CrowdStrike
In 17 briefs, most recently 8 September 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Coverage in DanSec Daily
- Mathspace breach hits over 1 million users, Trezor's ShipMonk breach widens to 81,000 customers, and Adobe Commerce zero-day StyleSmuggler is patched.
- Mathspace breach hits over 1M users, MikroTik RouterOS and N-able N-central zero-days exploited, and North Korean HAProxy backdoor campaign in South Korea.
- IDScan breach exposing 153M driver's licenses, rogue AI agents hijacking a German wiki, and actively exploited Citrix NetScaler flaw.
- Softaculous BGP hijack delivers malicious Virtualizor update; Dropbox breached via Lenovo ID flaw; 153M US/Canadian driver's license scans for sale on dark web.
- McKesson breach claimed by ShinyHunters (284M records), Berlin city ransomware by Rhysida, and ServiceNow critical code injection patches.
- ADT breach by ShinyHunters, UK Biobank medical data sold on Alibaba, and a Cisco Firepower Firestarter backdoor compromise.
- Drift DEX's $285M North Korea-attributed heist, the Axios npm supply chain compromise, and the TeamPCP campaign hitting European Commission cloud systems.
- Kyowon ransomware, Fortinet FortiSIEM RCE exploits, the RedVDS takedown, and the AISURU/Kimwolf botnet disruption in this January 2026 brief.
- Central Maine Healthcare and Endesa breaches, Microsoft's January 2026 Patch Tuesday zero-days, and GoBruteforcer botnet hitting crypto projects.
- The Oracle EBS extortion campaign hitting Cox, Canon and Mazda, the Shai-Hulud npm malware wave, and Harvard's voice phishing breach, plus new zero-days.
- The Salesforce Gainsight breaches by ShinyHunters, the CrowdStrike insider leak, and the actively exploited Oracle Identity Manager flaw (CVE-2025-61757).
- Salesforce customer data theft by ShinyHunters, Clop's Oracle EBS zero-day, and Redis 'RediShell' RCE flaw.
- JLR extends shutdown after cyberattack; Microsoft and Cloudflare dismantle RaccoonO365 phishing network; DHS misconfigured data hub exposes sensitive …
- The npm supply chain attack, the Salesloft Drift breach hitting Salesforce, and GhostAction's theft of 3,325 CI secrets from GitHub workflows.
- Salt Typhoon's long-running access to US National Guard systems and CrowdStrike outage hit 750+ US hospitals; PoisonSeed bypasses FIDO2 MFA via WebAuthn …
- Victoria's Secret earnings delay, Coinbase data breach via bribed TaskUs staff, and Scattered Spider's attacks on UK retailers Marks & Spencer and Co-op.
- Cartier and The North Face breaches, a Chrome emergency zero-day patch, and Qualcomm Adreno zero-days exploited in targeted attacks.