Attackers infiltrate target environments in a variety of ways. One common method is a direct attack. Another, called a reverse shell, uses a remote device to deploy an attack. Let's look at what a ...

Threat actors are exploiting a post-authentication remote command injection vulnerability in Four-Faith routers tracked as CVE-2024-12856 to open reverse shells back to the attackers. The malicious ...

Two malicious packages were discovered on npm (Node package manager) that covertly patch legitimate, locally installed packages to inject a persistent reverse shell backdoor. 4 in 5 ClickFix attacks ...

Attackers exploit Citrix NetScaler CVE-2026-88771 to deploy web shells and attempt theft of configuration data.

It has become increasingly obvious that the Securities and Exchange Commission (SEC) has reverse mergers and shells in its sights. Is this a temporary phenomenon? Will it pass? This column talks about ...

In recent years, a variety of alternative paths to public ownership and trading liquidity have emerged. The reverse merger is among one of the oldest alternatives to a conventional IPO for a private ...

With the current strong economy, as an active startup mentor, I’m seeing a new surge of entrepreneurs and startups, with the commensurate scramble for funding. There just aren’t enough angel investors ...

Villain is an open-source Stage 0/1 command-and-control (C2) framework designed to manage multiple reverse TCP and HoaxShell-based shells. Beyond simply handling connections, Villain enhances these ...

Attackers exploited CVE-2026-73570 in Zimbra to deploy web shells and access mailbox data on servers with SNMP notifications enabled.

EchoStrike is an open-source tool designed to generate undetectable reverse shells and execute process injection on Windows systems. “EchoStrike allows you to generate binaries that, when executed, ...