Lazarus Group
In 28 briefs, most recently 4 November 2026. RSS for this tag
Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗
Coverage in DanSec Daily
- Binance $6.34B theft by North Korean actors, Beget cloud wipe, and a cPGuard supply chain backdoor.
- PHP2Shell RCE flaws exploited in the wild, Keystone destroys 18,835 hardware wallets after website hack, and ENGIE confirms customer data breach.
- Railway secrets exposure, Onamae VPS malware on 26,739 servers, LiteLLM supply chain attack, and critical PHP2Shell RCE flaws under mass exploitation.
- Lazarus Group's FlashHole watering-hole campaign, Tor exit relay hijacking, and Zeabur's second breach in two months.
- The $351.6M Bitget crypto theft by suspected North Korean actors, the Roundcube CVE-2026-48842 exploitation, and Salesforce Agentforce 'SalesBleed' flaws.
- Ceva Logistics warehouse cyberattack, LiteLLM supply chain breach hitting 2,500+ orgs, and Lazarus Group Windows zero-day exploit.
- Anthropic's Claude agent breaching real organizations, the Brinks Home ShinyHunters breach, and a critical JetBrains TeamCity authentication bypass …
- 7-Eleven breach by ShinyHunters, Ghost CMS CVE-2026-26980 exploited for ClickFix attacks on 700+ sites, and TeamPCP supply chain campaign reaching GitHub.
- ADT breach by ShinyHunters, UK Biobank medical data sold on Alibaba, and a Cisco Firepower Firestarter backdoor compromise.
- KelpDAO's $290M crypto theft tied to Lazarus Group, Vercel breach via compromised OAuth tokens, and a Scattered Spider leader's guilty plea.
- The $285M Drift hack by North Korean actors, Fortinet FortiClient EMS exploitation (CVE-2026-35616), and the BKA unmasking of REvil ransomware operators.
- The EU Commission cloud breach by TeamPCP, the $280M Drift Protocol heist by North Korean actors, and Stryker's data-wiping attack.
- Stryker wiper attack wiping ~80,000 devices, Lazarus linked to Bitrefill breach, and PolyShell Magento RCE flaw.
- ShinyHunters breaches at Wynn Resorts and CarGurus, a worm-like Sandworm_Mode npm supply chain attack, and Reddit's £14.47M UK fine.
- Odido breach hits 6 million customers, BeyondTrust RS/PRA CVE-2026-1731 exploited within 24 hours of PoC, and Chrome extensions steal Meta Business Suite …
- The Odido breach exposing 6.2M customers, Qilin's Conpet S.A. data theft, and BeyondTrust and Ivanti EPMM exploitation, plus threat actor and policy news.
- The French postal service cyberattack, the Nissan and Red Hat GitLab data exposure, and the Baker University breach affecting 53,000 people.
- Coupang breach exposing 33.7M users, Shai-Hulud 2.0 npm attack leaking 400,000 developer secrets, and North Korean threat actors renting engineers' identities …
- Balancer DeFi $120M hack, Everest ransomware claims, and XWiki RCE exploitation.
- AWS DNS outage, WSUS CVE-2025-59287 under active exploitation, and Lazarus Group fake job lures against European drone firms.
- Toys R Us Canada data breach, Collins Aerospace airport check-in disruption, and Lazarus Group's Operation DreamJob against European defense firms.
- Magento/Adobe Commerce SessionReaper (CVE-2025-54236) mass compromise, MuddyWater Phoenix backdoor campaign, and SharePoint ToolShell exploitation by Chinese …
- Salesloft Drift OAuth breach hits Cloudflare, Palo Alto Networks and Zscaler; Jaguar Land Rover cyberattack halts production; WhatsApp zero-day exploited …
- Hawaiian Airlines hit by Scattered Spider, 27%+ of UK firms report cyber incidents, and Salt Typhoon targets a Canadian telecom via Cisco flaws.
- Iran state TV hack, $11M BitoPro crypto theft by Lazarus Group, Aflac breach tied to Scattered Spider, and record 7.3 Tbps DDoS attack.
- Harrods cyberattack amid UK retail spree, Commvault zero-day CVE-2025-3928 breach, and NullBulge's Disney Slack data theft guilty plea.
- Healthcare breaches dominate: Yale New Haven Health exposes 5.5M patients, Interlock leaks DaVita data, and Lazarus Group targets South Korean firms with …
- Blue Shield of California exposed 4.7M members' health data to Google analytics; NLRB data exfiltration alleged by a whistleblower; Lazarus Group's $137M TRON …