Live cyber incidents

Threats Incidents Live News
Status
Sector
Type
Region
Active 22 incidents
Attackers exploit JFrog Artifactory servers Sep 11, 2026
Fake Chrome VPN extensions reroute browser traffic Sep 11, 2026
PolinRider malware campaign hits open source packages Sep 11, 2026
ExfilSquad claims mass breach of UK police, 14 firms Sep 11, 2026
Iran-linked hackers use fake coding tests to infect developers Sep 10, 2026
Attackers breach N-able N-central RMM servers Sep 10, 2026
Attackers exploit Progress LoadMaster zero-day flaw Sep 10, 2026
PaperCut print software zero-day exploited in attacks Sep 10, 2026
ShinyHunters extortion wave hits Baxter, Alcon, Carhartt and more Sep 10, 2026
Malicious npm packages hit Joyfill developer library Sep 10, 2026
Vishing gang hijacks Microsoft 365 accounts via fake passkeys Sep 9, 2026
LiteLLM supply chain hack still leaking stolen keys Sep 8, 2026
Fake Claude Code installer campaign spreads MacSync stealer Sep 8, 2026
RMM phishing campaign spreads across 46 countries Sep 6, 2026
GenieLocker ransomware hits Russian manufacturers Sep 5, 2026
Fire Ant hackers turn Cisco routers into spy tools Sep 3, 2026
Fake IT-support Teams calls spread Chaos ransomware Sep 3, 2026
Attackers exploit Zimbra mail server flaw in the wild Sep 1, 2026
Cl0p targets PTC Windchill and FlexPLM in data theft spree Aug 30, 2026
Attackers exploit chain of on-premises SharePoint flaws Aug 26, 2026
Hackers hijack hotel Wi-Fi to steal Microsoft 365 logins Aug 26, 2026
Manic Android malware targets Ukrainian banks and IDs Aug 22, 2026
Contained 23 incidents
Unlimited Systems breach exposes 3.8 million patients Sep 10, 2026
OpenAI's own AI agents breached Hugging Face Sep 10, 2026
OpenAI agents breach Hugging Face production systems Sep 9, 2026
Anthropic's Claude AI accidentally breached three companies Sep 9, 2026
Metabase attack steals Framework and Tally customer data Sep 8, 2026
FBI and Google dismantle NetNut Popa proxy botnet Sep 8, 2026
Lenovo ID flaw exposes 5,000 Dropbox accounts Sep 7, 2026
ShipMonk breach exposes data of 13,689 Trezor customers Sep 7, 2026
Malicious npm package steals developer and cloud secrets Sep 6, 2026
Coder registry served credential-stealing modules Sep 4, 2026
CEVA breach hits European retailers and Steam buyers Sep 4, 2026
ChainDrop worm hijacks 1,300+ npm packages Aug 31, 2026
AsyncAPI npm packages hit by credential-stealing malware Aug 30, 2026
Twelve organizations hit by npm package worm Aug 28, 2026
Meta AI model breaches company during security test Aug 25, 2026
Hacked Adform ad script hijacks crypto wallet addresses Aug 22, 2026
North Korea-linked hackers poison arrayref Rust crate Aug 21, 2026
North Korean group linked to axios, debug, chalk npm hacks Aug 20, 2026
SafePal data breach exposes 40,000 customers Aug 19, 2026
Analog Devices confirms data breach after June intrusion Aug 19, 2026
ShinyHunters breach 100+ orgs via Oracle PeopleSoft flaw Aug 18, 2026
ShinyHunters breach exposes 1.6 million RingCentral accounts Aug 15, 2026
AsyncAPI packages hijacked to steal developer credentials Aug 7, 2026
Dormant 29 incidents
Hackers exploit unpatched Fastjson zero-day in Java apps Sep 8, 2026
Attackers exploit SimpleHelp bug to plant stealer malware Sep 3, 2026
Attackers probe unpatched GeoServer SQL injection zero-day Aug 27, 2026
Chinese group UAT-10147 hijacks web servers with AI tools Aug 26, 2026
North Korea's Sapphire Sleet tied to npm package hijacks Aug 21, 2026
Hacker sells stolen Azure employee data from Fortune 500 firms Aug 20, 2026
Medusa ransomware group has hit 500+ organizations Aug 18, 2026
BigBear 2.0 phishing kit bypasses Microsoft 365 MFA Aug 17, 2026
Iran-linked Cavern Manticore spies on Israeli IT and gov networks Aug 17, 2026
Iran-linked group hits Israeli IT providers and government Aug 17, 2026
North Korean hackers target Web3 job seekers with malware Aug 14, 2026
Fake Zoom installers spread Overlord spyware Aug 8, 2026
SplitVPN breach exposes millions despite no-logs claim Aug 7, 2026
XCSSET v40 malware infects macOS developers via Xcode Aug 6, 2026
Paidwork gig platform breach exposes 23 million users Aug 4, 2026
Fake npm packages spread spyware to Alibaba developers Aug 3, 2026
Russian spies hijack hotel Wi-Fi to steal logins Aug 1, 2026
Attackers exploit Arista VeloCloud Orchestrator flaw Jul 29, 2026
Craneware healthcare software vendor data breach Jul 22, 2026
SpaceX and Starlink X accounts hijacked for crypto scam Jul 16, 2026
Klue OAuth breach lets Icarus steal Salesforce customer data Jul 16, 2026
China-linked Daxin spyware resurfaces in Taiwan factory Jul 15, 2026
Hackers exploit Joomla Balbooa Forms plugin as zero-day Jul 13, 2026
Accenture confirms breach after hacker sells source code Jul 11, 2026
China-linked group expands router-hijacking spy network Jul 8, 2026
Mass FortiGate credential leak fuels ransomware, UK breach Jul 8, 2026
Attackers exploit Cisco phone system flaw, plant webshells Jul 2, 2026
Phishing campaign hits hotel staff across Europe and Asia Jun 30, 2026
Commodity malware campaign targets gamers and organizations Jun 1, 2026
Resolved 3 incidents
Sakura Internet breach may expose 1.36 million accounts Sep 10, 2026
23andMe breach exposes data of almost 7 million Aug 27, 2026
Global police takedown of SocGholish, Amadey, StealC malware Jun 29, 2026