Threat actor

Sapphire Sleet

In 3 briefs, most recently 30 July 2026. RSS for this tag

Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗

Coverage in DanSec Daily

  1. The Minnesota water system OT attack, OpenAI's Hugging Face breach expansion, and Cisco FMC zero-day CVE-2026-20316 exploitation.
  2. Gravity SMTP WordPress plugin flaw (CVE-2026-4020) exploited, Madison Square Garden breach claimed, Sapphire Sleet linked to Mastra npm supply chain attack.
  3. ShinyHunters leaks 13.5M McGraw Hill accounts, Rhysida ransomware breach hits 337,000 patients, and Windows zero-days are actively exploited.