Mustang Panda
In 11 briefs, most recently 30 June 2026. RSS for this tag
Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗
Coverage in DanSec Daily
- Nissan and NAIC breached via Oracle PeopleSoft flaw tied to ShinyHunters; Djinn Stealer spreads through SimpleHelp CVE-2026-48558; 236,000 Uni-App sites abused …
- The Polish energy grid cyberattack attributed to ELECTRUM, the eScan update server breach, and the FBI seizure of the RAMP cybercrime forum.
- Nike and SoundCloud breaches, ShinyHunters phishing of 100+ organizations, and the exploited Microsoft Office zero-day CVE-2026-21509.
- ESA confirms breach of external servers, Korean Air data theft tied to Oracle EBS hack, and BlackCat ransomware pleas by ex-Sygnia and DigitalMint staff.
- Coupang's $1.17B breach compensation, Aflac's 22M-person data breach and the actively exploited MongoBleed MongoDB flaw.
- The Ribbon Communications breach, Cisco IOS XE webshell attacks, the Motex Lanscope zero-day exploited by Tick, and Conti extradition news.
- Npm supply chain compromise of 40+ packages, KillSec ransomware breach of a Brazilian healthcare software provider, and Google's LERS account abuse.
- Miljödata breach disrupts 200+ Swedish municipalities; Citrix NetScaler flaw CVE-2025-7775 exploited; Salesforce data theft via Salesloft Drift OAuth tokens.
- Ahold Delhaize breach hits 2.2M people, Cloudflare mitigates record DDoS, Russia throttles Cloudflare, Citrix Bleed 2 exploited.
- SonicWall SMA VPN devices under active attack, Apple zero-days in targeted spyware attacks, and Smishing Triad toll SMS phishing in US and UK.
- Ahold Delhaize breach by INC ransomware, Darcula-enabled SMS phishing spike, and Erlang/OTP SSH and Windows NTLM flaws.