#shell


Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

Oct 1, 2026 // 11:41

Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway to drop web shells and attempt […]

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Sep 18, 2026 // 11:11

Cybersecurity researchers have flagged a new Android malware called RatHat that’s assessed to be operated by China-based threat actors and features an artificial intelligence (AI)-powered […]

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

Sep 9, 2026 // 10:51

Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on disk, […]

Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data

Aug 19, 2026 // 08:52

A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in PTC Windchill and FlexPLM servers is specifically designed for […]

Clop created custom web shell for Windchill data theft attacks

Aug 18, 2026 // 23:37

A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to […]

Clop created custom web shell for Windchill data theft attacks

Aug 18, 2026 // 23:37

A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to […]

Shell investigates ‘potential incident’ after Clop data theft claims

Aug 14, 2026 // 14:56

Oil giant Shell has confirmed it is investigating a potential security incident after the Clop ransomware gang claimed it stole 89GB of data. Shell is […]

Shell investigates ‘potential incident’ after Clop data theft claims

Aug 14, 2026 // 14:56

Oil giant Shell has confirmed it is investigating a potential security incident after the Clop ransomware gang claimed it stole 89GB of data. Shell is […]

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

Jul 29, 2026 // 10:50

Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content […]

RedHook Android malware now uses Wireless ADB for shell access

Jul 12, 2026 // 17:36

A new version of the RedHook Android malware abuses the Android Wireless Debugging (Wireless ADB) mechanism in a novel way to gain shell-level privileges without […]

1 2 Next