Threat actor

Silk Typhoon

In 9 briefs, most recently 29 April 2026. RSS for this tag

Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗

Coverage in DanSec Daily

  1. The Vimeo breach via Anodot, LAPSUS$ leaking Checkmarx data, and the critical GitHub RCE flaw CVE-2026-3854.
  2. The TeamPCP supply chain attacks on Checkmarx and Bitwarden, ShinyHunters breaches of ADT and Medtronic, and new Windows privilege escalation flaws.
  3. Nevada state government cyberattack shuts offices; Salesloft Drift token breach exposes Salesforce data; Citrix NetScaler zero-day CVE-2025-7775 patched.
  4. DaVita's ransomware breach affecting nearly 2.7M people, Apple zero-day CVE-2025-43300, and Murky Panda cloud and telecom espionage.
  5. The DaVita ransomware breach affecting 2.7M people, Murky Panda's cloud supply-chain intrusions, and Apple's zero-day patch for CVE-2025-43300.
  6. ShinyHunters vishing breaches at Qantas, Allianz Life and Adidas; SafePay claims 3.5TB Ingram Micro theft; Microsoft SharePoint mass exploitation hits South …
  7. The Qantas breach (5.7M customers), Ingram Micro's SafePay ransomware attack, and McDonald's Paradox.ai hiring platform exposure.
  8. M&S ransomware by DragonForce, the SK Telecom breach exposing 27 million records, and the BaitTrap fake news investment fraud network.
  9. Ingram Micro ransomware outage, Qantas extortion over 6 million customer records, and a $140M theft from six Brazilian banks.