mitre-ta0003
381 articles with this tag
HIGH
CRITICAL
CRITICAL
HIGH
HIGH
MEDIUM
MEDIUM
MEDIUM
HIGH
CRITICAL
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
HIGH
MEDIUM
CRITICAL
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
MEDIUM
HIGH
HIGH
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
MEDIUM
HIGH
CRITICAL
HIGH
CRITICAL
CRITICAL
MEDIUM
CRITICAL
HIGH
HIGH
MEDIUM
HIGH
HIGH
MEDIUM
HIGH
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
MEDIUM
MEDIUM
CRITICAL
HIGH
HIGH
HIGH
HIGH
MEDIUM
MEDIUM
HIGH
MEDIUM
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
MEDIUM
HIGH
HIGH
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
CRITICAL
CRITICAL
HIGH
HIGH
HIGH
HIGH
China-nexus group hid in Linux login system for nearly a decade
China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade
Oracle PeopleSoft zero‑day fuels ShinyHunters extortion spree
Angry bug hunter with Microsoft beef drops new Windows 0-day
Inside .NET Loader Analysis: From Malspam to In-Memory Loader
Mini Shai-Hulud ‘Hades’ variant affects 23 PyPI package versions
FreeBSD-SA-26:29.ip6_multicast
WinGet - Code Execution, Persistence and Detection Strategies
Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks
Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer
Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections
VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances
Silent Ransom Group targets law firms with fake IT support calls
USN-8390-1: Linux kernel vulnerability
Chinese APT deploys new malware to keep access to hacked networks
“BTMOB” RAT Demonstrates Deep Persistence on Android Devices
Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites
PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network
Rust-Written IronWorm Hits NPM Supply Chain
Cisco Catalyst SD-WAN Manager Authenticated Privilege Escalation Vulnerability
From poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities
VerdantBamboo: Just Another BRICKSTORM in the Firewall
Chinese-Speaking Actor TA4922 Widens Its Global Reach
Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp
Pakistan Spies on Afghan Finance Ministry With Xeno RAT
Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT
Typosquatted npm packages used to steal cloud and CI/CD secrets
Global Stock Exchange Hit by Monthslong Email Campaign
Argamal: Malware hidden in hentai games
Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign
SideCopy group targets Afghanistan's Ministry of Finance with Xeno RAT
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
LABScon25 Replay | Gamaredon x Turla: Unveiling a 2025 Espionage Alliance Targeting Ukraine
Infected Red Hat npm packages expose developer credentials
Meta AI Hands Over High-Profile Instagram Accounts to Hackers
Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT
Malware hides in Steam comments to infect WordPress sites
Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages
Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm
Russian hacker used AI to run fraud scheme on MAGA Telegram channel
PHANTOMPULSE: anatomy of a hijackable blockchain-C2 RAT
FSB Group Gamaredon Hides Worm in Windows Data Streams
Typosquatted npm packages used to steal cloud and CI/CD secrets
Hackers exploit FortiClient EMS flaw to push infostealer malware
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
BTMOB RAT Spreads Across Brazil, LatAm via MaaS Model
Critical FortiClient EMS Vulnerability Exploited in Fresh Attacks
New Threat Actor Jinx-0164 Targets Crypto Developers on macOS
GPU mining malware spreads via SEO poisoning, AI chatbots
[local] Realtek rtl819x - Local Privilege
GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure
Iranian threat group targets US aviation sector with AI-assisted ‘MiniFast’ backdoor
GlassWorm Botnet Disrupted
BTMOB: A stealthy RAT burrowing deep into Android devices
Feeding Frenzy: 'Megalodon' Malware Infects Thousands of GitHub Repos
KnowledgeDeliver flaw exploited as a zero-day to install web shells
North Korea's Lazarus Group uses new RemotePE malware against financial targets
Zero-day vulnerability in Japanese LMS exploited to deploy Cobalt Strike
Iranian APT Targets Aviation, Software Companies With Updated Tools
MFA Prompt Bombing: Why Your Second Factor Isn't Saving You
Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms
TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO
Laravel Lang packages hijacked to deploy credential-stealing malware
FatGid - FreeBSD 14.x kernel LPE
Paved With Intent: ROADtools and Nation-State Tactics in the Cloud
Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor
Chinese APTs Share Linux Backdoor in Central Asia Telco Attacks
Nine-Year-Old Linux Kernel Flaw Leaks SSH Keys and Password Hashes
How a Webmail Log File Became a Root-Level Backdoor
Mini Shai-Hulud Hits Hundreds of npm Packages in AntV Ecosystem
Webworm APT targets European government organizations with new backdoors
SHub Reaper impersonates Apple, Google, and Microsoft in one MacOS attack chain
Exploit released for new PinTheft Arch Linux root escalation flaw
Tracking TamperedChef Clusters via Certificate and Code Reuse
Stealer Spoofs Google, Microsoft & Apple, Then Backdoors macOS
Mini Shai-Hulud returns, compromising hundreds of npm packages
New Shai-Hulud malware wave compromises 600 npm packages
Critical Microsoft Vulnerabilities Doubled: From Exposure to Escalation
New macOS infostealer impersonates Apple, Microsoft, and Google in a single attack chain
Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account
'Claw Chain' Vulnerabilities Threaten OpenClaw Deployments
Shai-Hulud Worm Clones Spread After Code Release
Turla group evolves Kazuar backdoor into modular P2P botnet
TeamPCP releases ‘vibe coded’ Shai-Hulud source code, issues challenge
Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise
Kazuar: Anatomy of a nation-state botnet
Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Access
Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence
CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits
Broadcom patches high-severity VMware Fusion flaw allowing local privilege escalation
dMSA Ouroboros: Self-Sustaining Credential Extraction in Windows Server 2025
Threat Actors Weaponize Tiflux RMMs in Malspam Attacks
Meet Fragnesia, the third Linux kernel vulnerability in a month
Fragnesia (CVE-2026-46300): Frequently asked questions about new Linux Kernel XFRM ESP-in-TCP privilege escalation
Ongoing exploitation of Cisco Catalyst SD-WAN vulnerabilities
Kazuar: Anatomy of a nation-state botnet
Mustang Panda Linked to Updated FDMTP Backdoor in Asia-Pacific Espionage Campaign
VELVET CHOLLIMA Infostealer Campaign Using Trading App as Lure
Kimsuky targets organizations with PebbleDash-based tools