LAPSUS$
In 8 briefs, most recently 18 May 2026. RSS for this tag
Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗
Coverage in DanSec Daily
- Grafana breach claimed by Coinbase Cartel, NGINX flaw CVE-2026-42945 exploited in the wild, and MiniPlasma Windows SYSTEM privilege escalation zero-day.
- The Vimeo breach via Anodot, LAPSUS$ leaking Checkmarx data, and the critical GitHub RCE flaw CVE-2026-3854.
- Drift DEX's $285M North Korea-attributed heist, the Axios npm supply chain compromise, and the TeamPCP campaign hitting European Commission cloud systems.
- The EU Commission cloud breach by TeamPCP, the $280M Drift Protocol heist by North Korean actors, and Stryker's data-wiping attack.
- LeakBase admin arrest, HackerOne employee data breach via Navia, and Microsoft 365 device code phishing hitting 340+ organizations.
- Infinite Campus and HackerOne breaches, TeamPCP's LiteLLM PyPI supply chain attack, and malvertising abusing a Huawei driver to kill EDR.
- The Salesforce Gainsight breaches by ShinyHunters, the CrowdStrike insider leak, and the actively exploited Oracle Identity Manager flaw (CVE-2025-61757).
- Miljödata breach affecting 1.5M, Nikkei Slack compromise and actively exploited Post SMTP WordPress flaw.