Live cyber incidents

Threats Incidents Live News
Status
Sector
Type
Region
Active 7 incidents
Attackers exploit JFrog Artifactory servers Sep 11, 2026
Fake Chrome VPN extensions reroute browser traffic Sep 11, 2026
PolinRider malware campaign hits open source packages Sep 11, 2026
Hackers exploit unpatched Magento zero-day StyleSmuggler Sep 10, 2026
Attackers breach N-able N-central RMM servers Sep 10, 2026
Malicious npm packages hit Joyfill developer library Sep 10, 2026
LiteLLM supply chain hack still leaking stolen keys Sep 8, 2026
Contained 11 incidents
Malicious npm package steals developer and cloud secrets Sep 6, 2026
Coder registry served credential-stealing modules Sep 4, 2026
ChainDrop worm hijacks 1,300+ npm packages Aug 31, 2026
BadBox malware infects DoFun car head units Aug 30, 2026
AsyncAPI npm packages hit by credential-stealing malware Aug 30, 2026
Twelve organizations hit by npm package worm Aug 28, 2026
QuickFox VPN installer hacked to plant FDMTP backdoor Aug 24, 2026
Hacked Adform ad script hijacks crypto wallet addresses Aug 22, 2026
North Korea-linked hackers poison arrayref Rust crate Aug 21, 2026
North Korean group linked to axios, debug, chalk npm hacks Aug 20, 2026
AsyncAPI packages hijacked to steal developer credentials Aug 7, 2026
Dormant 6 incidents
Hackers exploit unpatched Fastjson zero-day in Java apps Sep 8, 2026
Attackers exploit SimpleHelp bug to plant stealer malware Sep 3, 2026
North Korea's Sapphire Sleet tied to npm package hijacks Aug 21, 2026
XCSSET v40 malware infects macOS developers via Xcode Aug 6, 2026
Fake npm packages spread spyware to Alibaba developers Aug 3, 2026
Klue OAuth breach lets Icarus steal Salesforce customer data Jul 16, 2026
Resolved 1 incident
Trojanized NuGet package rigged Digitain betting games Jul 23, 2026