ClickFix
In 9 briefs, most recently 2 September 2026. RSS for this tag
Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗
Coverage in DanSec Daily
- Aesto Health breach exposes 9.5M patients; SonicWall SMA 1000 zero-days exploited; Sality botnet dismantled by DOJ and partners.
- Oracle database hack via khunt toolkit, Snowflake data theft guilty plea, and actively exploited JetBrains TeamCity RCE.
- Kodak breach by ShinyHunters, iRhythm ransom theft, and three Fortinet FortiSandbox flaws actively exploited across up to 30,000 devices.
- The CPUID supply chain attack, Hims health data breach, Storm-2755 payroll hijacking, and Juniper Junos OS critical flaw patches.
- The Oracle EBS extortion campaign hitting Cox, Canon and Mazda, the Shai-Hulud npm malware wave, and Harvard's voice phishing breach, plus new zero-days.
- JLR's £196M cyberattack losses, RondoDox botnet exploiting unpatched XWiki flaw, and guilty pleas over North Korean IT worker infiltration.
- Oracle EBS Cl0p extortion hits nearly 30 firms incl. Logitech and Washington Post; CBO confirms breach; Konni abuses Google Find Hub.
- China accuses NSA of attacking National Time Service Center; Experian Netherlands fined €2.7M under GDPR; TikTok ClickFix lures spread infostealers.
- Salesforce data theft by ShinyHunters via Salesloft Drift tokens, Shai-Hulud NPM supply chain worm, and Chrome zero-day CVE-2025-10585.