Salt Typhoon
In 17 briefs, most recently 15 May 2026. RSS for this tag
Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗
Coverage in DanSec Daily
- Foxconn ransomware by Nitrogen, OpenAI breach via TanStack supply chain attack, and Cisco SD-WAN zero-day CVE-2026-20182 exploited in the wild.
- The Coupang breach (33.7M customers), Akira's Fieldtex claim, and the exploited Gladinet CentreStack and React2Shell (CVE-2025-55182) flaws.
- React2Shell exploitation, Gladinet CentreStack hard-coded key attacks, WinRAR CVE-2025-6218 abuse, and Fortinet auth bypass patches in this security news brief.
- React2Shell RCE exploited in breaches at 30 organisations, Kohler smart toilet camera encryption flaws, and 30+ AI IDE vulnerabilities.
- F5 breach, Muji ransomware outage via Askul, AWS two-hour outage, and Salt Typhoon's Snappybee attack on a European telecom, plus GlassWorm and WatchGuard …
- The npm supply chain attack, the Salesloft Drift breach hitting Salesforce, and GhostAction's theft of 3,325 CI secrets from GitHub workflows.
- Covers the TransUnion breach (4.4M people), MathWorks ransomware theft, and the Nx npm supply chain attack that leaked 2,300+ credentials via AI-powered …
- Miljödata breach disrupts 200+ Swedish municipalities; Citrix NetScaler flaw CVE-2025-7775 exploited; Salesforce data theft via Salesloft Drift OAuth tokens.
- Salt Typhoon's long-running access to US National Guard systems and CrowdStrike outage hit 750+ US hospitals; PoisonSeed bypasses FIDO2 MFA via WebAuthn …
- The $27M BigONE crypto exchange breach, Salt Typhoon's nine-month Army National Guard intrusion, and Cisco ISE CVE-2025-20337 (CVSS 10) with other …
- Co-op's 6.5M member data theft, UNFI's up to $400M sales hit and Louis Vuitton breaches tied to ShinyHunters.
- Hawaiian Airlines hit by Scattered Spider, 27%+ of UK firms report cyber incidents, and Salt Typhoon targets a Canadian telecom via Cisco flaws.
- Nucor's data-theft breach, a trojanized SonicWall NetExtender VPN client, Microsoft Exchange login-page injections, and APT28 Signal-based malware campaigns in …
- The McLaren Health Care breach (743,000 patients), Citrix NetScaler patches, and Salt Typhoon's breach of Canadian telecoms via a Cisco flaw.
- Scattered Spider attacks on Marks & Spencer and Co-op, the UK ICO fine against 23andMe over its 2023 breach, and Salt Typhoon's claimed attack.
- Salt Typhoon breaches Viasat, Krispy Kreme data theft of 160,000+ people, and Paragon Graphite spyware used against European journalists.
- Marks & Spencer cyberattack halts online orders, SAP NetWeaver zero-day exploited with web shells, and Craft CMS zero-days hit servers. Plus MTN breach and Salt …