Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

• Weekly Threat Bulletin – May 6th, 2026

  F5 Labs

  T1190 99% T1068 96% T1505.003 95%
  just now
• Podman rootless containers and the Copy Fail exploit

  Lobsters — security tag

  T1611 75% T1055.001 67% T1610 67%
  1 day ago
• 45,000 Attacks, 5,300+ Backdoors Tied to China-Linked Cybercrime Operation

  HackRead

  T1059.006 96% T1056.001 38% T1505.003 36%
  4 days ago
• Sophisticated Deep#Door Backdoor Enables Espionage, Disruption

  SecurityWeek

  T1497 68% T1572 59% T1059.006 40%
  5 days ago
• Deep#Door Python Backdoor Evades Detection On Windows

  Infosecurity Magazine

  T1059.006 35%
  5 days ago
• New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentials

  The Hacker News

  T1056.001 78% T1059.006 74% T1053.005 58%
  5 days ago
• Researchers unearth industrial sabotage malware that predated Stuxnet by 5 years

  CSO Online

  T1059.011 78% T1014 73% T1588.002 53%
  6 days ago
• Danger of Libredtail [Guest Diary], (Wed, Apr 29th)

  SANS ISC Diaries

  T1588.006 89% T1190 86% T1059.006 71%
  6 days ago
• [webapps] FUXA 1.2.8 - Authentication Bypass + RCE Exploit

  Exploit-DB

  T1190 95% T1059.006 90% T1059.007 48%
  6 days ago
• [webapps] Python-Multipart 0.0.22 - Path Traversal

  Exploit-DB

  T1059.006 95% T1059.004 55%
  6 days ago
• [webapps] NiceGUI 3.6.1 - Path Traversal

  Exploit-DB

  T1059.006 77% T1055.001 48%
  6 days ago
• [webapps] Js2Py 0.74 - RCE

  Exploit-DB

  T1059.006 61% T1059.007 50%
  6 days ago
• [webapps] Cybersecurity AI (CAI) Framework 0.5.10 - Command Injection

  Exploit-DB

  T1059.004 98% T1059.006 36%
  6 days ago
• [webapps] deephas 1.0.7 - Prototype Pollution

  Exploit-DB

  T1059.006 35%
  6 days ago
• [webapps] SUSE Manager 4.3.15 - Code Execution

  Exploit-DB

  T1059.006 90% T1059.004 56% T1071.001 37%
  6 days ago
• Copy Fail — 732 Bytes to Root

  Lobsters — security tag

  T1059.006 83% T1068 35%
  6 days ago
• [webapps] HAX CMS 24.x - Stored Cross-Site Scripting (XSS)

  Exploit-DB

  T1059.007 62% T1059.006 45%
  2026-04-29
• [webapps] LangChain Core 1.2.4 - SSTI/RCE

  Exploit-DB

  T1059.007 74% T1059.006 32%
  2026-04-29
• Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

  Snyk Blog

  T1195.001 93% T1041 83% T1195.002 40%
  2026-04-27
• What's new in pip 26.1 - lockfiles and dependency cooldowns

  Lobsters — security tag

  T1059.006 59%
  2026-04-27
• Metasploit Wrap-Up 04/25/2026

  Rapid7 Blog

  T1210 72% T1059.006 68%
  2026-04-24
• fast16 | Mystery ShadowBrokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet

  SentinelOne Labs

  T1012 80% T1569.002 79% T1112 79%
  2026-04-23
• VU#915947: SGLang is vulnerable to remote code execution when rendering chat templates from a model file

  CERT/CC Vulnerability Notes

  T1059.006 79% T1190 63%
  2026-04-20
• [webapps] FortiWeb 8.0.2 - Remote Code Execution

  Exploit-DB

  T1190 97% T1059.006 74% T1505.003 74%
  2026-04-08
• Hackers Are Attempting to Turn ComfyUI Servers Into a Cryptomining Proxy Botnet

  Censys

  T1070.003 96% T1018 84% T1098.004 84%
  2026-04-06
• Mitigating the Axios npm supply chain compromise

  Microsoft Threat Intelligence

  T1071.001 99% T1195.001 98% T1059.001 98%
  2026-04-01
• North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack

  Mandiant

  T1195.001 98% T1195.002 93% T1071.001 92%
  2026-03-31
• An AI gateway designed to steal your data

  Kaspersky Securelist

  T1195.001 95% T1027 91% T1611 84%
  2026-03-26
• Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise

  Trend Micro Research

  T1195.001 98% T1552.004 98% T1059.006 87%
  2026-03-26
• LiteLLM Supply Chain Compromise

  NetSPI

  T1195.001 97% T1059.006 75% T1048.003 64%
  2026-03-24
• Through the Lens of MDR: Analysis of KongTuke’s ClickFix Abuse of Compromised WordPress Sites

  Trend Micro Research

  T1059.001 98% T1059.006 97% T1053.005 95%
  2026-03-10
• Beyond Electron: Attacking Alternative Desktop Application Frameworks

  Bishop Fox

  T1055.001 69% T1059.004 57% T1055.012 53%
  2026-03-03
• CVE-2025-4565 Unbounded recursion in Python Protobuf

  MSRC Update Guide

  T1059.006 51%
  2026-02-18
• CVE-2014-8991 pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.

  MSRC Update Guide

  T1059.006 56%
  2026-02-18
• CVE-2026-21531 Azure SDK for Python Remote Code Execution Vulnerability

  MSRC Update Guide

  T1059.006 55%
  2026-02-10
• From Automation to Infection (Part II): Reverse Shells, Semantic Worms, and Cognitive Rootkits in OpenClaw Skills

  VirusTotal Blog

  T1098.004 98% T1059.004 85% T1059 85%
  2026-02-04
• Dissecting CrashFix: KongTuke's New Toy

  Huntress

  T1059.001 99% T1547.001 99% T1568.002 97%
  2026-01-16
• A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby

  Google Project Zero

  T1055.001 99% T1055.012 94% T1068 93%
  2026-01-14
• Analyzing a Multi-Stage AsyncRAT Campaign via Managed Detection and Response

  Trend Micro Research

  T1059.006 98% T1218.011 95% T1055.004 94%
  2026-01-12
• Top 10 web hacking techniques of 2025: call for nominations

  PortSwigger Research

  T1588.006 65% T1059.006 57% T1557 44%
  2026-01-06
• CVE-2025-55182 (React2Shell): Remote code execution in React Server Components and Next.js

  Datadog Security Labs

  T1059.004 83% T1083 70% T1190 66%
  2025-12-04
• PureRAT Campaign Targets Job Seekers, Abuses Foxit PDF Reader for DLL Side-loading

  Trend Micro Research

  T1059.006 99% T1204.002 74% T1566.002 73%
  2025-12-03
• Unraveling Water Saci's New Multi-Format, AI-Enhanced Attacks Propagated via WhatsApp

  Trend Micro Research

  T1055.012 99% T1518.001 99% T1569.002 98%
  2025-12-02
• Tracking RondoDox: Malware Exploiting Many IoT Vulnerabilities

  F5 Labs

  T1105 99% T1190 98% T1059.006 59%
  2025-11-24
• A Vietnamese threat actor's shift from PXA Stealer to PureRAT

  Huntress

  T1055.012 99% T1055.001 95% T1555.003 89%
  2025-09-25
• EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks

  Trend Micro Research

  T1012 100% T1547.001 99% T1053.005 99%
  2025-09-11
• An Attacker’s Blunder Gave Us a Look Into Their Operations

  Huntress

  T1059.006 92% T1176.001 91% T1591 73%
  2025-09-09
• Code Insight Expands to Uncover Risks Across the Software Supply Chain

  VirusTotal Blog

  T1176.001 96% T1059.006 95% T1190 87%
  2025-08-14
• Wing FTP Server RCE (CVE-2025-47812) Exploited in the Wild | Huntress

  Huntress

  T1059.001 99% T1059.003 98% T1136.001 94%
  2025-07-10
• What 17,845 GitHub Repos Taught Us About Malicious MCP Servers

  VirusTotal Blog

  T1195.001 55% T1027 52% T1588.002 42%
  2025-06-04