Kaspersky
In 14 briefs, most recently 18 September 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Coverage in DanSec Daily
- Gyazo breach hits 23M user records, Brevo supply chain attack via stolen Cloudflare key plants ClickFix scripts on about 100,000 sites, plus Unbound and Check …
- Berlin city data theft by Rhysida, McKesson breach claimed by ShinyHunters, and Cronos restart after $74M Tectonic exploit.
- McKesson breach claimed by ShinyHunters (284M records), Berlin city ransomware by Rhysida, and ServiceNow critical code injection patches.
- ShinyHunters breach of Instructure's Canvas disrupts colleges; RansomHouse claims Trellix breach; Daemon Tools supply chain attack contained.
- Bitcoin Depot $3.6M crypto theft, Signature Healthcare hospital cyberattack, and TeamPCP supply chain breach exposing Cisco source code.
- Eurail data breach, Poland energy wiper attacks, and a critical Dell RecoverPoint zero-day (CVE-2026-22769) exploited by Chinese state hackers UNC6201.
- PDVSA cyberattack disrupts Venezuelan oil exports, SoundCloud breach hits 20% of users, and Urban VPN extension harvests AI chatbot conversations.
- Cloudflare's record 29.7 Tbps Aisuru botnet DDoS, the Oracle E-Business Suite Clop campaign hitting universities, and WordPress King Addons plugin takeovers.
- The Salesforce Gainsight breaches by ShinyHunters, the CrowdStrike insider leak, and the actively exploited Oracle Identity Manager flaw (CVE-2025-61757).
- Dante spyware from Memento Labs (ex-Hacking Team) tied to ForumTroll APT, plus the new Reaper open-source app security testing framework and binary analysis …
- Iran-linked UNC1549 breaches European telecoms, Gamaredon and Turla team up on Ukraine, and ShinyHunters tied to healthcare breaches affecting 600K+ people.
- Victoria's Secret earnings delay, Coinbase data breach via bribed TaskUs staff, and Scattered Spider's attacks on UK retailers Marks & Spencer and Co-op.
- The Coinbase insider data breach and extortion attempt, SAP NetWeaver exploitation by BianLian and RansomExx, and Samsung MagicINFO Mirai attacks.
- SK Telecom's USIM breach and SIM replacements, APT28's attribution by France, and the AirBorne AirPlay zero-click RCE flaws.