Mirai

PHP2Shell Was Exploited Before the Patch

AI-Assisted Cyberespionage Campaign Targets Government Systems

Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain

Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools

Statistical Report on Malware Targeting Linux SSH Servers in the Third Quarter of 2026

The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws

ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure

China Linked Warlock Ransomware Campaign Targets Critical Infrastructure

TSUBAME Report Overflow (Apr-Jun 2026)

The Operations of the Swarm: Inside the Complex World of Mirai-Based Botnets

Bulletproof Hosting Hunt

ShadowV2: Advanced Technical Threat Analysis of a New Mirai-Based Botnet

React2Shell Side Quest: Tracking Down Malicious MeshCentral Nodes

2026-01-14: The Day the telnet Died

Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer

The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat

BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace

Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware

BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns

China and the Cyber Arms Race for AI Supremacy

FamousSparrow Takes Flight with New SparroWocky Backdoor

Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations

CLOSEDQUORUM: Malware Puts AI in the C2 Loop

Threat Research/ancient Botnet at Main · Ksi Digital/threat Research

Cling Botnet Encodes C2 Commands in STUN Traffic to Evade Network Detection

cPanel CalDAV/CardDAV Flaw Lets Local Users Access Other Accounts’ Contacts and Calendars

New IoT Malware Uses Public Linux Exploits to Gain Root and Turn Devices Into DDoS Bots

Hunt Malware & Phishing Threats with ANY.RUN for Proactive Enterprise Security

Evooo1Bot Linux Botnet Hijacks Routers and Firewalls for DDoS, SOCKS5 Proxy and Credential Theft

IT threat evolution in Q2 2026. Non-mobile statistics