Skip to content
Incidents
Initializing search
Today's Incidents
This Week
Last Week
All Incidents
Incidents
Today's Incidents
This Week
Last Week
All Incidents
All Incidents
2025
2025
October
October
week44
week44
Nihon Kohden CNS-6201
ASKI Energy ALS-Mini
Delta Electronics ASDA-Soft
Windows Server WSUS
BlueNoroff Campaigns
Everest AT&T Aviation Leaks
HSBC USA Data Breach
Vertikal Hospital Manager
November
November
week45
week45
Cisco IOS XE
VMware Aria Operations and VMware Tools
Android/BankBot-YNRK malware
Cisco ASA Secure Firewall
Multiple Critical Vulnerabilities in Moxa
Super Value Co. Ransomware Breach
Android Security Bulletin
Cyber Toufan – Maya Engineering Surveillance Breach
week46
week46
Samsung Mobile Zero-Day Exploited to Deploy LANDFALL Spyware
Cisco Unified Contact Center Express (Unified CCX) Vulnerabilities
Multiple Vulnerabilities in Apple Products
ABB FLXeon Controllers Vulnerabilities
Delhi Airport GPS Spoofing Crisis
ClickFix Hospitality Phishing Campaign
Actively Exploited Windows Kernel Zero‑Day
Whisper Leak — LLM Side‑Channel Attack
Google vs. Lighthouse Phishing-as-a-Service Operation
week47
week47
Fortinet FortiWeb Authentication Bypass
Critical IBM AIX NIM Vulnerabilities
D‑Link DIR-816L
Microsoft Graphics Component Vulnerability – CVE-2025-60724
Google Chrome V8 Zero-Day – CVE-2025-13223
Lynx+ Gateway Critical Vulnerabilities
FortiWeb OS Command Injection (CVE-2025-58034)
week48
week48
ABB Ability Edgenius – Authentication Bypass (CVE-2025-10571)
Oracle Fusion Middleware – Missing Authentication for Critical Function (CVE-2025-61757)
China-Linked APT31 Stealth Cyberattacks on Russian IT – Using Cloud Services
Oracle EBS Zero-Day Exploitation – CVE-2025-61882
CISA Warning: Spyware Campaigns Targeting Messaging App Users
Festo Compact Vision System – Insecure Configuration Vulnerabilities
ShadowV2 IoT Botnet Opportunistic Attack During AWS Outage
week49
week49
node-forge ASN.1 Validation Bypass Vulnerability
Contagious Interview (2025 npm-registry wave)
OpenPLC ScadaBR CVE-2021-26829 Active Exploitation
Scada-LTS Project Import Path Traversal – CVE-2025-13791
Mercedes-Benz USA Breach Claim by Threat Actor 'zestix'
OnSolve CodeRED Ransomware Attack
MuddyWater MuddyViper Backdoor Campaign
Hacking of ~120,000 IP Cameras in South Korea for Sale of Intimate Content
December
December
week50
week50
GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections
WhatsApp-Based Malware Campaign by Water Saci
Johnson Controls FX80 / FX90 Vulnerability (CVE-2025-43867)
React2Shell (CVE-2025-55182)
UDPGangster Campaigns Target Multiple Countries
Android Malware Surge: FvncBot, SeedSnatcher, and Upgraded ClayRat
ArrayOS AG VPN (CVE-2025-66644)
week51
week51
GeoServer XXE Vulnerability Exploitation (CVE-2025-58360)
CVE-2018-4063 Sierra Wireless AirLink ALEOS Remote Code Execution
Pro-Russia Hacktivists Conduct Opportunistic Attacks Against Critical Infrastructure
Google Chromium Out-of-Bounds Memory Access Vulnerability
Johnson Controls iSTAR Ultra Vulnerabilities
Siemens Energy Services Security Advisory
Apple Multiple Products Use-After-Free WebKit Vulnerability
Fortinet FortiCloud SSO Login Authentication Bypass Vulnerabilities
SolarEdge SE3680H Contains Linux Kernel Vulnerabilities
Russian GRU Cyber Campaign Targeting Critical Infrastructure via Edge Network Devices
OS Command Injection in Fortinet FortiSandbox
Cisco AsyncOS Zero-Day Exploitation Campaign
ASUS Live Update Embedded Malicious Code Vulnerability
SonicWall SMA1000 Zero-Day Vulnerabilities
week52
week52
CVE-2025-14993: Tenda AC18 Router Stack Buffer Overflow'
WatchGuard Firebox Fireware OS IKEv2 Out-of-Bounds Write Vulnerability
U.S. DOJ Charges 54 in ATM Jackpotting Scheme Using Ploutus Malware
Romanian Waters Authority Hit by Ransomware Attack
Kimwolf Botnet: 1.8 Million Android Devices Hijacked
China-Linked "Ink Dragon" APT Espionage Campaign
Cyberattack on La Poste and La Banque Postale
CVE-2025-68613: Critical n8n Remote Code Execution Vulnerability
Lotusbail: Malicious npm Package Targeting WhatsApp Web API Developers
MacSync macOS Stealer: Code-Signed Malware Bypassing Gatekeeper
FBI Seizure of Fraud Domain Hosting Stolen Bank Credentials
week53
week53
Trust Wallet Chrome Extension Supply-Chain Attack
CVE-2025-68664: Critical LangChain Core Serialization Injection Vulnerability
GhostPairing: WhatsApp Account Takeover via Social Engineering
Fortinet FortiOS SSL VPN 2FA Bypass (CVE-2020-12812)
Digiever DS-2105 Pro NVR Authorization Bypass & Command Injection
Malicious npm Packages Abused as Phishing Infrastructure
Critical SmarterMail Arbitrary File Upload / Remote Code Execution Vulnerability
MongoBleed: MongoDB Memory Disclosure (CVE-2025-14847)
2026
2026
January
January
week1
week1
IBM API Connect Critical Authentication Bypass (CVE-2025-13915)
Transparent Tribe RAT Campaign Targeting Indian Government and Academia
ClickFix Attack Uses Fake Windows BSOD to Push Malware
n8n Critical Python Sandbox Bypass (CVE-2025-68668)
week2
week2
MuddyWater RustyWater RAT Campaign – Iran-linked APT Espionage
Astaroth Banking Trojan – WhatsApp Worm Campaign in Brazil
Instagram 17.5M User Data Leak – API Scraping Incident
Trend Micro Apex Central Unauthenticated RCE (CVE-2025-69258)
Kimsuky APT Malicious QR Code Spear-Phishing Campaign
APT28 Credential-Stealing Campaign Targeting Energy and Policy Organizations
Telegram Proxy One-Click IP Exposure Vulnerability
UAT-7290 China-Linked Telecom Espionage Campaign
AZ Monica Hospital Cyberattack - Belgium
CVE-2025-8110 - Gogs Remote Code Execution via Symlink Traversal
PLUGGYAPE Malware Campaign Targeting Ukrainian Defense Forces
Android Dolby Audio Zero-Click Vulnerability (CVE-2025-54957)
week3
week3
Critical Authentication Bypass in Modular DS WordPress Plugin (CVE-2026-23550)
Credential-Stealing Chrome Extensions Target Enterprise HR Platforms
Iran State Television Broadcast Hijacking (Badr Satellite Signal Intrusion)
TP-Link VIGI Camera Authentication Bypass (CVE-2026-0629)
CrashFix: Malicious Chrome Extension Browser Crash Social Engineering Campaign
GootLoader Malware - Malformed ZIP Evasion Campaign
UAT-8837: China-Linked APT Targeting North American Critical Infrastructure
Oracle HTTP Server / WebLogic Server Proxy Plug-in Vulnerability (CVE-2026-21962)
Google Gemini Prompt Injection Flaw via Calendar Invites
Microsoft Power Apps Remote Code Execution Vulnerability
Cisco Unified Communications Products Remote Code Execution Vulnerability
LinkedIn Phishing Malware Campaign via DLL Sideloading
Command Injection Vulnerability in Zoom Node Multimedia Routers (MMRs)
Multiple GitLab Vulnerabilities Enable 2FA Bypass and DoS Attacks
week4
week4
CVE-2026-24061 – GNU InetUtils telnetd Remote Authentication Bypass
DynoWiper Cyberattack on Polish Energy Systems (Sandworm Attribution)
48 Million Gmail Usernames And Passwords Leaked Online
Xiaomi Redmi Buds Bluetooth RFCOMM Vulnerabilities
CodeBreach – AWS CodeBuild Misconfiguration Vulnerability
Multi-Stage Phishing Campaign Deploying Amnesia RAT and Hakuna Matata Ransomware
Google Protocol Buffers JSON Parsing Denial-of-Service Vulnerability
Microsoft Office Security Feature Bypass Vulnerability
WinRAR Path Traversal Vulnerability
Critical Grist-Core Vulnerability Allows RCE Attacks via Spreadsheet Formulas
vm2 Sandbox Escape Vulnerability
February
February
week5
week5
RedKitten — Iran-Linked Cyber-Espionage Campaign
eScan Antivirus Update Server Compromise
Clawdbot (OpenClaw) 1-Click Remote Code Execution Vulnerability
Russian APT28 Exploit Zero-Day Hours After Microsoft Discloses Office Vulnerability
GhostChat – Android Spyware Disguised as Chat/Dating Application
Over 3.28 Million Fortinet Devices Exposed via FortiCloud SSO Authentication Bypass
Shutdown of Flock Safety ALPR System in Mountain View
CVE-2026-25049 – Critical Remote Code Execution in n8n Workflow Expressions
CVE-2026-25202 – MagicINFO 9 Server Hardcoded Database Credentials Vulnerability
Cisco Meeting Management Arbitrary File Upload Vulnerability
week6
week6
SmarterMail Unauthenticated Remote Code Execution (RCE)
DKnife – Linux-based Adversary-in-the-Middle (AiTM) Traffic-Hijacking Toolkit
BridgePay Network Solutions Ransomware Attack
Signal Account Hijacking Campaign
Fortinet FortiClientEMS Critical SQL Injection (CVE-2026-21643)
UNC3886 Cyber Espionage Campaign Against Singapore Telcos
Windows 11 Notepad Markdown Remote Code Execution Vulnerability
Senegal National ID Office Ransomware Attack
Apple Zero-Day Exploitation (CVE-2026-20700)
ZeroDayRAT Spyware Grants Attackers Total Access to Mobile Devices
week7
week7
Russian Government Attempts to Block WhatsApp and Restrict Telegram
CVE-2026-1731 – BeyondTrust Pre-Authentication RCE Vulnerability
Google Links China, Iran, Russia, North Korea to Coordinated Defense Sector Cyber Operations
Suspected Russian Hackers Deploy CANFAIL Malware Against Ukraine
UAT-9921 Deploys VoidLink Malware to Target Technology and Financial Sectors
CVE-2026-1340 — Ivanti Endpoint Manager Mobile (EPMM) Pre-Auth Remote Code Execution
Dell RecoverPoint for Virtual Machines Zero-Day Exploitation (CVE-2026-22769)
Keenadu — An Android Firmware-Embedded Backdoor Malware
week8
week8
Amazon: AI-Assisted Hacker Breached 600 Fortinet Firewalls in 5 Weeks
Fake IPTV Apps Spread Massiv Android Malware Targeting Mobile Banking Users
CVE-2026-1670 – Authentication Bypass in Honeywell CCTV Cameras
Predator Spyware: iOS Mic/Camera Indicator Suppression
Critical VoIP Vulnerability in Grandstream GXP1600 Series (CVE-2026-2329)
FICOBA National Bank Account Database Breach (France)
Mississippi Hospital System Closes All Clinics After Ransomware Attack
Spitting Cash: ATM Jackpotting Attacks Surged in 2025
Phishing Campaign Targets Freight and Logistics Orgs in the US, Europe
SolarWinds Serv-U Critical Root Access Vulnerabilities
Active Exploitation of FileZen OS Command Injection Vulnerability (CVE-2026-25108)
Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access
Zyxel Warns of Critical RCE Flaw Affecting Over a Dozen Routers
March
March
week9
week9
UAT-10027 Targets U.S. Education and Healthcare with Dohdoor Backdoor
Juniper Networks PTX Series Router Critical Vulnerability (CVE-2026-21902)
Trend Micro Apex One Critical RCE Vulnerabilities
BadeSaba Calendar App Hack (Iranian Prayer-App Compromise)
Dubai SIM-Swap Scam Exploiting Regional Tensions
Android Security Update — March 2026
CISA Flags VMware Aria Operations RCE Flaw as Exploited in Attacks
CVE-2026-3485 — OS Command Injection in SSDP Service of D-Link DIR-868L 110b03
Iran-linked Cyber Espionage Campaign Targeting Internet-Connected Surveillance Cameras
Hacktivist DDoS Campaign Targeting 110 Organizations Across 16 Countries After Middle East Conflict
Mail2Shell zero-click attack lets hackers hijack FreeScout mail servers
Coruna iOS Exploit Kit (aka CryptoWaters)
CVE-2026-2628 – Microsoft 365 / Azure AD SSO Authentication Bypass in WordPress Plugin
week10
week10
Hikvision & Rockwell Automation Critical Vulnerabilities Added to KEV Catalog
Critical Vulnerabilities in Cisco Secure Firewall Management Center (FMC)
US Cyber Strategy Targets Adversaries, Critical Infrastructure, and Emerging Technologies
China-Linked Hackers Use TernDoor, PeerTime, BruteEntry in South American Telecom Attacks
Iranian APT Hacked US Airport, Bank, Software Company
BoryptGrab Infostealer GitHub Distribution Campaign
CVE-2025-70231 – Path Traversal Vulnerability in D-Link DIR-513 Router
SQL Injection Vulnerability in GPS Tracking System Login – CVE-2018-25192
CVE-2026-3804 – Tenda i3 Router Stack-Based Buffer Overflow
Russia-linked Hackers Target Signal and WhatsApp Accounts of Officials Globally
BeatBanker Android Malware Campaign (Fake Starlink App)
KadNap Botnet targeting ASUS Routers
CVE-2026-24448 – Hard-coded Credentials in Industrial Network Devices
Middle East Cloud Infrastructure Attack / AWS Data Center Drone Strikes
Iran "Infrastructure Warfare" Threat Against U.S. Tech Companies
FortiGate Firewall Exploitation Campaign
week11
week11
Cyberattack Targeting the National Centre for Nuclear Research (NCBJ)
Stryker Global Network Cyberattack (Handala Attack)
SocksEscort Proxy Service Disruption linked to the AVrecon Botnet
Microsoft Windows 11 RRAS Remote Code Execution Vulnerability - Out-of-Band Hotpatch
Critical HPE Aruba Networking AOS-CX Vulnerability (CVE-2026-23813)
Honeywell IQ4x BMS Authentication Bypass Vulnerability
Payload Ransomware Claims the Hack of Royal Bahrain Hospital
Cisco Confirms Active Exploitation of Two Catalyst SD-WAN Manager Vulnerabilities
CVE-2026-32746 - Critical Telnetd Buffer Overflow Vulnerability
EU Sanctions on Chinese and Iranian Cyber Actors Targeting Critical Infrastructure
week12
week12
FCC Ban on Foreign-Made Consumer Routers (Covered List Expansion)
Pro-Iranian (Nasir Security) Targeting Gulf Energy Sector
Iran National CCTV Surveillance Network Exploitation
FBI Says Iranian Hackers Are Using Telegram to Steal Data in Malware Attacks
Indian Government Probes CCTV Espionage Operation Linked to Pakistan
Apple Urges iPhone Users to Update as Coruna and DarkSword Exploit Kits Emerge
New Perseus Android Banking Malware Monitors Notes Apps to Extract Sensitive Data
TP-Link Archer NX Firmware Takeover Vulnerabilities
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
CVE-2026-3888 - Ubuntu Desktop Snap Local Privilege Escalation
CVE-2026-21992 - Critical Remote Code Execution in Oracle Identity Manager
Ubiquiti UniFi Network Application Account Takeover Vulnerability (CVE-2026-22557)
QNAP NAS Zero-Day Vulnerabilities Demonstrated at Pwn2Own Ireland 2025
week13
week13
Handala Hack of Kash Patel (FBI Director) Personal Email
ShinyHunters Claims Breach of European Commission
Red Menshen APT - BPFdoor Telecom Espionage Campaign
NetScaler Memory Disclosure Vulnerability - CVE-2026-3055
ChatGPT Data Exfiltration Vulnerability (Prompt Injection + DNS Exfiltration)
Kaplan North America LLC Data Breach
April
April
week14
week14
Chrome Zero-Day Vulnerability - CVE-2026-5281
FBI Warning on Risks from Foreign (Chinese) Mobile Applications
Handala Hack Team Breach Claim Against PSK Wind Technologies
TrueConf Zero-Day Exploitation (Operation TrueChaos) - CVE-2026-3502
WhatsApp Fake App Spyware Campaign
Pay2Key Pseudo-Ransomware Campaign (Iran-linked)
QR Code Traffic Violation Phishing Campaign (Quishing Scam)
CVE-2026-35616 - FortiClient EMS Authentication Bypass
Axios npm Supply Chain Attack (Linked to UNC1069 / North Korea)
GPUBreach / GPU Rowhammer Attack
China-Linked Storm-1175 Zero-Day Exploitation Campaign
Iran-Linked Hackers Disrupt U.S. Critical Infrastructure
APT28 Exploiting Network Devices for Cyber Espionage
Russia Nationwide Banking & Payment Outage (April 2026)
APT28 PRISMEX Campaign
Masjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT Devices
Hackers Use Pixel-Large SVG Trick to Hide Credit Card Stealer
week15
week15
France Government Migration from Windows to Linux (Digital Sovereignty Initiative)
Exposed ICS/SCADA Devices Targeted by Iranian APTs (Censys Report)
EngageLab SDK Flaw Opens Door to Private Data on 50M Android Devices
Adobe Acrobat Reader Zero-Day (CVE-2026-34621)
Iran-Linked Group Handala Claims to Have Breached Three Major UAE Organizations
Hackers Access Booking.com User Data, Company Secures Systems
North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware
JanelaRAT Malware Targets Latin American Banks with 14,739 Attacks in Brazil in 2025
Citizen Lab: Webloc Tracked 500M Devices for Global Law Enforcement
ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers
Malicious Chrome Extensions Campaign (108 Extensions Data Theft Operation)
Microsoft Patch Tuesday April 2026 — 165 Vulnerabilities, SharePoint Zero-Day
Mirax Android Malware Campaign
Microsoft Excel Legacy Vulnerability Exploitation (CVE-2009-0238)
WordPress Plugin Supply Chain Attack (EssentialPlugin Compromise)
week16
week16
Microsoft Defender Zero-Day Vulnerabilities (BlueHammer, RedSun, UnDefend)
Nexcorium (Mirai Variant IoT Botnet Campaign)
Hackers Target Israeli Desalination Plants With ZionSiphon Sabotage Malware
Vercel Confirms Breach as Hackers Claim to Be Selling Stolen Data
France ANTS ID System Cyberattack / Data Breach
Iran Claims US Used Backdoors to Knock Out Networking Equipment During War
NGate Android Malware (NFC Relay Attack Campaign)
New Lotus Data Wiper Used Against Venezuelan Energy and Utility Firms
Mirai Botnet Targeting CVE-2025-29635 in D-Link DIR-823X Routers
week17
week17
FIRESTARTER Backdoor on Cisco ASA / Firepower Devices
China-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go Backdoors
Easily Exploitable Pack2TheRoot Linux Vulnerability Leads to Root Access
Firefox Vulnerability Allows Tor User Fingerprinting
Critical GitHub Vulnerability Exposed Millions of Repositories (CVE-2026-3854)
Electric Motorcycles and Scooters Bluetooth & Keyless Entry Vulnerabilities
Internet-Exposed VNC/RDP Servers in ICS/OT Infrastructure
May
May
week18
week18
30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign
China-Linked Cyber Espionage Campaign Targeting Asian Governments
Actively Exploited Linux Privilege Escalation Vulnerability
cPanel & WHM Authentication Bypass Vulnerability
Student Hacked Taiwan High-Speed Rail to Trigger Emergency Brakes
Microsoft Edge Stores Passwords in Process Memory, Posing Enterprise Risk
week19
week19
Zara Data Breach: 197,000 Customers Exposed in Third-Party Security Incident
The xlabs_v1 Mirai-Based Botnet Built for DDoS Attacks
MuddyWater Cyber Espionage Disguised as a Chaos Ransomware Attack
Cyberattacks on Poland's Water Plants: A Blueprint for Hybrid Warfare
FCC Softens Foreign Router Ban and Allows Security Updates Until 2029
Instagram Removal of End-to-End Encryption for Direct Messages
Iranian Hackers Targeted Major South Korean Electronics Maker
Azerbaijani Energy Firm Hit by Repeated Cyber Attacks
week20
week20
Cisco Catalyst SD-WAN Zero-Day Vulnerability - CVE-2026-20182
Microsoft Exchange Server Cross-Site Scripting (XSS) Vulnerability - CVE-2026-42897
TP-Link Archer AX53 Stack-Based Buffer Overflow - CVE-2026-30814
GitHub Internal Repository Breach
PinTheft Linux Privilege Escalation Vulnerability - CVE-2026-31635
week21
week21
Trump Mobile Customer Data Exposure
One Telecom Provider Hosted Most of the Middle East's Active C2 Infrastructure
CVE-2026-46333 - ssh-keysign-pwn Linux Kernel Privilege Escalation
June
June
week22
week22
FIFA World Cup 2026 Fraud and Phishing Campaign
Nimbus Manticore Expanded Attacks with AI-Assisted Malware and Fake Zoom Installers
Zero-Click WhatsApp Account Takeover Targeting iOS 16 Devices
Dutch Authorities Dismantle 17-Million-Device Botnet
Meta AI Support Chatbot Instagram Account Takeover
Google Android June 2026 Security Update – Actively Exploited Android Zero-Day
week23
week23
Exposed U.S. Gas Station Tank Gauge Systems
Acer Wave 7 Router Zero-Day Vulnerabilities (CVE-2026-49200 & CVE-2026-49201)
Cisco Catalyst SD-WAN Manager Vulnerability - CVE-2026-20245
Cisco Unified CM Critical SSRF Vulnerability - CVE-2026-20230
Google Gemini Android Notification Prompt Injection Vulnerability
Asin Android Spyware Campaign
FlutterShell macOS Backdoor Campaign
C0XMO Botnet Spreads via DD-WRT Router Flaw, Kills Rival Malware
NFCShare Android Malware Campaign
Linux Kernel nf_tables Privilege Escalation - CVE-2026-23111
Veeam Backup & Replication RCE Vulnerability - CVE-2026-44963
WinRAR CVE-2025-8088 Exploitation Campaign
RoguePlanet – Microsoft Defender Zero-Day Local Privilege Escalation
China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance
Check Point VPN Authentication Bypass - CVE-2026-50751
week24
week24
Exposure of 21,786 Internet-Connected Home Cameras Without Password Protection
U.S. Government Restricts Foreign Access to Anthropic Fable 5 and Mythos 5 AI Models
Handala Cyberattack on California Water Service (Cal Water)
China-linked Linux Authentication Backdoor Campaign & Long-term Authentication Flow Hijacking Operation
Critical Splunk Enterprise Vulnerability
Cisco SD-WAN Make-Me-Root Vulnerability Chain - CVE-2026-20127
Rokarolla Android Banking Malware Campaign
ClickFix Malware Campaign - BabaDeda, Lorem Ipsum, and Potemkin Loaders
FortiSandbox Critical Vulnerabilities Actively Exploited
week25
week25
Cisco ISE Critical Command Execution Vulnerability - CVE-2026-20181
AryStinger Botnet Infects Thousands of D-Link Routers Worldwide
WhatsApp Business Document Phishing & RMM Malware Campaign
Usbliter8 Apple BootROM Exploit
Samsung KNOX Kernel UAF Exposes Millions of Galaxy Devices
FortiBleed Attackers Turn Firewalls Into Credential Stealers as Heists Persist
Cisco Catalyst SD-WAN Zero-Day Exploitation
Cisco Unified CM SSRF Vulnerability – CVE-2026-20230
Amadey and StealC Malware Infrastructure Disruption
Lantronix EDS5000 Critical Vulnerability Exploitation (CVE-2025-67038)
week26
week26
Russian Intelligence Targeting Signal Backup Recover
Hospitality Sector Phishing Campaign Using Fake Guest Complaint Emails
pedit COW Linux Privilege Escalation Vulnerability
DirtyClone Linux Kernel Privilege Escalation Vulnerability
Iran, Russia, China Target Water Systems for Sabotage
Oracle E-Business Suite Flaw CVE-2026-46960 Actively Exploited in the Wild
Azure CLI Password Spraying Campaign
RustDuck Botnet
July
July
week27
week27
DuneSlide – Critical Cursor AI IDE Prompt Injection Vulnerabilities
Multiple Unpatched Vulnerabilities in FatFs Filesystem Library
Bad Epoll (CVE-2026-46242)
NetNut Residential Proxy Network Disruption
DHS HSIN Information-Sharing Platform Breach
Iran-linked Cavern Manticore Uses Cavern (Cav3rn) Modular C2 Framework
Januscape - Linux KVM/x86 Shadow MMU Use-After-Free (CVE-2026-53359)
RedWing Android Banking Malware-as-a-Service (MaaS)
Hidden Backdoor in Tenda Router Firmware (CVE-2026-11405)
week28
week28
Critical U-Boot Secure Boot Vulnerabilities (FIT Image Verification Flaws)
Global Campaign Targeting Vulnerable CMS Platforms with Webshell Deployment
Fake Microsoft Entra Passkey Enrollment Vishing Campaign
SonicWall SMA Urgent Zero-Day Patch Warning
SAP NetWeaver ABAP CVE-2026-44747 (CVSS 9.9)
Cyberattack on Nichirei Logistics Disrupting KFC Japan and Food Supply Chain
Zoom Critical Account Takeover Vulnerability (CVE-2026-53412)
US and Allies Warn of Russian APT Groups Targeting Routers and Network Devices
Unpatched Cursor IDE Local Git Executable Vulnerability
AsyncAPI npm Supply Chain Attack
week29
week29
Iranian Mobile Tracking Campaign via SS7 Roaming and AdTech Data
Unpatched Shark Robot Vacuum AWS IoT Authorization Vulnerability
PhantomEnigma Malware Campaign Leveraging Hijacked Brazilian Government Websites
7-Zip Remote Code Execution Vulnerability (CVE-2026-14266)
WP2Shell WordPress Vulnerabilities Exploited in the Wild
SonicWall SMA 1000 SSRF + Post-Auth Code-Injection Zero-Days
Russian Intelligence Campaign Targeting Internet-Connected IP Cameras for Military Espionage
Russian-Speaking Threat Actor Uses Google Gemini CLI to Operate Botnet Infrastructure
week30
week30
Iran-Linked Threat Actors Target U.S. Water and Energy Control Systems
KARR/SWDS Bluetooth Vehicle Security System Vulnerability
Russian Espionage Group Exploited Zimbra Zero-Day (CVE-2025-66376) to Steal Emails
Hotel Wi-Fi DNS Hijacking Campaign Targeting Microsoft 365 Accounts
OpenAI-Hugging Face Model Evaluation Security Incident
Steam Forum ClickFix XMRig Cryptominer Campaign
Active Exploitation of Fastjson 1.x Zero-Day Remote Code Execution (CVE-2026-16723)
Arista VeloCloud Orchestrator Zero-Day (CVE-2026-16812)
Dysphoria IoT DDoS Botnet
MedusaHVNC - Hidden Desktop Remote Access Trojan (HVNC)
Coordinated Cyberattack on Minnesota Municipal Water and Wastewater Utilities
VMware vCenter Auth Bypass and RCE, and ESX VMXNET3 VM Escape
August
August
week31
week31
Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations
Chinese Hacker Uses DeepSeek AI Agent via Hermes Framework for Autonomous Cyberattacks
84 Vulnerabilities Discovered in Open-Source 4G LTE and 5G Core Network Implementations
Fuyao Android TV Box Malware Campaign
Suspected Chinese-Speaking Hackers Target Central Asian Governments with OctLurk and SilkLurk
Brinks Home The most famous brand in physical security got pwned by ShinyHunters
CISA Urgent PLC Exposure Alert After Coordinated OT Attacks on Minnesota Water Systems
INC Ransomware Emerges as Dominant Ransomware Threat
Police National Legal Database (PNLD) Data Breach
TP-Link Omada ZTP Vulnerabilities Enabling Network Compromise
Multi-state U.S. Water-System PLC Cyberattacks (Minnesota, Michigan, Georgia, and Other States)
Meta AI Model Compromises External Company During Security Testing
khunt Oracle Database Post-Exploitation Toolkit Attack
Endlessdoors Backdoor in ZBTLink Routers
week32
week32
Internet-Exposed Rockwell Automation PLCs
Cisco Catalyst SD-WAN & IOS XE Security Vulnerabilities – 12 CVEs
Linux SCTP Flaw Could Let Local Users Gain Root
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
UNC6671 Vishing & Data-Extortion Campaign
Cisco Warns of Seven ClamAV Flaws, Two With Public PoCs
ZOOMSDAY – Zoom Zero-Click Remote Code Execution Vulnerability
Gunra Ransomware Exploits Fortinet to Breach Networks
Poland Energy Sector IT-to-OT Intrusion via Private APN
week33
week33
WindRelay Android Malware
Rogue Wi-Fi Network on Delta Flight 591
Evooo1Bot - Multi-Functional Mirai-Based Linux Botnet
New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure
Apple Mercenary Spyware Threat Notifications – 2026
Unisoc VoLTE Video Call Exploit Chain – Modem-to-Android Kernel Privilege Escalation
AI-generated Python tooling targeting Siemens S7 PLCs in critical infrastructure
Operation CameraSwarm Dahua Device Compromise Campaign
week34
week34
Encrypted Prompt Injection / AI Safety Guardrail Bypass
Six Maximum-Severity Flaws Found in Cisco Products
Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
TikTok / ByteDance Children's Privacy & COPPA Case — $400M Settlement
UK Small-Scale Power Generator Shutdown Linked to Suspected Iran-Affiliated Cyber Activity
DoFun Android Car Head Unit Supply-Chain Malware Campaign
DDoS Attack on Norway’s Shared Digital Government Infrastructure
week35
week35
Manchester Airports Group (MAG) Customer Data Breach
HOOKEDGE Backdoor Campaign Targeting European Diplomatic and Defense Organizations
FBI Disrupts China-Linked QTFY Infrastructure (QScan and QTRouter)
Rhysida Ransomware Group Targets Berlin Government Ahead of Vote
Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator
SonicWall SMA 1000 zero-day SSRF and command-injection vulnerabilities - CVE-2026-83548 and CVE-2026-83549
Exploitation against Philippine nuclear research and naval-support organizations
September
September
week36
week36
Chinese Hackers Use AI Agents in Multi-Country Cyber Campaign
Dark Web Service Nexus Sells 153M+ Driver's Licenses
CVE-2026-20212 - Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability
Fire Ant - China-linked Cyber Espionage Campaign Targeting Trusted Infrastructure
MikroTrick: Actively Exploited MikroTik RouterOS SSH Attack Chain
Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control
Brazilian Government Traffic Hijacking Campaign
US Government Accuses Chinese AI Firms of Distilling Frontier Models
week37
week37
GitLab CVE-2026-85706 - Unauthenticated Path Traversal
WeWorm - WeChat Zero-Click Worm
LG Smart TV Data Collection
DoppelCart - Large-Scale Fake Online Shop Fraud Network
No Incident selected, Please select one to view its details