SectionExploits
Attacks seen in the wild, breaches and campaigns.
US Unseals Indictment, Offers $10M Bounty Over Russian Bulletproof Hosting Ring
Federal prosecutors have unsealed charges against three Russian nationals accused of running Media Land and ML Cloud, bulletproof hosting services that allegedly…
US Treasury Sanctions VPN Provider and Cryptor Seller Tied to Ransomware Gangs
OFAC designated First VPN Service, its administrator, and a Belarusian crypter seller for supplying anonymity and detection-evasion tools that fueled ransomware attacks…
Malicious Jscrambler npm Package Backdoored With Infostealer for Two Hours
A threat actor published a rogue version of the Jscrambler npm package using stolen publishing credentials, planting an infostealer that harvested developer…
Australia Warns of Global Webshell Campaign Hitting Vulnerable CMS Platforms
The Australian Cyber Security Centre says a large-scale exploitation campaign is deploying webshells across WordPress, Craft CMS, Joomla and other platforms worldwide,…
Ex-Ransomware Negotiator Sentenced to 70 Months for Secretly Aiding BlackCat
A former DigitalMint negotiator who fed victim insurance limits and negotiation strategy to BlackCat operators has been sentenced to nearly six years…
Mount Royal University Hit by Data Theft and Wiping Attack
Calgary's Mount Royal University confirmed hackers stole files from its H drive and wiped a separate departmental drive in a June 17…
Accenture Confirms Breach After Hacker Lists 35 GB of Stolen Data
A threat actor known as '888' claims to have exfiltrated 35 GB of source code, credentials, and configuration files from Accenture, and…
Max-Severity Adobe ColdFusion Flaw Exploited Within Hours of Disclosure
A critical remote code execution vulnerability in Adobe ColdFusion is under active attack, with exploitation observed less than two hours after Adobe…
Japanese Teen Arrested for Cyberattack That Canceled 46,000 Anime Subscriptions
A 15-year-old near Tokyo allegedly exploited a server vulnerability in Bandai Channel, using a ChatGPT-assisted tool to mass-cancel user accounts and force…
Medtronic Notifies 3.8 Million Patients After ShinyHunters-Linked Breach
The world's largest medical device maker has begun notifying nearly 4 million people that hackers accessed sensitive personal and health-related data from…
Google Project Zero Chains Pixel 9 Sandbox Escape via BigWave Kernel Driver
A Project Zero researcher found three bugs in the Pixel 9's BigWave AV1 hardware driver, one of which enables a full mediacodec…
Google and FBI Dismantle NetNut Botnet Spanning Millions of Android Devices
A coordinated operation involving Google, the FBI, and industry partners has significantly degraded NetNut, a residential proxy network built on more than…