SectionExploits
Attacks seen in the wild, breaches and campaigns.
Phishing Campaign Hits Hotels in Europe and Asia with Node.js Implant
Microsoft has flagged an active phishing operation targeting hospitality organizations since April 2026, delivering a Node.js-based implant through photo-themed ZIP file lures.
Polymarket Hit by Supply Chain Attack, $3 Million in Crypto Stolen
A compromised third-party vendor injected a malicious script into Polymarket's frontend, enabling attackers to steal roughly $3 million from at least 11…
Klue Supply Chain Breach Widens as Extortion Takes a Chaotic Turn
Nearly two dozen confirmed victims have emerged from the Klue supply chain attack, while the threat actor behind the breach has reportedly…
PTC Windchill Flaw Exploited in the Wild, CISA Issues KEV Alert
A remote code execution vulnerability in PTC Windchill and FlexPLM is being actively exploited to deploy persistent webshells, marking the first confirmed…
Russia-Linked Campaign Targeted Messaging Accounts of Officials Across Three Countries
The SSU and FBI have jointly exposed a sustained Russian intelligence operation that used fraudulent support messages to compromise the messaging accounts…
KDDI Breach Exposes Up to 14.2 Million Email Credentials Across Six ISPs
Japanese telecom giant KDDI disclosed that attackers exploited a third-party software vulnerability to access email systems shared by five ISP partners, potentially…