The Shadowserver Foundation

Trusted

https://www.shadowserver.org/

Last activity: 19.06.2026

Active

Categories: ComputerInternetITNonprofitSecurity

The Shadowserver Foundation is a watchdog group of security professionals that gather, track, and report on malware, botnet activity, and electronic fraud. It is the mission of the Shadowserver Foundation to improve the security of the Internet by raising awareness of the presence of compromised servers, malicious attackers, and the spread of malware.

Twitter LinkedIn Email

Followers

2.89K

Website visits

17.9K /mo.

Mentions

Overview

Location

United States, California, Milpitas

Employees

11-50

Mentions in press and media 30

Date	Title	Description
Sign up to see	Sign up to see	Sign up to see
Feb 25, 2026	Zyxel предупреждает о критической уязвимости с RCE, затрагивающей более десятка маршрутизаторов	Тайваньский производитель сетевого оборудования Zyxel сообщил о проблеме в прошивке ряда своих устройств. Речь идёт о критической уязвимости CVE-2025-13942 в функции UPnP, которая позволяет удалённо выполнять команды на уязвимом маршрутизат...
Feb 5, 2026	В фокусе RVD: трендовые уязвимости января	Хабр, привет! На связи команда инженер-аналитиков R-Vision. В январе мы выделили 12 трендовых уязвимостей и включили в этот дайджест те, что представляют наибольшую опасность по уровню риска, подтверждённой эксплуатации и практическому инте...
Jan 27, 2026	Январский «В тренде VM»: уязвимости в Windows, React и MongoDB	Хабр, привет! На связи Александр Леонов, ведущий эксперт PT Expert Security Center и дежурный по самым опасным уязвимостям месяца. Мы с командой аналитиков Positive Technologies регулярно исследуем информацию об уязвимостях из баз и бюллете...
Nov 14, 2025	Europol Leads Major Strike on Global Cybercrime Infrastructure	Image: Adobe Stock Europol has revealed a sweeping international operation that dismantled critical infrastructure supporting several of the world’s most pervasive cybercriminal tools. Conducted between 10 and 13 November 2025, the latest p...
Aug 13, 2025	Identity Digital Marks Fifth Year on Inc. 5000 with High Growth	Identity Digital Inc., a leader in connecting the online world with domain names and related technologies, has earned a spot on the 2025 Inc. 5000 list of the fastest-growing private companies in America for the fifth consecutive year. This...
Jul 22, 2025	SharePoint zero-day impact ripples around the world	A sweeping cyber espionage operation targeting Microsoft server software compromised about 100 organisations as of the weekend, two of the organisations that helped uncover the campaign said on Monday. Microsoft on Saturday issued an alert ...
Jul 22, 2025	Microsoft server hack hit about 100 organizations, researchers say	Microsoft server hack hit about 100 organizations, researchers say By James Pearson and Raphael SatterJuly 21, 20259:58 PM UTCUpdated ago Text Small Text Medium Text Large Text Share X Facebook Linkedin Email Link SummaryCompanies Most hit ...
Nov 25, 2024	ТОП-5 ИБ-событий недели по версии Jet CSIRT	Сегодня в ТОП-5 — уязвимости в утилите needrestart для Ubuntu, новый скрытый загрузчик BabbleLoader, атака на брандмауэров Palo Alto Networks, вредоносное ПО Infostealer в пакетах PyPI и 0-day уязвимости в VINTEO, найденные Positive Technol...
Nov 22, 2024	Хакеры скомпрометировали две тысячи межсетевых экранов Palo Alto Networks	Хакеры смогли скомпрометировать тысячи межсетевых экранов Palo Alto Networks в ходе атак, использующих две недавно исправленные уязвимости нулевого дня. Первая использует обход аутентификации (CVE-2024-0012) в веб-интерфейсе управления PAN-...
Jun 27, 2024	MOVEit: Critical vulnerability under active exploitation	The disclosure comes just over a year after widespread attacks targeted a prior vulnerability in Progress' MOVEit file transfer tool, ultimately compromising thousands of organisations in what turned out to be one of the biggest data heists...
Jun 26, 2024	Critical MOVEit vulnerability puts huge swaths of the Internet at severe risk	Enlarge reader comments 36 A critical vulnerability recently discovered in a widely used piece of software is putting huge swaths of the Internet at risk of devastating hacks, and attackers have already begun actively trying to exploit it i...
May 30, 2024	Law enforcement operation takes aim at an often-overlooked cybercrime linchpin	Enlarge Getty Images reader comments 30 An international cast of law enforcement agencies has struck a blow at a cybercrime linchpin that’s as obscure as it is instrumental in the mass-infection of devices: so-called droppers, the sneaky so...
May 8, 2024	Трендовые уязвимости апреля: до пяти лет скрытой эксплуатации	Хабр, привет! Я Александр Леонов, ведущий эксперт лаборатории PT Expert Security Center. Мы с командой аналитиков Positive Technologies каждый месяц анализируем информацию об уязвимостях из баз и бюллетеней безопасности вендоров, социальных...
May 2, 2024	Maximum-severity GitLab flaw allowing account hijacking under active exploitation	Enlarge reader comments 33 A maximum severity vulnerability that allows hackers to hijack GitLab accounts with no user interaction required is now under active exploitation, federal government officials warned as data showed that thousands ...
Apr 8, 2024	Critical takeover vulnerabilities in 92,000 D-Link devices under active exploitation	Enlarge Getty Images reader comments 46 Hackers are actively exploiting a pair of recently discovered vulnerabilities to remotely commandeer network-attached storage devices manufactured by D-Link, researchers said Monday. Roughly 92,000 de...
Nov 20, 2023	Thousands of new honeypots deployed across Israel to catch hackers	On October 7, Hamas launched an unprecedented terrorist attack on Israel, killing more than 1,200 people, with hundreds taken hostage. The attack prompted a deadly response from the Israel Defense Forces, which has reportedly left more than...
Oct 19, 2023	The latest high-severity Citrix vulnerability under attack isn’t easy to fix	Enlarge Getty Images reader comments 35 with A critical vulnerability that hackers have exploited since August, which allows them to bypass multifactor authentication in Citrix networking hardware, has received a patch from the manufacturer...
Aug 18, 2023	About 2000 Citrix NetScalers Were Compromised in Massive Attack Campaigns	Image: CROCOTHERY/Adobe Stock Threat actors have been exploiting a NetScaler appliance vulnerability to get persistent access to the compromised systems. Find out which NetScaler systems are affected, how attackers are hitting vulnerable sy...
Mar 13, 2023	Building From the 2023 National Cybersecurity Strategy: Reshaping the Terrain of Cyberspace	Previous U.S. approaches to cyber strategy have treated technology security largely as fixed in nature—working under the assumption that the relative vulnerability of software products, hardware devices, and systems is predetermined, someth...
Feb 14, 2023	A Cyber Persistence Way to Countermeasures	If international law intends to regulate state behavior to ensure international peace and security, it must reflect the conceptions of security the states employ that threaten the same, such as threats to use force and armed conflict. Conce...
Nov 15, 2022	Why Kubernetes security challenges call for a zero-trust strategy	This article is part of a VB special issue. Read the full series here: Zero trust: The new security paradigm. Zero trust is a trending security paradigm being adopted by some of the world’s biggest and technically advanced organizations, in...
Dec 2, 2016	EU, US cops kill Avalanche global crime botnet	A joint operation between European and United States police forces has closed down the Avalanche digital crime network that is estimated to have caused hundreds of millions of dollars in losses worldwide. Avalanche was used to deliver and m...
Dec 1, 2016	Legal raids in five countries seize botnet servers, sinkhole 800,000+ domains	Enlarge / Avalanche once hosted ransomware that spoofed messages from law enforcement. Now, a team of 40 law enforcement agencies has shut it down. Symantec reader comments 57 with 35 posters participating Share this story Share on Facebook...
Nov 28, 2014	ACMA creates self-service portal for malware diagnosis	The Australian Communications and Media Authority has launched an online portal for ISPs and network operators to log-in and check which IP addresses on their network might be infected with malware. The new AISI (Australian Information Secu...
Feb 20, 2014	Adobe releases emergency Flash update amid new zero-day drive-by attacks	Leo Reynolds reader comments 81 with 53 posters participating, including story author Share this story Share on Facebook Share on Twitter Share on Reddit Adobe has released an emergency update for its widely used Flash Player to combat acti...
Feb 8, 2013	Adobe issues emergency Flash update for attacks on Windows, Mac users	reader comments 63 with 47 posters participating Share this story Share on Facebook Share on Twitter Share on Reddit Adobe Systems has released a patch for two Flash player vulnerabilities that are being actively exploited online to surrept...
Feb 20, 2009	Adobe acknowledges another JavaScript issue with Acrobat, Reader	An independent security research firm is warning of a non-ingenious JavaScript buffer overflow ploy that modern Web browsers would probably filter out, but which impacts recent versions of Adobe Reader for PDF files. The surprise about the ...
Sep 3, 2008	Botnets activity saw sudden, unexplained surge over summer	reader comments with 0 posters participating Share this story Share on Facebook Share on Twitter Share on Reddit The total number of zombiefied computers on the Internet often jumps or craters with alacrity, depending on what malware and an...
	Cybersecurity Nonprofits Form “Nonprofit Cyber” Coalition	Cybersecurity Nonprofits Form “Nonprofit Cyber” Coalition February 2022 by Marc Jacob The world’s leading implementation-focused nonprofit cybersecurity organizations launched Nonprofit Cyber, a first-of-its-kind coalition of global nonprof...

Reviews 0

FAQ about The Shadowserver Foundation

What has the press written about The Shadowserver Foundation?

Parsers VC has collected 30 articles mentioning The Shadowserver Foundation, among them “Zyxel предупреждает о критической уязвимости с RCE, затрагивающей более десятка маршрутизаторов” (Feb 25, 2026) and “В фокусе RVD: трендовые уязвимости января” (Feb 5, 2026).

Is The Shadowserver Foundation still active?

Yes, The Shadowserver Foundation is active; its latest activity on Parsers VC dates from Jun 19, 2026.