuclear Program—and Predates Stuxnet

  WIRED — Security

  T1014 96% T1588.002 77% T1055.001 31%
  2026-04-23
• Hacking Safari with GPT 5.4

  Imperva Blog

  T1055.001 84% T1190 36%
  2026-04-23
• It pays to be a forever student

  Cisco Talos Intelligence

  T1204.002 91% T1486 88% T1036.005 64%
  2026-04-23
• UAT-4356's Targeting of Cisco Firepower Devices

  Cisco Talos Intelligence

  T1055.001 99% T1190 94% T1542.003 67%
  2026-04-23
• ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories

  The Hacker News

  T1190 99% T1195.001 95% T1486 92%
  2026-04-23
• GopherWhisper: A burrow full of malware

  ESET WeLiveSecurity

  T1055.001 97% T1071 75% T1102.002 71%
  2026-04-23
• [local] Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation

  Exploit-DB

  T1068 99% T1003.001 95% T1055.001 89%
  2026-04-22
• 500,000 Vulnerabilities, 14 That Matter: How Exploit Chain Analysis Cuts Through the Noise

  Praetorian

  T1204.002 83% T1588.006 60% T1587.004 60%
  2026-04-21
• Bad Apples: Weaponizing native macOS primitives for movement and execution

  Cisco Talos Intelligence

  T1059.002 100% T1048.003 98% T1572 97%
  2026-04-21
• Nightmare-Eclipse Tooling Seen in Real-World Intrusion

  Huntress

  T1078 98% T1055.001 97% T1003.002 96%
  2026-04-20
• Formbook Malware Campaign Uses Multiple Obfuscation Techniques to Avoid Detection

  Infosecurity Magazine

  T1574.001 77% T1059.001 71% T1204.002 70%
  2026-04-20
• DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy

  Check Point Research

  T1053.005 100% T1490 100% T1486 100%
  2026-04-20
• FakeWallet crypto stealer spreading through iOS apps in the App Store

  Kaspersky Securelist

  T1041 83% T1071.001 77% T1027 71%
  2026-04-20
• Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook

  Microsoft Security Blog

  T1021.006 99% T1059.003 92% T1059.001 76%
  2026-04-18
• WerReportCreate API

  Hexacorn

  T1055.001 53% T1574.001 37%
  2026-04-16
• The Q1 vulnerability pulse

  Cisco Talos Intelligence

  T1204.002 86% T1566.002 74% T1525 74%
  2026-04-16
• ClickFix Phishing Campaign Masquerading as a Claude Installer

  Rapid7 Blog

  T1059.001 95% T1055.001 84% T1566.002 65%
  2026-04-16
• PowMix botnet targets Czech workforce

  Cisco Talos Intelligence

  T1059.001 99% T1053.005 99% T1204.002 91%
  2026-04-16
• Signed, Trusted, and Abused: Proxy Execution via WebView2

  Black Hills InfoSec

  T1055.001 91% T1574.001 89% T1190 47%
  2026-04-15
• Identity, browsers, and node.js: Everything you missed in the Threat Detection Report miniseries

  Red Canary

  T1555.003 79% T1218 73% T1055.001 70%
  2026-04-15
• The n8n n8mare: How threat actors are misusing AI workflow automation

  Cisco Talos Intelligence

  T1566.002 99% T1055.001 83% T1105 83%
  2026-04-15