Find a story
Search Spins
Search titles, summaries, and missing voices across published articles — press releases, announcements, and media coverage.
0 results for “web shell”
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Attackers exploited a critical unauthenticated command injection vulnerability (CVE-2026-73570, CVSS 8.9) in Zimbra Collaboration Suite to deploy web shells and steal authentication secrets — a real-world compromise confirmed by Microsoft Security Research.
Sep 30, 2026
Hackers exploit Citrix NetScaler zero-day to deploy web shells
Attackers exploited an unpatched Citrix NetScaler vulnerability (CVE-2026-88772) to deploy web shells and tunneling malware, enabling persistent access, credential theft, and lateral movement within enterprise networks.
Sep 30, 2026
Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells
A critical remote code execution vulnerability in the WooCommerce Wholesale Lead Capture plugin is actively being exploited by threat actors to deploy PHP web shells on vulnerable WordPress sites.
Sep 16, 2026
F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans
Sophos identified malware targeting F5 BIG-IP APM appliances that injects a PHP web shell into memory during Apache script execution, evading traditional disk-based detection.
Sep 9, 2026