SectionExploits
Attacks seen in the wild, breaches and campaigns.
Quest Diagnostics Takes Lab Results System Offline After Breach
Quest Diagnostics paused its Quanum Lab Services Manager platform after discovering unauthorized access, warning that patient data may have been accessed.
Rank Math PRO Plugin Backdoored in Supply-Chain Attack on WordPress Sites
A malicious build of the Rank Math PRO SEO plugin was briefly distributed from the vendor's own site, planting persistent backdoors and…
ConnectWise Cloud Backup Breach Hits Microsoft 365 Tenants via Stolen App Identities
Attackers authenticated directly as ConnectWise's Cloud Backup application using its secret, bypassing MFA and gaining broad access to mail, files, and Teams…
ConnectWise Disables Cloud Backup App IDs After M365 Tenant Breach
ConnectWise has suspended seven application identities, including ConnectWise Cloud Backup, after attackers used them to gain unauthorized access to customer Microsoft 365…
Attackers Exploited Collabora RCE in Nextcloud Weeks Before CVE Went Public
Threat actors began planting PHP web shells on Nextcloud servers via a flaw in the built-in Collabora CODE app in mid-September, more…
Cyberattack on Refrigeration Controllers Spoils Food at European Supermarkets
Attackers compromised refrigeration control systems, forcing freezers and refrigerators across hundreds of supermarkets to defrost, raising fresh concerns about the security of…
Hackers Hijack Danfoss Controllers, Heat French Supermarket Fridges to 50°C
Attackers remotely seized refrigeration controllers at hundreds of French supermarkets overnight, spiking temperatures and forcing stores to dump spoiled food.
FBI Nets Another ShinyHunters Suspect Tied to Jobs Portal Breach
Director Kash Patel says agents arrested a second co-conspirator in the ShinyHunters network days after a prior arrest, as the bureau presses…
FBI Seizes Domains Behind Chinese Flax Typhoon Hacking Tools MicroScan and FishHub
The FBI took down infrastructure supporting two China-linked hacking platforms used to scan for vulnerabilities and breach critical infrastructure in the US…
Ransomware Attack on Japan’s IDCF Cloud Hits 495 Government and Business Clients
A ransomware attack on IDC Frontier's IDCF Cloud knocked out its East Japan Region 1 data center cluster, with the attacker claiming…
FBI Warns FortiBleed Attacks Still Active, Locking Admins Out of FortiGate VPNs
The FBI says attackers are using leaked Fortinet credentials and offline password cracking to hijack FortiGate admin accounts, feeding ransomware affiliates like…
ShinyHunters Suspect ‘Rey’ Detained in Jordan, Reportedly Aiding FBI Manhunt
Jordanian authorities reportedly detained Saif al-Din Khader, known online as Rey, who is said to be cooperating with the FBI to identify…