Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

• InstallFix and Claude Code: How Fake Install Pages Lead to Real Compromise

  Trend Micro Research

  T1027 100% T1059.001 99% T1218.005 92%
  1 day ago
• Weaver E-cology critical bug exploited in attacks since March

  Bleeping Computer

  T1059.001 98% T1190 97% T1059 80%
  1 day ago
• Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities

  Trend Micro Research

  T1195.001 98% T1574.006 98% T1014 96%
  2 days ago
• Untangling a Linux Incident With an OpenAI Twist (Part 2)

  Huntress

  T1190 99% T1543.002 95% T1496 92%
  2026-04-22
• Bad Apples: Weaponizing native macOS primitives for movement and execution

  Cisco Talos Intelligence

  T1059.002 100% T1048.003 98% T1572 97%
  2026-04-21
• 4 Essential Integration Workflows for Operationalizing Threat Intelligence Recorded Future

  Recorded Future Blog

  T1018 90% T1059 45%
  2026-04-17
• March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC Zero-Day

  Recorded Future Blog

  T1059.007 99% T1190 96% T1587.004 87%
  2026-04-13
• Cracks in the Bedrock: Escaping the AWS AgentCore Sandbox

  Palo Alto Unit 42

  T1071.004 99% T1572 98% T1525 94%
  2026-04-07
• ClickFix Campaigns Targeting Windows and macOS

  Recorded Future Blog

  T1059.001 97% T1074.001 97% T1204.004 95%
  2026-03-25
• Through the Lens of MDR: Analysis of KongTuke’s ClickFix Abuse of Compromised WordPress Sites

  Trend Micro Research

  T1059.001 98% T1059.006 97% T1053.005 95%
  2026-03-10
• CVE-2024-1874 Command injection via array-ish $command parameter of proc_open()

  MSRC Update Guide

  T1059 59%
  2026-02-18
• CVE-2017-14867 Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary OS commands via shell metacharacters in a module name. The vulnerable code is reachable via git-shell even without CVS support.

  MSRC Update Guide

  T1059 43%
  2026-02-18
• A New RAT and a Hands-on-Keyboard Intrusion

  Huntress

  T1055.001 99% T1053.005 87% T1204.004 74%
  2026-02-16
• From Automation to Infection (Part II): Reverse Shells, Semantic Worms, and Cognitive Rootkits in OpenClaw Skills

  VirusTotal Blog

  T1098.004 98% T1059.004 85% T1059 85%
  2026-02-04
• PeckBirdy: A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups

  Trend Micro Research

  T1204.002 82% T1105 78% T1071.001 72%
  2026-01-26
• Analyzing a Multi-Stage AsyncRAT Campaign via Managed Detection and Response

  Trend Micro Research

  T1059.006 98% T1218.011 95% T1055.004 94%
  2026-01-12
• What Is Cyber Threat Hunting? Types, Tricks, and Tips | Huntress

  Huntress

  T1018 58% T1592 42% T1059 39%
  2025-12-01
• Redefining Enterprise Defense in the Era of AI-Led Cyberattacks

  Trend Micro Research

  T1588.007 73% T1059 32%
  2025-11-14
• EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks

  Trend Micro Research

  T1012 100% T1547.001 99% T1053.005 99%
  2025-09-11
• Top 10 web hacking techniques of 2024: nominations open

  PortSwigger Research

  T1190 97% T1068 68% T1059 56%
  2025-01-08
• Cleo Malichus Malware Analysis CVE-2024-55956| Huntress

  Huntress

  T1105 81% T1573 76% T1059.001 74%
  2024-12-11
• Making Sense of Alphabet Soup: 16 Security Terms and Acronyms You Should Know | Huntress

  Huntress

  T1056.001 100% T1486 99% T1219 97%
  2024-09-18
• MSSQL to ScreenConnect | Huntress

  Huntress

  T1059.001 98% T1218.007 55% T1059 50%
  2024-03-28
• Curling for Data: A Dive into a Threat Actor's Malicious TTPs | Huntress

  Huntress

  T1003.001 99% T1005 84% T1219 79%
  2023-12-14
• Caging the Malicious Insider Application

  F5 Labs

  T1055.001 87% T1059 80% T1190 59%
  2022-03-31
• Rapid Response: Mass Exploitation of On-Prem Exchange Servers | Huntress

  Huntress

  T1190 99% T1059.001 99% T1505.003 90%
  2021-03-03
• What Is Human-Powered Threat Hunting? | Huntress

  Huntress

  T1053.005 88% T1059.001 83% T1059 66%
  2021-03-02
• Tried and True Hacker Technique: DOS Obfuscation | Huntress

  Huntress

  T1059.003 100% T1059.001 98% T1027.010 78%
  2020-11-24
• New Perl Botnet (Tuyul) Found with Possible Indonesian Attribution

  F5 Labs

  T1505.003 98% T1584.005 90% T1059.004 86%
  2020-03-03
• Vulnerabilities, Exploits, and Malware Driving Attack Campaigns in December 2019

  F5 Labs

  T1190 98% T1059.004 91% T1059 30%
  2020-01-31
• Assisted Remediation in Action | Huntress

  Huntress

  T1053.005 87% T1486 64% T1059 35%
  2019-11-15
• Vulnerabilities, Exploits, and Malware Driving Attack Campaigns in July 2019

  F5 Labs

  T1105 98% T1027.002 98% T1190 95%
  2019-08-28
• “CryptoSink” Campaign Deploys a New Miner Malware

  F5 Labs

  T1105 73% T1059.004 72% T1496 68%
  2019-03-13
• Windows IIS 6.0 CVE-2017-7269 is Targeted Again to Mine Electroneum

  F5 Labs

  T1059.005 95% T1218.010 84% T1204.002 72%
  2018-04-12
• Achieving Multi-Dimensional Security Through Information Modeling—Unwrapping Controls Part 4

  F5 Labs

  T1059 44%
  2017-11-28