mitre-t1486
301 articles with this tag
MEDIUM
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
HIGH
HIGH
MEDIUM
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
MEDIUM
HIGH
HIGH
MEDIUM
CRITICAL
MEDIUM
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
MEDIUM
CRITICAL
CRITICAL
CRITICAL
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
HIGH
MEDIUM
HIGH
HIGH
HIGH
MEDIUM
HIGH
HIGH
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
CRITICAL
HIGH
HIGH
CRITICAL
HIGH
MEDIUM
CRITICAL
HIGH
HIGH
CRITICAL
HIGH
MEDIUM
MEDIUM
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
CRITICAL
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
HIGH
MazeBolt launches AI module to simulate novel DDoS attack vectors
‘HTTP/2 Bomb’ Exploit Knocks Web Servers Offline in Seconds
New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets
Shai-Hulud malware worms Red Hat npm package versions downloaded 80K times a week
Poisoning Claude Code: One GitHub Issue to Break the Supply Chain
Containers on fire: from container escapes to supply chain attacks
Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit
The Gentlemen are coming for your files, and then your network
The Gentlemen ransomware: Dissecting a self-propagating Go encryptor
Mass database extortion causes significant damage despite low payment rates
WantToCry ransomware remotely encrypts files
When ransomware shutters the ER, cyber resilience can help teams mitigate the damage
Megalodon chums the waters in 5.5K+ GitHub repo poisonings
Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada
WantToCry ransomware evades detection through SMB abuse, remote encryption
Typosquatting Is No Longer a User Problem. It's a Supply Chain Problem
FBI warns students and staff that ShinyHunters may come knocking after Canvas breach
The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised
GitHub Actions workflow compromised to steal CI/CD credentials
Spotify outage caused by DDoS attack claimed by hacking group
Leaked Shai-Hulud malware fuels new npm infostealer campaign
First Shai-Hulud Worm Clones Emerge
American Lending Center data breach impacts over 123,000 individuals
Funnel Builder WordPress plugin bug exploited to steal credit cards
Gremlin Stealer Evolves into Modular Threat with Advanced Evasion Capabilities
Foxconn factories resume operations after ransomware attack
Major tech manufacturer Foxconn confirms cyberattack hit North American factories
New CRPx0 malware campaign uses OnlyFans lure for crypto theft and ransomware
West Pharmaceutical says hackers stole data, encrypted systems
Foxconn Attack Highlights Manufacturing's Cyber Crisis
West Pharmaceutical Services hit by ransomware attack
Foxconn confirms cyberattack claimed by Nitrogen ransomware gang
Foxconn confirms cyberattack after ransomware crew claims it stole confidential Apple, Nvidia files
West Pharmaceutical Services Hit by Disruptive Ransomware Attack
Cache-poisoning caper turns TanStack npm packages toxic
ShinyHunters Escalates Canvas Extortion with School by School Ransom Campaign
Former govt contractor convicted for wiping dozens of federal databases
The Canvas Hack Is a New Kind of Ransomware Debacle
Multiple threat actors actively exploit cPanel vulnerability (CVE-2026-41940)
Critrical cPanel flaw mass-exploited in "Sorry" ransomware attacks
Supply chain attack against SAP npm packages facilitates credential theft
Illicit AI-assisted commit-linked npm dependency compromises crypto wallets
Two US Security Experts Sentenced to Prison for Helping Ransomware Gang
Two American Cybersecurity Workers Jailed for BlackCat Ransomware Attacks
Two Cybersecurity Professionals Get 4-Year Sentences in BlackCat Ransomware Attacks
US ransomware negotiators get 4 years in prison over BlackCat attacks
Former incident responders sentenced to 4 years in prison for committing ransomware attacks
LiteLLM exploited within 36 hours of disclosure via SQL injection bug
Malicious npm Dependency Linked to AI Assisted Commit Targets Crypto Wallets
TeamPCP-linked VECT 2.0 ransomware unintentionally destroys files larger than 128 KB
Broken VECT 2.0 ransomware acts as a data wiper for large files
Don't pay Vect a ransom - your data's likely already wiped out
VECT 2.0 Ransomware Irreversibly Destroys Files Over 131KB on Windows, Linux, ESXi
Alleged Chinese State Hacker Extradited to US
VECT: Ransomware by design, Wiper by accident
Alleged Silk Typhoon hacker extradited to US for cyberespionage
Cisco ASA and FTD Firewall RCE
China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks
GopherWhisper: China-linked hackers target governments with custom Go toolkit
Trigona ransomware attackers use novel tool for data exfiltration
In a first, a ransomware family is confirmed to be quantum-safe
Bitwarden CLI npm package compromised to steal developer credentials
Trigona ransomware attacks use custom exfiltration tool to steal data
Trivy, KICS, and the shape of supply chain attacks so far in 2026
USN-8199-1: OpenStack Glance vulnerabilities
Kyber ransomware targets Windows and ESXi with post-quantum encryption claims
UK ransomware attacks shift to targeted methods, small businesses most affected
Botnet Alert - Mirai Botnet Targets End-of-Life D-Link Routers
China-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go Backdoors
Extensive Citizens Financial Group, Frost Bank breaches claimed by Everest ransomware
Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API
New npm supply-chain attack self-spreads to steal auth tokens
New Wiper Malware Targeted Venezuelan Energy Sector Prior to US Intervention
Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack
Former DigitalMint ransomware negotiator pleads guilty to extortion scheme
New Lotus data wiper used against Venezuelan energy, utility firms
Surge in Bomgar RMM Exploitation Demonstrates Supply Chain Risk
SystemBC botnet linked to Gentlemen ransomware attacks
Mastodon hit by DDoS attack, disrupting flagship server
Ransomware Negotiator Pleads Guilty to Aiding BlackCat Attacks in 2023
Third US Security Expert Admits Helping Ransomware Gang
The Gentlemen Ransomware Expands With Rapid Affiliate Growth
Uptick in Bomgar RMM Exploitation
Prompt injection turned Google’s Antigravity file search into RCE
Former ransomware negotiator pleads guilty to BlackCat attacks
Bluesky Disrupted by Sophisticated DDoS Attack
Serial-to-IP Converter Flaws Expose OT and Healthcare Systems to Hacking
DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy
The Gentlemen ransomware now uses SystemBC for bot-powered attacks
Serial-to-IP Converter Flaws Expose OT and Healthcare Systems to Hacking
VU#915947: SGLang is vulnerable to remote code execution when rendering chat templates from a model file
DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy
Payouts King ransomware uses QEMU VMs to bypass endpoint security
Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation
ZionSiphon malware designed to sabotage water treatment systems
Why the Stryker Attack Still Matters. And Five Steps You Can Take Today
QEMU abused to evade detection and enable ransomware delivery
Cookeville Medical Center Notifies Patients After July 2025 Ransomware Attack
Automotive Ransomware Attacks Double in a Year