ALPHV/BlackCat
In 12 briefs, most recently 15 July 2026. RSS for this tag
Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗
Coverage in DanSec Daily
- SonicWall SMA 1000 zero-days, Microsoft's record 622-flaw Patch Tuesday and nearly 300 fake GitHub infostealer repos.
- ShareFile customers told to shut down storage controllers after an external threat; WP-SHELLSTORM backdoors thousands of WordPress sites; Zimbra critical flaw.
- Trellix source code breach, Instructure Canvas cyber incident and CopyFail Linux root flaw (CVE-2026-31431).
- Roblox credential theft via fake game enhancements, an actively exploited cPanel zero-day, and the Mini Shai-Hulud SAP npm supply chain attack.
- Covers the France Titres government data breach, the $290M Kelp DAO crypto heist tied to North Korean actors, and over 1,500 exposed Perforce P4 servers.
- The SocksEscort proxy botnet takedown, Telus Digital and Loblaw breaches, and Veeam's seven critical Backup & Replication flaws.
- Brightspeed customer data claimed stolen by Crimson Collective, fake AITOPIA Chrome extensions harvesting AI chats, and critical n8n 'Ni8mare' RCE (CVSS 10.0).
- Brightspeed breach claimed by Crimson Collective, Zestix stealing data from ShareFile, Nextcloud and OwnCloud, and critical n8n and MongoDB flaws.
- Covenant Health breach tied to Qilin ransomware, Fortinet firewalls hit by a five-year-old 2FA bypass, and $8.5M stolen from Trust Wallet users.
- ESA confirms breach of external servers, Korean Air data theft tied to Oracle EBS hack, and BlackCat ransomware pleas by ex-Sygnia and DigitalMint staff.
- Miljödata breach affecting 1.5M, Nikkei Slack compromise and actively exploited Post SMTP WordPress flaw.
- Balancer DeFi $120M hack, Everest ransomware claims, and XWiki RCE exploitation.