SectionExploits
Attacks seen in the wild, breaches and campaigns.
Warlock Ransomware Exploits SharePoint Flaws to Hit Water, Telecom, Government Targets
The China-linked Warlock group has breached a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint…
Frontline Education Breach Exposes School District Employee SSNs
Attackers exploited a vulnerability in a third-party software product to access Frontline Education's environment, stealing Social Security numbers and contact details of…
Microsoft’s X Account Hijacked to Push Clippy-Themed Crypto Token
Attackers briefly took over Microsoft's 13-million-follower X account to promote a fake Clippy cryptocurrency, the latest in a string of high-profile account…
Warlock Ransomware Keeps Exploiting SharePoint Flaws in Critical Infrastructure Hits
Symantec reports the China-linked Storm-2603 group behind Warlock ransomware is still weaponizing SharePoint vulnerabilities, hitting water, telecom, government, and university targets across…
Bitget Confirms Zero-Day in Third-Party Security Tools Fueled $387.5M Heist
Forensic investigations by SlowMist and Mandiant trace the crypto exchange breach to a zero-day in third-party security appliances, with attackers moving laterally…
Citrix NetScaler Zero-Days Exploited to Deploy Web Shells, Gain Root Access
Attackers exploited two Citrix NetScaler zero-days, including a critical DTLS memory overflow bug, to plant custom web shells and tunneling malware weeks…
Keio Corporation Confirms Ransomware Attack Disrupted Hospitality Systems
The Japanese railway and hotel operator shut down its network after a weekend ransomware attack hit servers tied to its hospitality business,…
US Army Soldier Sentenced to 70 Months for Extorting Telecom Giants
Cameron John Wagenius, known online as 'kiberphant0m,' used a self-built SSH brute-forcing tool to steal credentials and extort at least 10 tech…
Bitget Restarts Bitcoin Withdrawals After $387.5 Million North Korea-Linked Heist
The crypto exchange has resumed BTC withdrawals following a suspected North Korean breach that drained hot and warm wallets across seven blockchains,…
ShinyHunters Bypasses WAFs to Revive Oracle PeopleSoft Attacks
Google's Mandiant says the extortion gang UNC6240 is using percent-encoded URL paths to slip past web application firewalls and reach the vulnerable…
Kiteworks Tells Customers Worldwide to Shut Down Servers for 6 Hours Over Possible Zero-Day
Secure file-sharing vendor Kiteworks urged customers globally to power down systems for a six-hour window after receiving law enforcement intelligence of a…
Bitget Loses $351.6 Million in Suspected North Korean Exchange Hack
Cryptocurrency exchange Bitget confirmed hackers drained hot and warm wallets across seven blockchains, with attackers spoofing transaction data to hijack its authorization-signing…