Topics

Actors, campaigns, malware, tools, incidents, reports, trends and policy items tracked across the pipeline. The badge marks entities covered on more than one day · these are the "stories that unfolded".

• Gunra
  actoractor:gunralast covered 2026-08-11
• CEVA Logistics European fulfilment-systems breach (August 2026)
  incidentincident:ceva-logistics-fulfilment-breach-2026-08last covered 2026-08-11
• Akira
  actoractor:akiralast covered 2026-08-10×16 appearancessingle-sourcesingle-source-victim
  2026-08-102026-08-052026-07-192026-07-122026-07-09
• Qilin
  actoractor:qilinlast covered 2026-08-10×17 appearancessingle-sourcesingle-source-victim
  2026-08-102026-08-022026-07-292026-07-192026-07-12
• claude-code-action bot-actor bypass
  trendtrend:claude-code-action-github-issue-supply-chainlast covered 2026-08-10
  2026-08-10
• Scattered Spider
  actoractor:scattered-spiderlast covered 2026-08-10×8 appearancessingle-source
  2026-08-102026-07-192026-07-172026-07-122026-07-10
• Hermes AI agent
  tooltool:hermes-ai-agentlast covered 2026-08-10×5 appearancessingle-source
  2026-08-102026-08-022026-07-312026-07-262026-07-25
• Minnesota coordinated water-utility OT cyberattack (July 2026)
  incidentincident:minnesota-water-utilities-coordinated-cyberattack-2026-07last covered 2026-08-10×6 appearances
  2026-08-102026-08-092026-08-062026-08-022026-08-01
• knaithe / KnYuan
  actoractor:knaithe-knyuanlast covered 2026-08-10×3 appearancessingle-source
  2026-08-102026-08-022026-07-31
• OctLurk
  malwaremalware:octlurklast covered 2026-08-10×3 appearancessingle-source
  2026-08-102026-08-022026-07-31
• TELESHIM
  malwaremalware:teleshimlast covered 2026-08-10×2 appearancessingle-source
  2026-08-102026-07-26
• MIXEDKEY
  tooltool:mixedkeylast covered 2026-08-10×2 appearancessingle-source
  2026-08-102026-07-26
• BINDCLOAK
  malwaremalware:bindcloaklast covered 2026-08-10×2 appearancessingle-source
  2026-08-102026-07-26
• Interlock
  actoractor:interlocklast covered 2026-08-10×2 appearancessingle-source
  2026-08-102026-06-25
• NodeSnake
  malwaremalware:nodesnakelast covered 2026-08-10single-source
  2026-08-10
• PAM-impersonation Monero-mining campaign
  campaigncampaign:groupib-xmrig-pam-forensic-smokescreenlast covered 2026-08-10single-source
  2026-08-10
• Intrinsec AI Agents X Digital Forensics series
  reportreport:intrinsec-ai-agents-digital-forensics-serieslast covered 2026-08-10single-source
  2026-08-10
• UNC5537
  actoractor:unc5537last covered 2026-08-10
  2026-08-10
• Cameron Wagenius
  actoractor:cameron-wageniuslast covered 2026-08-10
  2026-08-10
• Zabka supplier-account ticketing-system intrusion
  incidentincident:zabka-supplier-account-jira-gitlab-secrets-2026-07last covered 2026-08-10
  2026-08-10
• NatJack
  trendtrend:natjack-nat-trust-assumption-attack-classlast covered 2026-08-10
  2026-08-10
• Coding-agent CI harness trust-boundary failures
  trendtrend:coding-agent-ci-harness-trust-boundary-2026-08last covered 2026-08-10
  2026-08-10
• Retelit / Qilin extortion attack
  incidentincident:retelit-qilin-2026last covered 2026-08-10
  2026-08-10
• INC Ransom
  actoractor:inc-ransomlast covered 2026-08-09×9 appearancessingle-source
  2026-08-092026-08-042026-07-262026-07-252026-07-05
• UNC6671
  actoractor:unc6671last covered 2026-08-09×8 appearancessingle-source
  2026-08-092026-08-072026-07-112026-07-102026-05-25
• Flooding Dropper
  campaigncampaign:flooding-dropper-npm-2026-08last covered 2026-08-09×2 appearancessingle-source
  2026-08-092026-08-07
• Meta AI cybersecurity-evaluation containment breach (August 2026)
  incidentincident:meta-ai-eval-containment-breach-2026-08last covered 2026-08-09×2 appearances
  2026-08-092026-08-07
• EU Cyber Resilience Act
  policypolicy:eu-cyber-resilience-actlast covered 2026-08-09×13 appearancessingle-sourcesingle-source-national-cert
  2026-08-092026-08-022026-07-262026-07-192026-07-12
• Helix
  actoractor:helix-extortionlast covered 2026-08-09×4 appearances
  2026-08-092026-08-072026-07-122026-07-10
• Poland energy-sector destructive attack (29 December 2025)
  incidentincident:poland-energy-grid-attack-2025-12-29last covered 2026-08-09×3 appearancessingle-source-national-cert
  2026-08-092026-07-192026-07-13
• ByteToBreach
  actoractor:bytetobreachlast covered 2026-08-09×5 appearancescontradicted
  2026-08-092026-08-052026-07-262026-07-212026-07-19
• Hugging Face autonomous AI agent breach
  incidentincident:hugging-face-autonomous-ai-agent-breach-2026-07last covered 2026-08-09×8 appearancessingle-source
  2026-08-092026-08-052026-08-022026-07-312026-07-30
• Cl0p
  actoractor:cloplast covered 2026-08-09×8 appearances
  2026-08-092026-08-022026-07-272026-07-232026-07-14
• Cl0p PTC Windchill / FlexPLM extortion campaign (2026)
  campaigncampaign:clop-windchill-flexplm-extortion-2026last covered 2026-08-09×3 appearances
  2026-08-092026-08-022026-07-27
• Anthropic cybersecurity-evaluation environment escape (July 2026)
  incidentincident:anthropic-cybersecurity-eval-escape-2026-07last covered 2026-08-09×4 appearances
  2026-08-092026-08-052026-08-022026-07-31
• Liechtenstein VwbP beneficial-ownership register breach (July 2026)
  incidentincident:liechtenstein-vwbp-register-breach-2026-07last covered 2026-08-09×3 appearances
  2026-08-092026-08-052026-08-04
• LLM-fabricated CVE advisory wave (programmervuln/cveadvisory-)
  trendtrend:llm-fabricated-cve-advisory-wave-2026-07last covered 2026-08-09×2 appearances
  2026-08-092026-08-04
• BIT/FOITT SharePoint Server breach (Switzerland, 2026-07)
  incidentincident:foitt-bit-sharepoint-breach-2026-07last covered 2026-08-09×3 appearancessingle-source-victim
  2026-08-092026-08-062026-08-05
• Hungarian State Treasury (MVH) breach
  incidentincident:hungary-treasury-mvh-bytetobreach-2026-08last covered 2026-08-09×2 appearances
  2026-08-092026-08-05
• UK AISI cyber-range unsanctioned agent actions
  incidentincident:aisi-cyber-range-unsanctioned-agent-actions-2026-07last covered 2026-08-09×2 appearances
  2026-08-092026-08-05
• Canton Graubünden SharePoint Server breach (Switzerland, 2026-08)
  incidentincident:graubuenden-canton-sharepoint-breach-2026-08last covered 2026-08-09×2 appearancessingle-source-victim
  2026-08-092026-08-06
• Shai-Hulud CHAINDROP wave
  campaigncampaign:shai-hulud-chaindrop-2026-08last covered 2026-08-09×3 appearancessingle-source
  2026-08-092026-08-082026-08-06
• ENDLESSDOORS
  tooltool:endlessdoorslast covered 2026-08-09×2 appearancessingle-source
  2026-08-092026-08-06
• Wiz Cloud Threat Highlights: H1 2026
  reportreport:wiz-cloud-threat-highlights-h1-2026last covered 2026-08-09×2 appearancessingle-source
  2026-08-092026-08-08
• Digitaal Vlaanderen compromise disclosed in the Stykas North Korea victim-set research
  incidentincident:nk-contagious-interview-flemish-government-2026-08last covered 2026-08-09×2 appearances
  2026-08-092026-08-08
• Metabase unauthenticated SQL-injection zero-day exploitation (August 2026)
  incidentincident:metabase-sqli-zeroday-2026-08last covered 2026-08-09
  2026-08-09
• EU AI Act Digital Omnibus (Regulation (EU) 2026/1744)
  policypolicy:eu-ai-act-digital-omnibus-2026last covered 2026-08-09
  2026-08-09
• CI Fortify — Advice for isolating vital systems
  policypolicy:cisa-ci-fortify-ot-isolation-guidance-2026last covered 2026-08-09
  2026-08-09
• NCSC UK forensic observability for network devices
  policypolicy:ncsc-uk-forensic-observability-network-devices-2026last covered 2026-08-09
  2026-08-09
• 2026 Minimum Elements for a Software Bill of Materials
  policypolicy:cisa-sbom-minimum-elements-2026last covered 2026-08-09
  2026-08-09
• Netherlands Cyberbeveiligingswet (NIS2 transposition)
  policypolicy:netherlands-nis2-cyberbeveiligingswet-2026last covered 2026-08-09×5 appearances
  2026-08-092026-07-262026-07-122026-07-052026-06-29
• Germany NIS2 registration deadline and enforcement gap
  policypolicy:germany-nis2-registration-forbearance-2026last covered 2026-08-09
  2026-08-09
• Swiss ISV Article 51 federal-administration ISMS transition deadline
  policypolicy:switzerland-isv-federal-isms-deadline-2026last covered 2026-08-09
  2026-08-09
• Passkey / WebAuthn attack-surface disclosure convergence (2026-08)
  trendtrend:passkey-webauthn-attack-surface-2026-08last covered 2026-08-09×2 appearances
  2026-08-092026-08-04
• TeamPCP
  actoractor:teampcplast covered 2026-08-08×21 appearancessingle-source
  2026-08-082026-08-022026-07-142026-06-272026-06-14
• Contagious Interview
  campaigncampaign:contagious-interviewlast covered 2026-08-08×9 appearancessingle-source
  2026-08-082026-08-072026-08-022026-07-262026-07-19
• JINX-0163
  actoractor:jinx-0163last covered 2026-08-08single-source
  2026-08-08
• ScreenConnect app-store-themed fake-update distribution campaign
  campaigncampaign:screenconnect-appstore-phishing-2026-08last covered 2026-08-08single-source
  2026-08-08
• Beacon CRM access-key breach affecting around 1,500 UK charities
  incidentincident:beacon-crm-uk-charities-breach-2026-08last covered 2026-08-08
  2026-08-08
• ClickFix macOS expansion
  campaigncampaign:clickfix-macos-2026last covered 2026-08-07single-source
  2026-08-07
• UNK_DeadDrop
  campaigncampaign:unk-deaddrop-2026last covered 2026-08-07×2 appearancessingle-source
  2026-08-072026-06-16
• Adobe ColdFusion/Campaign APSB26-68/69
  trendtrend:adobe-coldfusion-campaign-apsb26-68-69last covered 2026-08-07×3 appearances
  2026-08-072026-07-122026-07-08
• Overlord
  tooltool:overlord-ratlast covered 2026-08-07×2 appearancessingle-source
  2026-08-072026-06-16
• ANCPI Romania cadastre cyberattack
  incidentincident:ancpi-romania-cyberattack-2026-07last covered 2026-08-05×4 appearancescontradicted
  2026-08-052026-07-262026-07-212026-07-19
• ExfilSquad
  actoractor:exfilsquadlast covered 2026-08-05×4 appearancessingle-source-national-cert
  2026-08-052026-08-042026-08-022026-07-31
• RUAG LLC Akira ransomware incident and VBS ownership review
  incidentincident:ruag-mro-akira-ransom-payment-review-2026last covered 2026-08-05
  2026-08-05
• Ultraviolet
  tooltool:ultraviolet-proxylast covered 2026-08-05single-source
  2026-08-05
• PhantomKiller
  tooltool:phantomkiller-edr-evasion-driverlast covered 2026-08-05
  2026-08-05
• SNOWLIGHT
  malwaremalware:snowlightlast covered 2026-08-05×2 appearancessingle-source
  2026-08-052026-07-10
• UNC5174
  actoractor:unc5174last covered 2026-08-05
  2026-08-05
• UNC6586
  actoractor:unc6586last covered 2026-08-05
  2026-08-05
• UTA0533
  actoractor:uta0533last covered 2026-08-04×3 appearances
  2026-08-042026-07-192026-07-18
• KNUCKLEBALL / ORANGETAIL SonicWall SMA toolset
  tooltool:sonicwall-sma-uta0533-toolsetlast covered 2026-08-04×3 appearances
  2026-08-042026-07-192026-07-18
• Sapphire Sleet
  actoractor:sapphire-sleetlast covered 2026-08-04×7 appearances
  2026-08-042026-08-022026-07-302026-06-292026-06-22
• UK Department for Education portal and Police National Legal Database breach (July 2026)
  incidentincident:uk-dfe-exfilsquad-breach-2026-07last covered 2026-08-04×3 appearances
  2026-08-042026-08-022026-07-31
• CrowdStrike 2026 Threat Hunting Report
  reportreport:crowdstrike-threat-hunting-2026last covered 2026-08-04
  2026-08-04
• VAULT PANDA
  actoractor:vault-pandalast covered 2026-08-04
  2026-08-04
• GENESIS PANDA
  actoractor:genesis-pandalast covered 2026-08-04
  2026-08-04
• UMBRAL BISON
  actoractor:umbral-bisonlast covered 2026-08-04×2 appearances
  2026-08-042026-05-11
• ALTERED SPIDER
  actoractor:altered-spiderlast covered 2026-08-04
  2026-08-04
• Everest
  actoractor:everest-ransomwarelast covered 2026-08-02×5 appearancessingle-source
  2026-08-022026-07-312026-07-262026-07-222026-06-08
• Screening Serpens
  actoractor:screening-serpens-unc1549-smoke-sandstorm-nimbus-manticore-iran-aptlast covered 2026-08-02×5 appearancessingle-source
  2026-08-022026-07-292026-05-272026-05-232026-05-18
• ShinyHunters
  actoractor:shinyhunterslast covered 2026-08-02×38 appearancessingle-source
  2026-08-022026-07-312026-07-282026-07-192026-07-18
• Joomla extension file-upload RCE wave
  trendtrend:joomla-extension-file-upload-rce-wavelast covered 2026-08-02×8 appearancessingle-source
  2026-08-022026-08-012026-07-312026-07-262026-07-12
• Ernst & Young third-party ITSM breach
  incidentincident:ey-third-party-itsm-breach-2026last covered 2026-08-02×3 appearancessingle-source
  2026-08-022026-07-282026-07-19
• Stadler Rail supplier-platform breach
  incidentincident:stadler-rail-everest-supplier-breach-2026last covered 2026-08-02×4 appearancessingle-source
  2026-08-022026-07-312026-07-262026-07-22
• SANDWORM_MODE
  malwaremalware:sandworm-modelast covered 2026-08-02×3 appearancessingle-source
  2026-08-022026-07-262026-07-23
• LAUNDRY BEAR
  actoractor:laundry-bearlast covered 2026-08-02×5 appearances
  2026-08-022026-07-312026-07-262026-07-252026-07-24
• MedusaHVNC
  tooltool:medusahvnclast covered 2026-08-02×2 appearancessingle-source
  2026-08-022026-07-28
• NightLedger
  tooltool:nightledger-backdoorlast covered 2026-08-02×2 appearancessingle-source
  2026-08-022026-07-29
• BridgeHead
  tooltool:bridgehead-tunnelerlast covered 2026-08-02×2 appearancessingle-source
  2026-08-022026-07-29
• UVVG Arad cyberattack (July 2026)
  incidentincident:uvvg-arad-cyberattack-2026-07last covered 2026-08-02×2 appearancessingle-source-victim
  2026-08-022026-07-29
• OWAReaper
  tooltool:owareaperlast covered 2026-08-02×2 appearances
  2026-08-022026-07-31
• SilkLurk
  malwaremalware:silklurklast covered 2026-08-02×2 appearancessingle-source
  2026-08-022026-07-31
• Toy Ghouls
  actoractor:toy-ghoulslast covered 2026-08-02×2 appearancessingle-source
  2026-08-022026-07-31
• GenieLocker
  malwaremalware:genielockerlast covered 2026-08-02×2 appearancessingle-source
  2026-08-022026-07-31
• Brinks Home breach (July 2026)
  incidentincident:brinks-home-shinyhunters-breach-2026-07last covered 2026-08-02×2 appearances
  2026-08-022026-07-31
• Midnight Blizzard
  actoractor:midnight-blizzardlast covered 2026-08-02×8 appearancessingle-sourcesingle-source-national-cert
  2026-08-022026-08-012026-07-262026-06-092026-05-23
• Storm-2945
  actoractor:storm-2945last covered 2026-08-02×2 appearances
  2026-08-022026-08-01
• CaptiveCrunch
  campaigncampaign:captivecrunch-storm-2945-hospitality-wifilast covered 2026-08-02×2 appearances
  2026-08-022026-08-01
• CornFlake
  malwaremalware:cornflake-go-ratlast covered 2026-08-02×2 appearances
  2026-08-022026-08-01
• ChocoShell
  tooltool:chocoshell-powershell-stealerlast covered 2026-08-02×2 appearances
  2026-08-022026-08-01
• XCSSET
  malwaremalware:xcssetlast covered 2026-08-02×2 appearancessingle-source
  2026-08-022026-08-01
• French Éducation nationale agent-training system breach (July 2026)
  incidentincident:france-education-nationale-agent-training-breach-2026-07last covered 2026-08-02×2 appearances
  2026-08-022026-08-01
• Adform trackpoint-async.js supply-chain crypto-clipper compromise (July 2026)
  incidentincident:adform-supply-chain-crypto-clipper-2026-07last covered 2026-08-02
  2026-08-02
• CCI Nice Côte d'Azur eDRH administrator-account export breach (July 2026)
  incidentincident:cci-nice-cote-dazur-edrh-breach-2026-07last covered 2026-08-02single-source
  2026-08-02
• COLDCARD hardware-RNG fallback wallet-seed theft (2026)
  incidentincident:coldcard-rng-fallback-seed-theft-2026last covered 2026-08-02
  2026-08-02
• Railway device-code phishing
  campaigncampaign:railway-device-code-phishing-m365-2026last covered 2026-08-01×3 appearancessingle-source
  2026-08-012026-07-122026-07-10
• Ulej / Flowerbed
  tooltool:ulej-flowerbedlast covered 2026-07-31×4 appearances
  2026-07-312026-07-262026-07-252026-07-24
• LurkProxy
  tooltool:lurkproxylast covered 2026-07-31single-source
  2026-07-31
• Nightmare Eclipse
  actoractor:nightmare-eclipselast covered 2026-07-29×14 appearancessingle-source
  2026-07-292026-07-092026-06-222026-06-192026-06-14
• ARToken
  tooltool:talos-artoken-eviltokens-bec-panellast covered 2026-07-29×3 appearancessingle-source
  2026-07-292026-07-052026-07-02
• Chaos (ransomware-as-a-service)
  actoractor:chaos-ransomwarelast covered 2026-07-29×3 appearancessingle-source
  2026-07-292026-07-262026-07-24
• STAC4749
  actoractor:stac4749last covered 2026-07-29single-source
  2026-07-29
• Sinobi
  actoractor:sinobi-ransomwarelast covered 2026-07-29×2 appearancessingle-source
  2026-07-292026-06-22
• Warlock
  actoractor:warlock-storm-2603last covered 2026-07-29×2 appearancessingle-source
  2026-07-292026-06-29
• UAT-11764
  actoractor:uat-11764last covered 2026-07-29single-source
  2026-07-29
• Cisco Talos IR Trends Q2 2026
  reportreport:talos-ir-trends-q2-2026last covered 2026-07-29single-source
  2026-07-29
• ArcBridge
  tooltool:arcbridge-tunnelerlast covered 2026-07-29single-source
  2026-07-29
• LegacyHive
  trendtrend:nightmare-eclipse-legacyhive-profile-registry-hijack-2026-07last covered 2026-07-29single-source
  2026-07-29
• Dysphoria
  tooltool:dysphoria-botnetlast covered 2026-07-28single-source
  2026-07-28
• Cybernox
  actoractor:cybernoxlast covered 2026-07-27
  2026-07-27
• Cavern Manticore
  actoractor:cavern-manticorelast covered 2026-07-26×5 appearancessingle-source
  2026-07-262026-07-222026-07-212026-07-122026-07-09
• DragonForce
  actoractor:dragonforcelast covered 2026-07-26×7 appearancescontradictedsingle-source
  2026-07-262026-07-192026-07-142026-07-122026-07-10
• JADEPUFFER
  actoractor:jadepufferlast covered 2026-07-26×4 appearances
  2026-07-262026-07-212026-07-052026-07-04
• TA4922
  actoractor:ta4922last covered 2026-07-26×5 appearances
  2026-07-262026-07-212026-06-182026-06-052026-06-01
• Cavern
  tooltool:cavern-c2-frameworklast covered 2026-07-26×5 appearancessingle-source
  2026-07-262026-07-222026-07-212026-07-122026-07-09
• XEntry Team
  actoractor:xentry-teamlast covered 2026-07-26×2 appearancessingle-source
  2026-07-262026-07-22
• IFAGE Geneva — DragonForce leak-site claim (850 GB)
  incidentincident:ifage-geneva-dragonforce-leak-claim-2026-07last covered 2026-07-26×3 appearancescontradictedsingle-source
  2026-07-262026-07-192026-07-14
• Cruciferra
  tooltool:cruciferra-crypterlast covered 2026-07-26×2 appearances
  2026-07-262026-07-21
• HOLLOWGRAPH
  tooltool:hollowgraph-malwarelast covered 2026-07-26×3 appearances
  2026-07-262026-07-222026-07-21
• BravoX
  actoractor:bravoxlast covered 2026-07-26×2 appearances
  2026-07-262026-07-24
• BravoX breach of a Yverdon-les-Bains fiduciary — Vaud municipalities data exposure
  incidentincident:bravox-yverdon-fiduciary-vaud-municipalities-2026last covered 2026-07-26×2 appearances
  2026-07-262026-07-24
• msaRAT
  malwaremalware:msaratlast covered 2026-07-26×2 appearancessingle-source
  2026-07-262026-07-24
• TA458
  actoractor:ta458-roundpresslast covered 2026-07-26×2 appearances
  2026-07-262026-07-25
• SpyPress
  malwaremalware:spypresslast covered 2026-07-26×2 appearances
  2026-07-262026-07-25
• Hades
  tooltool:hades-implantlast covered 2026-07-26×5 appearancessingle-source
  2026-07-262026-07-252026-06-272026-06-142026-06-10
• Thailand Ministry of Finance — Hermes AI-agent-automated intrusion (2026-07)
  incidentincident:thailand-finance-ministry-hermes-ai-agent-2026last covered 2026-07-26×2 appearancessingle-source
  2026-07-262026-07-25
• EU Managed Security Services (EUMSS) certification scheme
  policypolicy:enisa-eumss-certification-scheme-2026last covered 2026-07-26single-source-national-cert
  2026-07-26
• ENISA Health Action Plan Contribution Agreement
  policypolicy:enisa-health-action-plan-2026last covered 2026-07-26single-source-national-cert
  2026-07-26
• BaFin TeamViewer MAR Article 17 disclosure fine
  policypolicy:bafin-teamviewer-mar-disclosure-fine-2026last covered 2026-07-26
  2026-07-26
• FakeAgent
  campaigncampaign:fakeagentlast covered 2026-07-26
  2026-07-26
• SectopRAT
  malwaremalware:sectopratlast covered 2026-07-26
  2026-07-26
• Microsoft Email Threat Landscape Q2 2026
  reportreport:microsoft-email-threat-landscape-q2-2026last covered 2026-07-25single-source
  2026-07-25
• CyberAv3ngers
  actoractor:cyberav3ngerslast covered 2026-07-24×2 appearances
  2026-07-242026-07-19
• Kratos (phishing-as-a-service)
  tooltool:kratos-phaaslast covered 2026-07-24
  2026-07-24
• OilRig
  actoractor:oilriglast covered 2026-07-22×2 appearancessingle-source
  2026-07-222026-07-09
• KNDA diplomatic-academy zero-day breach
  incidentincident:south-korea-knda-diplomatic-academy-zero-day-breach-2026last covered 2026-07-22
  2026-07-22
• Sandworm
  actoractor:sandwormlast covered 2026-07-20×6 appearancessingle-source-national-cert
  2026-07-202026-07-132026-06-292026-05-302026-05-25
• UAC-0145
  actoractor:uac-0145last covered 2026-07-20single-source-national-cert
  2026-07-20
• APT42
  actoractor:apt42last covered 2026-07-19
  2026-07-19
• MuddyWater
  actoractor:muddywaterlast covered 2026-07-19×4 appearancessingle-source
  2026-07-192026-07-092026-05-282026-05-08
• Secret Blizzard
  actoractor:secretblizzardlast covered 2026-07-19×6 appearancessingle-source
  2026-07-192026-07-132026-06-292026-06-272026-06-26
• The Gentlemen
  actoractor:thegentlemenlast covered 2026-07-19×15 appearancessingle-source
  2026-07-192026-07-182026-07-122026-06-292026-06-27
• World Leaks
  actoractor:worldleakslast covered 2026-07-19×2 appearancessingle-source
  2026-07-192026-07-16
• Transport for London 2024 intrusion
  incidentincident:tfl-scattered-spider-2024last covered 2026-07-19×2 appearances
  2026-07-192026-07-17
• Check Point Annual AI Security Report 2026
  reportreport:checkpoint-ai-security-report-2026last covered 2026-07-19×2 appearancessingle-source
  2026-07-192026-07-14
• Amatera
  tooltool:amateralast covered 2026-07-19×2 appearancessingle-source
  2026-07-192026-07-17
• CrashStealer
  tooltool:crashstealerlast covered 2026-07-19×2 appearances
  2026-07-192026-07-14
• Static Tundra
  actoractor:static-tundralast covered 2026-07-19×2 appearances
  2026-07-192026-07-13
• France/EU formal attribution of Turla (FSB Centre 16) espionage against France
  incidentincident:france-eu-turla-fsb-attribution-2026-07last covered 2026-07-19×2 appearances
  2026-07-192026-07-13
• Russian hijacking of IP cameras along NATO military-supply routes (2026-07)
  campaigncampaign:russia-ip-camera-hijacking-nato-supply-routes-2026last covered 2026-07-19×2 appearancessingle-source
  2026-07-192026-07-13
• AsyncAPI npm supply-chain compromise via GitHub Actions (M-RED-TEAM)
  incidentincident:asyncapi-npm-github-actions-supply-chain-compromise-2026-07last covered 2026-07-19×3 appearances
  2026-07-192026-07-162026-07-14
• M-RED-TEAM
  tooltool:m-red-team-malware-frameworklast covered 2026-07-19×3 appearances
  2026-07-192026-07-162026-07-14
• bandcampro
  actoractor:bandcamprolast covered 2026-07-19×2 appearances
  2026-07-192026-07-14
• Patriot Bait
  campaigncampaign:patriot-baitlast covered 2026-07-19×2 appearances
  2026-07-192026-07-14
• Storm-3138
  actoractor:storm-3138last covered 2026-07-19×2 appearances
  2026-07-192026-07-14
• UNK_pyreq2323
  actoractor:unk-pyreq2323last covered 2026-07-19×2 appearances
  2026-07-192026-07-15
• UNK_OutFlareAZ
  actoractor:unk-outflareazlast covered 2026-07-19×2 appearances
  2026-07-192026-07-15
• Industrielle Werke Basel (IWB) third-party service-provider data breach (July 2026)
  incidentincident:iwb-basel-service-provider-breach-2026-07last covered 2026-07-19×2 appearances
  2026-07-192026-07-16
• TELEPUZ
  tooltool:telepuz-maas-malwarelast covered 2026-07-19×2 appearancessingle-source
  2026-07-192026-07-16
• Kudankulam nuclear-plant contractor (Reliance Group) third-party-hosting data breach (July 2026)
  incidentincident:kudankulam-reliance-worldleaks-2026-07last covered 2026-07-19×2 appearancessingle-source
  2026-07-192026-07-16
• UAT-11795
  actoractor:uat-11795last covered 2026-07-19×2 appearancessingle-source
  2026-07-192026-07-17
• Starland RAT
  tooltool:starland-ratlast covered 2026-07-19×2 appearancessingle-source
  2026-07-192026-07-17
• HelloNet
  campaigncampaign:hellonet-vipnet-supply-chainlast covered 2026-07-19×2 appearancessingle-source
  2026-07-192026-07-17
• HelloNet toolkit
  tooltool:hellonet-malware-suitelast covered 2026-07-19×2 appearancessingle-source
  2026-07-192026-07-17
• ACR Stealer
  tooltool:acr-stealerlast covered 2026-07-19×5 appearancessingle-source
  2026-07-192026-07-172026-05-302026-05-262026-05-25
• Wind Tre vishing + API-enumeration breach (2025)
  incidentincident:wind-tre-2026-vishing-api-enumeration-breachlast covered 2026-07-19×2 appearances
  2026-07-192026-07-17
• GoSerpent
  malwaremalware:goserpentlast covered 2026-07-19×2 appearancessingle-source
  2026-07-192026-07-18
• TetrisPhantom
  actoractor:tetrisphantomlast covered 2026-07-19×2 appearancessingle-source
  2026-07-192026-07-18
• ClickLock Stealer
  tooltool:clicklock-stealerlast covered 2026-07-19
  2026-07-19
• OTTERCOOKIE
  tooltool:ottercookielast covered 2026-07-18single-source
  2026-07-18
• WLDR
  tooltool:wldr-c2-implantlast covered 2026-07-17single-source
  2026-07-17
• CastleStealer
  tooltool:castlestealerlast covered 2026-07-17single-source
  2026-07-17
• The Syndicate
  actoractor:the-syndicatelast covered 2026-07-16×3 appearancessingle-source-victim
  2026-07-162026-07-122026-07-09
• Miasma
  campaigncampaign:miasma-redhat-npm-supply-chainlast covered 2026-07-16×11 appearances
  2026-07-162026-07-142026-06-292026-06-272026-06-14
• Nayax cloud-account incident
  incidentincident:nayax-cloud-account-breach-2026last covered 2026-07-16×3 appearancessingle-source-victim
  2026-07-162026-07-122026-07-09
• Pwn2Own Berlin 2026
  incidentincident:pwn2own-berlin-2026last covered 2026-07-15×2 appearances
  2026-07-152026-05-17
• Operation Saffron
  incidentincident:operation-saffron-first-vpn-takedown-33-servers-27-countrilast covered 2026-07-14×3 appearances
  2026-07-142026-05-222026-05-18
• Progress ShareFile Storage Zone Controller emergency shutdown
  incidentincident:progress-sharefile-storage-zone-controller-shutdown-2026-07last covered 2026-07-14×2 appearances
  2026-07-142026-07-13
• prt-scan
  campaigncampaign:prt-scan-github-actions-pwn-request-token-theftlast covered 2026-07-14
  2026-07-14
• 888
  actoractor:888-extortion-handlelast covered 2026-07-12×2 appearances
  2026-07-122026-07-08
• Bitter
  actoractor:bitterlast covered 2026-07-12×2 appearances
  2026-07-122026-07-10
• UAT-7810
  actoractor:uat-7810last covered 2026-07-12×2 appearancessingle-source
  2026-07-122026-07-08
• Unsafe
  actoractor:unsafe-ransomwarelast covered 2026-07-12×2 appearances
  2026-07-122026-07-09
• FrostyNeighbor March–May 2026 campaign
  campaigncampaign:frostyneighbor-2026-05-campaignlast covered 2026-07-12×7 appearancessingle-sourcesingle-source-national-cert
  2026-07-122026-07-092026-05-232026-05-182026-05-15
• LSHIY Azure CLI ROPC token-spray
  campaigncampaign:lshiy-ropc-azure-cli-password-spray-2026last covered 2026-07-12×2 appearances
  2026-07-122026-07-10
• STAC3725 CitrixBleed 2-to-DragonForce IAB chain
  campaigncampaign:stac3725-citrixbleed2-iab-dragonforcelast covered 2026-07-12×2 appearances
  2026-07-122026-07-10
• CERT.LV LVM/Olpha ransomware intrusion (2026)
  incidentincident:cert-lv-lvm-olpha-ransomware-2026last covered 2026-07-12×2 appearances
  2026-07-122026-07-10
• FortiBleed
  incidentincident:fortibleed-fortigate-credential-exposurelast covered 2026-07-12×7 appearancessingle-source
  2026-07-122026-07-052026-06-292026-06-232026-06-22
• Groupe 3R ransomware breach
  incidentincident:groupe-3r-akira-2026last covered 2026-07-12×3 appearancessingle-source-victim
  2026-07-122026-07-092026-05-10
• KDDI email-platform breach
  incidentincident:kddi-isp-email-platform-breach-2026last covered 2026-07-12×2 appearancessingle-source
  2026-07-122026-07-09
• Nextcloud GmbH corporate Elasticsearch data exposure (2026)
  incidentincident:nextcloud-gmbh-elasticsearch-exposure-2026last covered 2026-07-12×2 appearances
  2026-07-122026-07-10
• Odido (Netherlands telecom) ShinyHunters breach
  incidentincident:odido-telecom-breach-netherlands-2026last covered 2026-07-12×2 appearances
  2026-07-122026-07-10
• PDAG email-account compromise
  incidentincident:pdag-email-phishing-2026last covered 2026-07-12×2 appearancessingle-source-victim
  2026-07-122026-07-09
• ESET Threat Report H1 2026
  reportreport:eset-threat-report-h1-2026last covered 2026-07-12×2 appearancessingle-source
  2026-07-122026-07-09
• 'Ghost in the Database' ADFS key recovery
  tooltool:adfs-machine-dpapi-key-recoverylast covered 2026-07-12×2 appearances
  2026-07-122026-07-09
• LONGLEASH / SHORTLEASH ORB malware suite
  tooltool:longleash-orb-malware-suitelast covered 2026-07-12×2 appearancessingle-source
  2026-07-122026-07-08
• UNK_MassTraction
  actoractor:unk-masstractionlast covered 2026-07-12×2 appearancessingle-source
  2026-07-122026-07-09
• @injectivelabs/sdk-ts npm supply-chain compromise (2026)
  incidentincident:injectivelabs-npm-sdk-ts-supply-chain-2026last covered 2026-07-12×2 appearancessingle-source
  2026-07-122026-07-10
• Forg365
  tooltool:forg365-phaaslast covered 2026-07-12×2 appearances
  2026-07-122026-07-10
• Friendly Fire (AI Now Institute exploit)
  campaigncampaign:friendly-fire-ai-agent-defensive-hijacklast covered 2026-07-12×2 appearances
  2026-07-122026-07-11
• Armored Likho
  actoractor:armored-likholast covered 2026-07-12×2 appearancessingle-source
  2026-07-122026-07-11
• BusySnake Stealer
  malwaremalware:busysnake-stealerlast covered 2026-07-12×2 appearancessingle-source
  2026-07-122026-07-11
• jscrambler npm supply-chain compromise (2026-07)
  incidentincident:jscrambler-npm-supply-chain-2026last covered 2026-07-12
  2026-07-12
• GhostApproval
  tooltool:ghostapproval-ai-coding-assistant-symlinklast covered 2026-07-11×2 appearances
  2026-07-112026-07-09
• GigaWiper
  tooltool:gigawiperlast covered 2026-07-11
  2026-07-11
• Crucio
  tooltool:crucio-ransomwarelast covered 2026-07-11
  2026-07-11
• FlockWiper
  tooltool:flockwiperlast covered 2026-07-11
  2026-07-11
• Hyadina
  actoractor:hyadinalast covered 2026-07-11
  2026-07-11
• PoisonX
  tooltool:poisonx-driverlast covered 2026-07-11
  2026-07-11
• WP-SHELLSTORM
  actoractor:wp-shellstormlast covered 2026-07-10
  2026-07-10
• Nightmare Eclipse Windows zero-day series
  campaigncampaign:nightmare-eclipse-microsoft-dcu-threat-greenplasma-miniplasmaaaclast covered 2026-07-09×11 appearancessingle-source
  2026-07-092026-06-222026-06-142026-06-122026-06-11
• Apex2
  tooltool:apex2-botnetlast covered 2026-07-09×3 appearancessingle-source
  2026-07-092026-05-222026-05-18
• c2c / meow
  tooltool:c2c-meow-flooderlast covered 2026-07-09single-source
  2026-07-09
• RedHook
  tooltool:redhook-android-ratlast covered 2026-07-09single-source
  2026-07-09
• RoguePlanet
  trendtrend:nightmare-eclipse-rogueplanet-defender-toctou-lpe-2026-06last covered 2026-07-09×6 appearances
  2026-07-092026-06-222026-06-192026-06-142026-06-12
• IceCube
  tooltool:icecube-stealerlast covered 2026-07-09single-source
  2026-07-09
• UAT-5918
  actoractor:uat-5918last covered 2026-07-08single-source
  2026-07-08
• CrySome RAT
  tooltool:crysome-ratlast covered 2026-07-08single-source
  2026-07-08
• Factory-v3
  tooltool:factory-v3-loader-builderlast covered 2026-07-08single-source
  2026-07-08
• Kairos
  actoractor:kairos-extortionlast covered 2026-07-05×4 appearancessingle-source
  2026-07-052026-05-242026-05-192026-05-18
• 0DIN coding-agent prompt-injection chain
  campaigncampaign:0din-ai-coding-agent-indirect-pi-dns-txtlast covered 2026-07-05×2 appearances
  2026-07-052026-06-29
• Mustang Panda ZOHOMURK
  campaigncampaign:mustang-panda-zohomurk-zoho-workdrive-deaddrop-c2last covered 2026-07-05
  2026-07-05
• Popa residential-proxy botnet
  campaigncampaign:popa-vo1d-residential-proxy-botnetlast covered 2026-07-05×3 appearances
  2026-07-052026-07-042026-06-21
• StegoAd
  campaigncampaign:stegoad-darkspectre-119-edge-extensions-steganographylast covered 2026-07-05×2 appearances
  2026-07-052026-06-30
• Phantom Squatting
  campaigncampaign:unit42-phantom-squatting-hallucinated-domainslast covered 2026-07-05×2 appearancessingle-source
  2026-07-052026-07-01
• DHS HSIN breach
  incidentincident:dhs-hsin-breach-2026last covered 2026-07-05
  2026-07-05
• Pegasus infection of PEGA-Committee MEP Stelios Kouloglou
  incidentincident:pegasus-mep-kouloglou-pega-committee-2026last covered 2026-07-05×2 appearances
  2026-07-052026-07-03
• Avalon
  tooltool:avalon-malware-frameworklast covered 2026-07-05×2 appearancessingle-source
  2026-07-052026-07-04
• PamStealer
  tooltool:pamstealerlast covered 2026-07-05×2 appearancessingle-source
  2026-07-052026-07-04
• Umbrij
  tooltool:toddycat-umbrij-oauth-token-theft-strdlast covered 2026-07-05×2 appearancessingle-source
  2026-07-052026-07-01
• Medtronic breach
  incidentincident:medtronic-shinyhunters-corporate-it-breachlast covered 2026-07-03×4 appearancessingle-source
  2026-07-032026-05-252026-05-192026-05-18
• Trojanised ScreenConnect AsyncRAT campaign
  campaigncampaign:screenconnect-asyncrat-seo-poisoninglast covered 2026-07-02
  2026-07-02
• Argo CD repo-server unauthenticated RCE
  trendtrend:argo-cd-repo-server-unauth-rcelast covered 2026-07-02
  2026-07-02
• Bumblebee → AdaptixC2 → Akira intrusion
  incidentincident:dfir-bumblebee-adaptixc2-akira-seo-poisoning-killchainlast covered 2026-06-30single-source
  2026-06-30
• Embargo
  actoractor:embargolast covered 2026-06-29×2 appearancessingle-source
  2026-06-292026-05-17
• Gamaredon
  actoractor:gamaredonlast covered 2026-06-29×5 appearancessingle-source
  2026-06-292026-06-262026-06-032026-06-022026-06-01
• Bluekit PhaaS
  campaigncampaign:bluekit-phaas-browser-in-the-middlelast covered 2026-06-29×2 appearances
  2026-06-292026-06-28
• Cordyceps
  campaigncampaign:cordyceps-github-actions-pwn-requestlast covered 2026-06-29×2 appearances
  2026-06-292026-06-25
• Icarus Salesforce OAuth extortion
  campaigncampaign:icarus-klue-salesforce-oauthlast covered 2026-06-29×3 appearancessingle-source
  2026-06-292026-06-252026-06-24
• BadBlocker
  campaigncampaign:island-badblocker-adblock-youtube-extensionlast covered 2026-06-29×2 appearances
  2026-06-292026-06-28
• Mini Shai-Hulud
  campaigncampaign:mini-shai-huludlast covered 2026-06-29×16 appearancessingle-source
  2026-06-292026-06-272026-06-142026-06-092026-06-06
• Operation Endgame — Amadey/StealC takedown
  campaigncampaign:operation-endgame-amadey-stealclast covered 2026-06-29×4 appearancessingle-source
  2026-06-292026-06-252026-06-222026-06-19
• StrikeShark
  campaigncampaign:strikeshark-sharkloaderlast covered 2026-06-29×2 appearances
  2026-06-292026-06-27
• macOS.Gaslight
  tooltool:macos-gaslightlast covered 2026-06-29×2 appearances
  2026-06-292026-06-26
• Gogs argument-injection RCE
  trendtrend:gogs-unpatched-argument-injection-rce-rapid7-metasploitlast covered 2026-06-29×4 appearances
  2026-06-292026-06-012026-05-292026-05-25
• Edgecution
  tooltool:edgecution-payouts-kingslast covered 2026-06-25
  2026-06-25
• Mistic
  tooltool:mistic-mltbackdoorlast covered 2026-06-25
  2026-06-25
• Cloud-bucket hijacking via namespace reuse
  campaigncampaign:cloud-bucket-hijacking-namespace-reuselast covered 2026-06-24single-source
  2026-06-24
• Webworm
  actoractor:webworm-fishmonger-aquatic-panda-eset-echocreep-graphworm-eulast covered 2026-06-22×4 appearancessingle-source
  2026-06-222026-06-172026-05-212026-05-18
• AryStinger
  campaigncampaign:arystinger-botnetlast covered 2026-06-22
  2026-06-22
• ErrTraffic
  campaigncampaign:sekoia-errtraffic-clickfix-maas-polygon-c2last covered 2026-06-22×2 appearancessingle-source
  2026-06-222026-06-17
• ShinyHunters PeopleSoft campaign
  campaigncampaign:shinyhunters-peoplesoft-2026last covered 2026-06-22×2 appearances
  2026-06-222026-06-12
• Cybercrime-underground AI adoption
  campaigncampaign:underground-ai-adoption-sophoslast covered 2026-06-22×2 appearancessingle-source
  2026-06-222026-06-19
• Kyushu Electric SSD loss
  incidentincident:kyushu-electric-ssd-loss-2026last covered 2026-06-22
  2026-06-22
• usbliter8
  tooltool:usbliter8-securerom-exploitlast covered 2026-06-22×2 appearances
  2026-06-222026-06-20
• AutoJack
  trendtrend:autojack-mcp-websocket-rcelast covered 2026-06-22×2 appearances
  2026-06-222026-06-20
• Prinz Eugen
  campaigncampaign:prinz-eugen-ransomwarelast covered 2026-06-21
  2026-06-21
• Kodak breach
  incidentincident:kodak-shinyhunters-breachlast covered 2026-06-20
  2026-06-20
• CryptoBandits
  campaigncampaign:cryptobandits-usb-lnk-tor-clipperlast covered 2026-06-19
  2026-06-19
• Operation Endgame — SocGholish expansion
  incidentincident:operation-endgame-socgholish-ta569last covered 2026-06-19
  2026-06-19
• ScarCruft
  actoractor:scarcruftlast covered 2026-06-18
  2026-06-18
• Zammad 7.1 security release
  trendtrend:zammad-7-1-security-releaselast covered 2026-06-18
  2026-06-18
• DragonForce Backdoor.Turn intrusion
  campaigncampaign:dragonforce-backdoor-turn-teams-relay-byovdlast covered 2026-06-17
  2026-06-17
• Rokarolla
  campaigncampaign:zimperium-rokarolla-android-banker-217-appslast covered 2026-06-17
  2026-06-17
• UAT-8616
  actoractor:uat-8616last covered 2026-06-16×3 appearances
  2026-06-162026-05-152026-05-11
• Outsider PhaaS
  campaigncampaign:outsider-phaas-gemini-2026last covered 2026-06-15
  2026-06-15
• VerdantBamboo
  actoractor:verdantbamboolast covered 2026-06-14×7 appearancessingle-source
  2026-06-142026-06-112026-06-052026-06-022026-06-01
• Atomic Arch
  campaigncampaign:atomic-arch-aur-supply-chain-2026last covered 2026-06-14×2 appearancessingle-source
  2026-06-142026-06-13
• IronWorm
  campaigncampaign:ironwormlast covered 2026-06-14×4 appearances
  2026-06-142026-06-122026-06-062026-06-01
• Velvet Ant Operation Highland
  campaigncampaign:velvet-ant-operation-highland-2026last covered 2026-06-14×2 appearances
  2026-06-142026-06-13
• Conti developer Lytvynenko guilty plea
  incidentincident:conti-lytvynenko-guilty-plea-2026last covered 2026-06-14
  2026-06-14
• Cyber Europe 2026
  incidentincident:cyber-europe-2026-eu-cybersecurity-reservelast covered 2026-06-14
  2026-06-14
• Tchap messenger breach
  incidentincident:tchap-french-government-messenger-breachlast covered 2026-06-14
  2026-06-14
• NIS2 CJEU referral (France, Spain)
  policypolicy:eu-nis2-cjeu-referral-france-spain-2026last covered 2026-06-14single-source
  2026-06-14
• CrowdStrike 2026 Technology Threat Landscape Report
  reportreport:crowdstrike-tech-threat-landscape-2026last covered 2026-06-14×2 appearancessingle-source
  2026-06-142026-06-11
• GreatXML
  trendtrend:greatxml-bitlocker-bypass-2026last covered 2026-06-14×2 appearances
  2026-06-142026-06-12
• Agentjacking
  campaigncampaign:agentjacking-mcp-sentry-injection-2026last covered 2026-06-13
  2026-06-13
• OceanLotus
  actoractor:oceanlotuslast covered 2026-06-12single-source
  2026-06-12
• OpenClaw agent-phishing disclosures
  campaigncampaign:openclaw-prompt-injection-agent-phishing-2026last covered 2026-06-12
  2026-06-12
• JDY botnet
  campaigncampaign:jdy-botnet-volt-typhoon-2026last covered 2026-06-11
  2026-06-11
• Ghost-Sender
  campaigncampaign:ghost-sender-exchange-online-spoofinglast covered 2026-06-10
  2026-06-10
• Job-seeker targeting wave (CH)
  campaigncampaign:ncsc-ch-jobseeker-targeting-2026last covered 2026-06-10single-source-national-cert
  2026-06-10
• Security-tool impersonation TDS campaign
  campaigncampaign:tds-security-tool-impersonation-checkpointlast covered 2026-06-10single-source
  2026-06-10
• Dragos Q1 2026 Industrial Ransomware Analysis
  reportreport:dragos-industrial-ransomware-q1-2026last covered 2026-06-10single-source
  2026-06-10
• Entra Agent ID OBO abuse
  trendtrend:entra-agent-id-obo-abuse-redcanarylast covered 2026-06-10×3 appearancessingle-source
  2026-06-102026-05-302026-05-25
• Fox Tempest
  actoractor:fox-tempestlast covered 2026-06-09×3 appearancessingle-source
  2026-06-092026-05-202026-05-18
• C0XMO
  campaigncampaign:c0xmo-gafgytlast covered 2026-06-08
  2026-06-08
• FIFA World Cup 2026 pre-event threat cluster
  campaigncampaign:fifa-world-cup-2026last covered 2026-06-08
  2026-06-08
• OP-512
  actoractor:op-512last covered 2026-06-06×2 appearancessingle-source
  2026-06-062026-06-01
• Silent Ransom Group physical USB intrusions
  campaigncampaign:fbi-flash-csa-260526-silent-ransom-group-physical-usb-attacks-us-law-firmslast covered 2026-06-06×3 appearancessingle-source
  2026-06-062026-06-012026-05-28
• Operation FlutterBridge
  campaigncampaign:flutterbridge-cl-cri-1089last covered 2026-06-05
  2026-06-05
• DentaQuest
  incidentincident:dentaquest-shinyhunters-2026last covered 2026-06-05×2 appearances
  2026-06-052026-06-01
• DesckVB RAT malspam
  campaigncampaign:desckvb-rat-doubleclick-2026last covered 2026-06-04single-source
  2026-06-04
• Stock-exchange mailbox espionage
  campaigncampaign:stock-exchange-mailbox-espionage-2026last covered 2026-06-04
  2026-06-04
• Booking.com-fed hotel phishing (CH)
  incidentincident:ncsc-ch-booking-hotel-phishing-2026last covered 2026-06-04×2 appearancessingle-source-national-cert
  2026-06-042026-06-01
• Operation XENOFISCAL
  campaigncampaign:operation-xenofiscal-sidecopylast covered 2026-06-03
  2026-06-03
• Sophos 2026 Active Adversary Report
  reportreport:sophos-active-adversary-2026last covered 2026-06-03×2 appearancessingle-source
  2026-06-032026-06-01
• Operation Dragon Weave
  campaigncampaign:operation-dragon-weavelast covered 2026-06-02
  2026-06-02
• Ghost Stadium PhaaS
  campaigncampaign:ghost-stadium-phaas-300-fifa-domain-clones-eu-fan-credentialslast covered 2026-06-01×2 appearances
  2026-06-012026-05-30
• Italian low-cost commercial spyware
  campaigncampaign:italy-low-cost-commercial-spyware-morpheus-spyrtacuslast covered 2026-06-01
  2026-06-01
• SmartApeSG ClickFix campaign
  campaigncampaign:smartapesg-clickfix-staging-rat-to-netsupport-managerlast covered 2026-06-01single-source
  2026-06-01
• TrapDoor
  campaigncampaign:trapdoorlast covered 2026-06-01×3 appearancessingle-source
  2026-06-012026-05-262026-05-25
• Dutch/Belgian/Irish booking-SaaS breach
  incidentincident:dutch-hotels-booking-saas-breach-2026last covered 2026-06-01
  2026-06-01
• EU 20th Russia sanctions package
  policypolicy:eu-20th-russia-sanctions-mss-prohibition-2026last covered 2026-06-01×2 appearances
  2026-06-012026-05-18
• ENISA NIS360 2026
  reportreport:enisa-nis360-2026last covered 2026-06-01×2 appearances
  2026-06-012026-05-25
• GREYVIBE
  actoractor:greyvibe-russia-nexus-ai-assisted-five-parallel-ukraine-attacklast covered 2026-05-30×2 appearances
  2026-05-302026-05-25
• Kimsuky
  actoractor:kimsukylast covered 2026-05-30×2 appearancessingle-source
  2026-05-302026-05-17
• ChatGPhish
  campaigncampaign:chatgphish-chatgpt-markdown-rendering-flaw-permiso-securitylast covered 2026-05-30×2 appearances
  2026-05-302026-05-25
• LLMShare
  campaigncampaign:llmshare-malvertising-chatgpt-share-links-infostealer-googlelast covered 2026-05-30×2 appearances
  2026-05-302026-05-25
• ESET APT Activity Report Q4 2025 – Q1 2026
  reportreport:eset-apt-activity-report-q4-2025-q1-2026-sandworm-lazaruslast covered 2026-05-30×2 appearances
  2026-05-302026-05-25
• Asocks residential-proxy takedown
  campaigncampaign:dutch-police-ncsc-asocks-residential-proxy-takedownlast covered 2026-05-29
  2026-05-29
• JINX-0164
  campaigncampaign:jinx-0164-crypto-firms-linkedin-audiofix-miniratlast covered 2026-05-29
  2026-05-29
• Ababil of Minab
  actoractor:ababil-of-minab-mois-attribution-lacmta-march-2026-700gb-backups-destroyedlast covered 2026-05-28×2 appearances
  2026-05-282026-05-25
• GlassWorm takedown
  campaigncampaign:glassworm-developer-botnet-takedown-crowdstrike-google-shadowserver-russia-attrilast covered 2026-05-28
  2026-05-28
• AI-chatbot search-poisoning cryptojacking
  campaigncampaign:microsoft-ai-chatbot-search-poisoning-cryptojacking-screenconnect-process-hollowlast covered 2026-05-28
  2026-05-28
• Akira kill-chain reconstruction (SANS ISC)
  campaigncampaign:sans-isc-akira-kill-chain-sslvpn-syslog-evtx-no-edrlast covered 2026-05-28single-source
  2026-05-28
• AFC Ajax fan-data breach
  incidentincident:afc-ajax-amsterdam-arrest-2026-05-26-300k-fan-records-shared-keys-misconfiguredlast covered 2026-05-28
  2026-05-28
• ILIAS LMS May 2026 fixes
  trendtrend:ilias-lms-nine-fixes-2026-05-27-tileimageupload-unauth-write-soap-access-bypasslast covered 2026-05-28×2 appearances
  2026-05-282026-05-25
• RemotePE
  tooltool:remotepelast covered 2026-05-26
  2026-05-26
• Underminr
  trendtrend:underminr-multitenant-cdn-domain-fronting-variantlast covered 2026-05-25
  2026-05-25
• Megalodon
  campaigncampaign:megalodon-mass-github-cicd-backdoor-5561-repos-sysdiag-optimize-buildlast covered 2026-05-24×3 appearancessingle-source
  2026-05-242026-05-232026-05-18
• Packagist Laravel-Lang supply-chain wave
  campaigncampaign:packagist-laravel-lang-supply-chain-2026last covered 2026-05-24
  2026-05-24
• Software-exposed BYOVD hardware-gate bypass
  trendtrend:atos-byovd-hardware-gate-bypass-2026last covered 2026-05-24
  2026-05-24
• Kimwolf DDoS-for-hire arrest
  incidentincident:kimwolf-dort-jacob-butler-ddos-botnet-arrest-ottawa-aisuru-variantlast covered 2026-05-23
  2026-05-23
• Check Point AI Threat Landscape Digest (Mar–Apr 2026)
  reportreport:checkpoint-research-ai-threat-landscape-march-april-2026-mexico-nine-agencies-evlast covered 2026-05-23single-source
  2026-05-23
• Rapid7 Q1 2026 Threat Landscape Report
  reportreport:rapid7-q1-2026-threat-landscape-report-vulnerability-exploitation-top-iavlast covered 2026-05-23×2 appearances
  2026-05-232026-05-18
• SPIP 2026 RCE wave
  trendtrend:spip-2026-rce-wavelast covered 2026-05-23×3 appearances
  2026-05-232026-05-182026-05-13
• Calypso telco espionage campaign
  campaigncampaign:calypso-red-lamassu-showboat-jfmbackdoor-linux-windows-telcolast covered 2026-05-22×2 appearances
  2026-05-222026-05-18
• Verizon 2026 DBIR
  reportreport:verizon-2026-dbir-exploitation-overtakes-credentialslast covered 2026-05-21×2 appearances
  2026-05-212026-05-18
• PinTheft
  trendtrend:pintheft-linux-kernel-rds-zerocopy-iouring-lpe-no-cve-arch-dlast covered 2026-05-21
  2026-05-21
• Storm-2949
  actoractor:storm-2949last covered 2026-05-20
  2026-05-20
• Storm-2949 SSPR-to-Key-Vault kill chain
  campaigncampaign:storm-2949-sspr-to-key-vault-azure-cloud-wide-kill-chainlast covered 2026-05-20
  2026-05-20
• actions-cool/issues-helper compromise
  incidentincident:actions-cool-issues-helper-github-action-compromised-53-taglast covered 2026-05-20
  2026-05-20
• Sparx Enterprise Architect five-CVE chain
  trendtrend:sparx-enterprise-architect-pro-cloud-server-five-cve-chain-clast covered 2026-05-20×2 appearances
  2026-05-202026-05-18
• Fast16
  campaigncampaign:fast16-symantec-carbon-black-contemporaneous-stuxnet-nuclealast covered 2026-05-19
  2026-05-19
• INTERPOL Operation Ramz
  campaigncampaign:interpol-operation-ramz-mena-cybercrime-13-country-201-arrelast covered 2026-05-19×2 appearances
  2026-05-192026-05-18
• Living Off the Pipeline
  campaigncampaign:sentinelone-living-off-the-pipeline-2026last covered 2026-05-19×3 appearancessingle-source
  2026-05-192026-05-162026-05-11
• ARWINI data exfiltration
  incidentincident:arwini-lower-saxony-statutory-prescription-audit-body-datalast covered 2026-05-19
  2026-05-19
• Grafana Labs CoinbaseCartel breach
  incidentincident:grafana-labs-coinbasecartel-pwn-request-github-actions-breaclast covered 2026-05-19
  2026-05-19
• PCPJack
  tooltool:pcpjack-cloud-worm-2026last covered 2026-05-19×4 appearances
  2026-05-192026-05-182026-05-122026-05-11
• BigBlueButton bbb-web CVE trio
  trendtrend:bigbluebutton-bbb-web-three-cves-46351-46353-46404-eu-edulast covered 2026-05-19
  2026-05-19
• Rhysida Stuttgart claim
  incidentincident:rhysida-claims-stuttgart-municipal-data-5btc-city-denies-confirmed-incidentlast covered 2026-05-18
  2026-05-18
• THORChain vault drain
  incidentincident:thorchain-gg20-tss-vault-drain-11m-nine-chains-switzerlandlast covered 2026-05-18
  2026-05-18
• FunnelKit Magecart injection
  campaigncampaign:funnelkit-funnel-builder-for-woocommerce-actively-exploited-magecart-skimmerlast covered 2026-05-17
  2026-05-17
• Gremlin Stealer
  tooltool:gremlin-stealer-evolution-2026last covered 2026-05-16single-source
  2026-05-16
• AMD-SB-7052
  trendtrend:amd-sb-7052last covered 2026-05-16
  2026-05-16
• CL-STA-1132
  campaigncampaign:cl-sta-1132last covered 2026-05-14×5 appearancessingle-source
  2026-05-142026-05-132026-05-122026-05-112026-05-09
• FamousSparrow Azerbaijan intrusion
  campaigncampaign:famoussparrow-azerbaijan-2026last covered 2026-05-14
  2026-05-14
• Q1 2026 ransomware quarterly synthesis
  reportreport:q1-2026-ransomware-quarterlylast covered 2026-05-14
  2026-05-14
• GemStuffer
  tooltool:gemstuffer-rubygems-2026last covered 2026-05-14
  2026-05-14
• Foxconn Nitrogen ransomware
  incidentincident:foxconn-nitrogen-2026last covered 2026-05-13
  2026-05-13
• MDASH
  tooltool:microsoft-mdash-2026last covered 2026-05-13
  2026-05-13
• TrickMo C
  tooltool:trickmo-c-2026last covered 2026-05-13
  2026-05-13
• Centreon April 2026 vulnerability cluster
  trendtrend:centreon-april-2026-vuln-clusterlast covered 2026-05-13
  2026-05-13
• South Staffordshire Water ICO fine
  incidentincident:south-staffordshire-water-ico-2026last covered 2026-05-12×2 appearances
  2026-05-122026-05-11
• CERT-FR agentic-AI risk report (CERTFR-2026-ACT-016)
  reportreport:certfr-2026-act-016last covered 2026-05-12×2 appearancessingle-source-national-cert
  2026-05-122026-05-08
• GTIG AI Threat Tracker (May 2026)
  reportreport:gtig-ai-threat-tracker-may-2026last covered 2026-05-12×2 appearancessingle-source
  2026-05-122026-05-11
• SMS-blaster smishing (Switzerland)
  campaigncampaign:sms-blaster-ch-2026last covered 2026-05-11single-source
  2026-05-11
• EDPB Coordinated Enforcement Framework 2026
  policypolicy:edpb-cef-2026-transparencylast covered 2026-05-11single-source
  2026-05-11
• Braintrust AWS breach
  incidentincident:braintrust-aws-breach-2026last covered 2026-05-10
  2026-05-10
• DENIC .de DNSSEC outage
  incidentincident:denic-dnssec-outage-2026last covered 2026-05-10×2 appearances
  2026-05-102026-05-09
• JDownloader official site compromised
  incidentincident:jdownloader-supply-chain-2026last covered 2026-05-10
  2026-05-10
• Beagle
  tooltool:beagle-fake-claude-stac4713-2026last covered 2026-05-10
  2026-05-10
• DAEMON Tools supply-chain compromise
  incidentincident:daemon-tools-supply-chain-2026last covered 2026-05-09
  2026-05-09
• Inditex (Zara) breach
  incidentincident:inditex-zara-breach-2026last covered 2026-05-09
  2026-05-09
• Die Linke ransomware breach
  incidentincident:die-linke-qilin-2026last covered 2026-05-08single-source
  2026-05-08
• Eurail breach
  incidentincident:eurail-breach-2026last covered 2026-05-08single-source
  2026-05-08
• Dragos 2025 OT Cybersecurity Year in Review
  reportreport:dragos-2025-ot-frontlineslast covered 2026-05-08single-source
  2026-05-08
• Kaspersky Q1 2026 Exploits and Vulnerabilities Report
  reportreport:kaspersky-q1-2026-exploitslast covered 2026-05-08single-source
  2026-05-08
• UAT-8302
  actoractor:uat-8302last covered 2026-05-04single-source
• DigiCert support-portal compromise
  incidentincident:digicert-support-portal-2026last covered 2026-05-04
• Mediaworks Kft (Hungary)
  incidentincident:mediaworks-hungary-2026last covered 2026-05-04single-source
• Trellix source-code breach
  incidentincident:trellix-source-code-2026last covered 2026-05-04
• ENISA CVE Numbering Authority Root expansion
  policypolicy:enisa-cve-root-2026last covered 2026-05-04single-source-national-cert
• EU Cybersecurity Package 2026
  policypolicy:eu-cybersecurity-package-2026last covered 2026-05-04
• Poland NIS2 transposition
  policypolicy:poland-nis2-transposition-2026last covered 2026-05-04
• GTIG Europe Data Leak Landscape 2025
  reportreport:gtig-europe-2025last covered 2026-05-04single-source
• Europol IOCTA 2026
  reportreport:iocta-2026last covered 2026-05-04single-source
• Mandiant M-Trends 2026
  reportreport:mtrends-2026last covered 2026-05-04single-source
• Gentlemen RaaS
  actoractor:gentlemen-raas-gentlekillerlast covered —
• ACR Stealer fake-Claude distribution
  campaigncampaign:acr-stealer-fake-claudelast covered —
• AI-brand impersonation malware delivery
  campaigncampaign:ai-brand-impersonation-storm3075-foxtempestlast covered —
• Amazon SES BEC abuse
  campaigncampaign:amazon-ses-bec-2026last covered —
• APT28 tradecraft evolution 2026
  campaigncampaign:apt28-tradecraft-evolution-2026last covered —
• B1ack's Stash May 2026 card release
  campaigncampaign:b1ack-stash-46m-card-dump-may-2026-third-free-release-wavelast covered —
• CERT-FR CERTFR-2026-ACT-016
  campaigncampaign:certfr-2026-act-016last covered —
• CERTFR-2026-AVI-0564
  campaigncampaign:certfr-2026-avi-0564last covered —
• CERTFR-2026-AVI-0572
  campaigncampaign:certfr-2026-avi-0572last covered —
• Chinese-language PhaaS OTP-relay ecosystem
  campaigncampaign:chinese-language-phaas-otp-relaylast covered —
• BadIIS 'demo.pdb' MaaS backdoor campaign
  campaigncampaign:cisco-talos-badiis-demo-pdb-maas-isapi-backdoor-lwxat-dragonlast covered —
• CL-STA-1062 TinyRCT campaign
  campaigncampaign:cl-sta-1062-tinyrctlast covered —
• IPv4-mapped IPv6 eBanking phishing
  campaigncampaign:ebanking-ipv4-mapped-ipv6-phishinglast covered —
• EDPB Coordinated Enforcement Framework 2026
  campaigncampaign:edpb-cef-2026-transparencylast covered —
• ENISA expands CVE Numbering Authority Root
  campaigncampaign:enisa-cve-root-2026last covered —
• EU Cyber Resilience Act
  campaigncampaign:eu-cyber-resilience-actlast covered —
• EU Cybersecurity Package 2026
  campaigncampaign:eu-cybersecurity-package-2026last covered —
• Kali365 PhaaS
  campaigncampaign:fbi-psa260521-kali365-phaas-oauth-device-code-m365-mfa-bypasslast covered —
• FishMonger Windows SprySOCKS campaign
  campaigncampaign:fishmonger-isoon-sprysocks-windows-kernel-rootkitlast covered —
• FortiSandbox triple exploitation
  campaigncampaign:fortisandbox-triple-active-exploitationlast covered —
• Gamaredon GammaPhish / GammaWorm
  campaigncampaign:gamaredon-gammaphish-gammawormlast covered —
• Grandoreiro 2026 Iberian campaign
  campaigncampaign:grandoreiro-2026-iberian-watchguard-eu-banks-btmob-maaslast covered —
• Potemkin / RMMProject ClickFix campaign
  campaigncampaign:huntress-potemkin-loader-rmmproject-clickfix-abe-bypasslast covered —
• InstallFix
  campaigncampaign:installfixlast covered —
• Malicious JetBrains Marketplace AI plugins
  campaigncampaign:jetbrains-marketplace-malicious-ai-pluginslast covered —
• npm/Go folderOpen-task infostealer campaign
  campaigncampaign:jfrog-vscode-folderopen-task-npm-go-supply-chain-infostealerlast covered —
• Kimsuky HelloDoor / PebbleDash C2 evolution
  campaigncampaign:kimsuky-pebbledash-hellodoor-trycloudflare-tunnel-c2-evolutionlast covered —
• macOS ClickFix hdiutil campaign
  campaigncampaign:macos-clickfix-hdiutil-amoslast covered —
• Stripe-metadata Magecart skimmer
  campaigncampaign:magecart-stripe-api-skimmer-customer-metadatalast covered —
• Fake 'Perplexity AI' Chrome extension
  campaigncampaign:malicious-perplexity-ai-chrome-extension-keystroke-interceptlast covered —
• Mastra easy-day-js backdoor
  campaigncampaign:mastra-easy-day-js-supply-chainlast covered —
• MuddyWater Chaos false-flag
  campaigncampaign:muddywater-chaos-2026last covered —
• MuddyWater Q1 2026 DLL side-loading campaign
  campaigncampaign:muddywater-seedworm-fortemedia-sentinelone-dll-sideload-chromelevator-nodejslast covered —
• M365 voicemail-phishing wave (CH)
  campaigncampaign:ncsc-ch-m365-voicemail-phishing-week25last covered —
• npm dependency-confusion wave 2026
  campaigncampaign:npm-dependency-confusion-internal-namespace-campaigns-ms-sonatypelast covered —
• OceanLotus FireAnt supply-chain compromise
  campaigncampaign:oceanlotus-apt32-fireant-supplychain-2026last covered —
• Malicious OpenClaw ClawHub skills
  campaigncampaign:openclaw-clawhub-malicious-ai-skillslast covered —
• 'Photo ZIP' hospitality phishing
  campaigncampaign:photo-zip-tonrat-hospitalitylast covered —
• PostCSS npm typosquat campaign
  campaigncampaign:postcss-npm-typosquat-python-ratlast covered —
• ROADtools weaponisation (Entra ID)
  campaigncampaign:roadtools-weaponised-by-midnight-blizzard-curious-serpens-uta0355-entra-idlast covered —
• Rust crypto-clipper VirusTotal abuse
  campaigncampaign:rust-crypto-clipper-virustotal-reputationlast covered —
• WeTransfer steganographic JPEG loader
  campaigncampaign:sans-isc-steganographic-jpeg-loader-cloudflare-workers-r2last covered —
• ScarCruft NarwhalRAT campaign
  campaigncampaign:scarcruft-narwhalratlast covered —
• ShapedPlugin Pro supply-chain backdoor
  campaigncampaign:shapedplugin-supply-chain-2026last covered —
• 'Signal Support' recovery-key phishing
  campaigncampaign:signal-support-impersonation-backup-recovery-key-phishinglast covered —
• SVG application/ecmascript phishing wave
  campaigncampaign:svg-ecmascript-phishing-2026last covered —
• Shai-Hulud copycat wave
  campaigncampaign:teampcp-shai-hulud-copycat-wave-ox-security-checkmarx-pcpjalast covered —
• Microsoft Teams external-chat phishing
  campaigncampaign:teams-external-chat-phishinglast covered —
• The Gentlemen self-propagating encryptor
  campaigncampaign:the-gentlemen-ransomware-storm2697last covered —
• Turla STOCKSTAY campaign
  campaigncampaign:turla-stockstaylast covered —
• Tycoon2FA post-takedown resurgence
  campaigncampaign:tycoon2fa-oauth-device-authorization-grant-microsoft-365-post-takedownlast covered —
• UAC-0226 GIFTEDCROOK WinRAR exploitation
  campaigncampaign:uac0226-giftedcrook-winrar-cve-2025-8088last covered —
• UNC6508 INFINITERED campaign
  campaigncampaign:unc6508-infinitered-redcap-2026last covered —
• WhatsApp VBScript RMM campaign
  campaigncampaign:whatsapp-vbs-manageengine-rmmlast covered —
• WordPress Steam-profile C2 malware
  campaigncampaign:wordpress-steam-profile-c2-unicode-steganographylast covered —
• 7-Eleven Salesforce breach
  incidentincident:7-eleven-confirms-shinyhunters-salesforce-breach-600k-recorlast covered —
• AdaptHealth contractor session hijack
  incidentincident:adapthealth-contractor-session-hijack-8klast covered —
• ADT Inc. cloud environment breach
  incidentincident:adt-cloud-breach-2026last covered —
• Aflac Japan subsidiary portal breach
  incidentincident:aflac-japan-portal-breach-2026last covered —
• AudiA6 laundering-service takedown
  incidentincident:audia6-crypto-laundering-takedown-2026last covered —
• Awesome Motive CDN supply-chain attack
  incidentincident:awesome-motive-cdn-supply-chain-2026last covered —
• Crimenetwork relaunch takedown
  incidentincident:bka-crimenetwork-takedown-2026last covered —
• Brazil Cell Broadcast hijack
  incidentincident:brazil-cell-broadcast-hijacklast covered —
• BWH Hotels reservation breach
  incidentincident:bwh-hotels-breach-2026last covered —
• California Water Service breach (Handala)
  incidentincident:cal-water-handala-rtkbase-gnss-2026last covered —
• California AG v. 23andMe
  incidentincident:california-ag-sues-23andme-chrome-holding-2023-genetic-breachlast covered —
• Carnival Corporation breach
  incidentincident:carnival-corporation-5-99m-shinyhunters-breach-2026last covered —
• Cellebrite UFED use on Pivovarov
  incidentincident:cellebrite-ufed-russia-pivovarovlast covered —
• EFK federal cyber-governance audit
  incidentincident:ch-efk-federal-cyber-governance-auditlast covered —
• Checkmarx Jenkins plugin backdoor
  incidentincident:checkmarx-jenkins-ast-plugin-2026last covered —
• ChipSoft ransomware breach
  incidentincident:chipsoft-embargo-2026last covered —
• CISA/Nightwing GovCloud key exposure
  incidentincident:cisa-nightwing-contractor-aws-govcloud-keys-exposed-githublast covered —
• Clinical Diagnostics NMDL ruling
  incidentincident:clinical-diagnostics-nmdl-igj-2026last covered —
• CNIL IQVIA fine
  incidentincident:cnil-fines-iqvia-5m-health-data-warehouse-security-failureslast covered —
• Coupang PIPC record fine
  incidentincident:coupang-pipc-record-fine-2026last covered —
• Dashlane TOTP brute-force
  incidentincident:dashlane-totp-brute-force-2026last covered —
• Dream Market admin arrest
  incidentincident:dream-market-admin-arrest-2026-05last covered —
• Drupal core pre-patch warning (PSA-2026-05-18)
  incidentincident:drupal-core-highly-critical-pre-patch-warning-psa-2026-05-18last covered —
• Europol shadow-IT disclosure
  incidentincident:europol-shadow-it-2026last covered —
• France ANTS breach
  incidentincident:france-ants-breach-2026last covered —
• HCRG notification delay
  incidentincident:hcrg-medusa-notification-delaylast covered —
• POST Luxembourg outage (Huawei VRP zero-day)
  incidentincident:huawei-vrp-enterprise-router-zero-day-post-luxembourg-2025-olast covered —
• London Clinic insider caution
  incidentincident:ico-london-clinic-princess-wales-insiderlast covered —
• Markerstudy insider POCA confiscation
  incidentincident:ico-poca-confiscation-rizwan-manjra-markerstudy-off-hours-bulast covered —
• RAC insider POCA confiscation
  incidentincident:ico-rac-poca-2026last covered —
• Instructure (Canvas LMS) breach
  incidentincident:instructure-canvas-2026last covered —
• iRhythm data theft
  incidentincident:irhythm-data-theft-2026last covered —
• Jaguar Land Rover 2025 ransomware
  incidentincident:jaguar-land-rover-ransomware-2025last covered —
• Lithuania Centre of Registers breach
  incidentincident:lithuania-centre-of-registers-2026last covered —
• Maine breach-portal abuse
  incidentincident:maine-breach-portal-fraudulent-filings-2026last covered —
• Canton Zürich Baudirektion listing
  incidentincident:medusalocker-canton-zurich-baudirektion-2026last covered —
• Instagram AI-support account takeovers
  incidentincident:meta-instagram-ai-support-account-takeoverlast covered —
• Meta v. NSO contempt complaint
  incidentincident:meta-nso-whatsapp-contemptlast covered —
• Microsoft DCU Fox Tempest disruption
  incidentincident:microsoft-dcu-disrupts-fox-tempest-malware-signing-as-a-servilast covered —
• Madison Square Garden breach
  incidentincident:msg-shinyhunters-vishing-entralast covered —
• Munich LHM-Services breach
  incidentincident:munich-lhm-services-120k-student-records-darknet-insiderlast covered —
• NAIC PeopleSoft breach
  incidentincident:naic-peoplesoft-oracle-zero-day-shinyhunterslast covered —
• Navient fourth-party ransomware exposure
  incidentincident:navient-outside-law-firm-ransomware-8klast covered —
• NFSP ransomware
  incidentincident:nfsp-cpanel-ransomware-2026last covered —
• Nidec Chaun Choung ransomware
  incidentincident:nidec-chaun-choung-blackfield-ransomware-2026last covered —
• Nintendo TinyPulse breach
  incidentincident:nintendo-tinypulse-shadowbyt3last covered —
• Stark Industries hosting arrests
  incidentincident:nl-fiod-stark-industries-worktitans-mirhosting-800-servers-eu-sanctions-arrestlast covered —
• node-ipc backdoor
  incidentincident:node-ipc-supply-chain-2026-05last covered —
• Novo Nordisk data theft
  incidentincident:novo-nordisk-clinical-trial-breach-2026last covered —
• Nx Console extension compromise
  incidentincident:nx-console-vs-code-extension-18-95-0-compromised-stolen-publlast covered —
• OFAC Nobitex sanctions
  incidentincident:ofac-nobitex-iran-sanctions-2026last covered —
• One Medical legacy-storage breach
  incidentincident:one-medical-amazon-shinyhunterslast covered —
• OpenAI supply-chain exposure
  incidentincident:openai-tanstack-breach-2026-05last covered —
• Oxford CareerConnect breach
  incidentincident:oxford-careerconnect-breachlast covered —
• Polish water-treatment OT intrusion
  incidentincident:polish-water-ot-2026last covered —
• polyfill.io reactivation
  incidentincident:polyfill-io-domain-reactivates-http-401-credential-promptslast covered —
• PostHog AWS exploit
  incidentincident:posthog-aws-exploit-eu-us-cloud-credential-rotationlast covered —
• ServiceNow unauthenticated REST exposure
  incidentincident:servicenow-unauth-rest-api-2026last covered —
• Charter/Spectrum listing
  incidentincident:shinyhunters-charter-spectrum-listing-42m-claimlast covered —
• Silver Fox arrests
  incidentincident:silver-fox-arrests-china-2026last covered —
• Škoda online-shop breach
  incidentincident:skoda-shop-breach-2026last covered —
• Spanish doxer arrest
  incidentincident:spain-national-police-arrest-doxer-incibe-ag-civil-guardlast covered —
• First observed LLM-agent-driven intrusion
  incidentincident:sysdig-trt-llm-agent-driven-intrusion-marimo-cve-2026-39987last covered —
• Texas Parks & Wildlife vendor breach
  incidentincident:texas-parks-wildlife-vendor-breachlast covered —
• The Gentlemen leak-site listings (VSFS, DEVO-Tech)
  incidentincident:thegentlemen-vsfs-devo-tech-leak-site-listinglast covered —
• UK ICO Commissioner resignation
  incidentincident:uk-ico-commissioner-resignation-2026last covered —
• UK visa-portal lookalike exposure
  incidentincident:uk-visa-portal-s3-100k-passport-selfies-exposurelast covered —
• Ukrposhta disruption
  incidentincident:ukrposhta-2026-06last covered —
• Unimed hospital-billing breach
  incidentincident:unimed-german-hospitals-2026last covered —
• Vimeo breach (Anodot)
  incidentincident:vimeo-anodot-2026last covered —
• West Pharmaceutical ransomware
  incidentincident:west-pharma-8k-2026last covered —
• UN WFP Gaza registration breach
  incidentincident:wfp-gaza-sra-breach-2026last covered —
• Xsolis breach
  incidentincident:xsolis-healthcare-ai-breach-2026last covered —
• LG Berlin II Apobank PSD2 ruling
  policypolicy:apobank-psd2-ruling-2026last covered —
• CISA BOD 26-04
  policypolicy:cisa-bod-26-04last covered —
• EDPB Art. 33 breach-notification template
  policypolicy:edpb-gdpr-art33-breach-notification-template-2026last covered —
• ENISA SBOM Adoption State of Play 2026
  policypolicy:enisa-sbom-adoption-state-of-play-2026last covered —
• Europol mandate-expansion pause demand
  policypolicy:europol-mandate-libe-pause-2026last covered —
• Germany CRA implementation bill
  policypolicy:germany-cra-implementation-bill-2026last covered —
• Germany Cybersicherheitsstärkungsgesetz
  policypolicy:germany-cybersicherheitsstaerkungsgesetzlast covered —
• Germany KRITIS-Dachgesetz
  policypolicy:germany-kritis-dachg-2026last covered —
• npm staged publishing GA
  policypolicy:npm-staged-publishing-2falast covered —
• npm v12 install-scripts default-off
  policypolicy:npm-v12-install-scripts-default-off-2026last covered —
• Bauman 'Department No. 4' investigation
  reportreport:bauman-gru-pipeline-investigation-2026last covered —
• Elastic AAD Graph detection guidance
  reportreport:elastic-aadgraph-entra-detection-2026last covered —
• ESET Gamaredon 2025 annual paper
  reportreport:eset-gamaredon-2025last covered —
• 'Safeguarding Our Secrets' bulletin
  reportreport:five-eyes-safeguarding-our-secretslast covered —
• NCSC-CH G7 Évian pre-event advisory
  reportreport:g7-evian-2026last covered —
• Linux prctl process-masquerading analysis
  reportreport:linux-prctl-process-masqueradinglast covered —
• NCSC-CH assessment: AI in vulnerability management
  reportreport:ncsc-ch-ai-vuln-mgmt-2026last covered —
• NCSC-UK AI-vulnerability checklist
  reportreport:ncsc-uk-ai-vuln-10-questions-2026last covered —
• Sophos State of Identity Security 2026
  reportreport:sophos-identity-security-2026last covered —
• Swiss Threat Landscape Report (Swiss Post)
  reportreport:swiss-post-swiss-threat-landscape-report-2026last covered —
• Windows COM-abuse analysis (Talos)
  reportreport:talos-com-abuse-windows-threatslast covered —
• BirdCall
  tooltool:birdcalllast covered —
• Datadog Shai-Hulud scanner
  tooltool:datadog-shai-hulud-framework-2026-05last covered —
• PamDOORa
  tooltool:pamdoora-pam-backdoor-2026last covered —
• QLNX
  tooltool:qlnxlast covered —
• AI-orchestrated EDR-evasion lab
  tooltool:sophos-ai-edr-evasion-lablast covered —
• ZiChatBot
  tooltool:zichatbotlast covered —
• Adaptive AI worm PoC
  trendtrend:ai-adaptive-worm-utoronto-2026last covered —
• Apereo CAS OIDC-provider flaw
  trendtrend:apereo-cas-7-3-7-1-oidc-provider-coop-switzerland-reporterlast covered —
• Cloud-logging defence-evasion taxonomy
  trendtrend:cloud-logging-defense-evasion-unit42last covered —
• AI-agent FFmpeg zero-day batch
  trendtrend:depthfirst-ai-agent-21-ffmpeg-zero-dayslast covered —
• github.dev OAuth-token theft
  trendtrend:github-dev-oauth-token-theft-2026last covered —
• GCP API-key deletion delay
  trendtrend:google-cloud-api-key-deletion-delay-2026last covered —
• OpenClaw skills supply-chain surface
  trendtrend:kaspersky-openclaw-ai-agent-skills-supply-chainlast covered —
• LangGraph checkpointer SQLi→RCE chain
  trendtrend:langgraph-checkpointer-sqli-rce-2026last covered —
• M365 Android debug-flag OAuth theft
  trendtrend:m365-android-debug-flag-oauth-theft-2026last covered —
• Mautic 7.1.2/6.0.9 flaw set
  trendtrend:mautic-7-1-2-6-0-9-seven-authenticated-flaws-ssrf-sqlilast covered —
• Entra Agent ID AddRemoveCreds priv-esc
  trendtrend:red-canary-entra-agent-id-priv-esc-addremovecreds-all-rolelast covered —
• DICOM/Orthanc heap attack surface
  trendtrend:talos-dicom-pacs-orthanc-heap-attack-surfacelast covered —
• Windows Search URI NTLM leak
  trendtrend:windows-search-uri-ntlm-leak-2026last covered —
• xAI Grok Build CLI whole-repository/secrets exfiltration (July 2026)
  incidentincident:xai-grok-build-cli-repo-exfiltration-2026-07last covered —