DanSec

Vendor

Meta

In 74 briefs, most recently 6 November 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Known exploited (CISA KEV)

1 Meta vulnerability is on CISA's list of vulnerabilities exploited in the wild, 1 of them used in ransomware campaigns. Most recent:

Coverage in DanSec Daily

  1. watchTowr details Barracuda ESG pre-auth root chain, Microsoft sees ARTEX used to steal GitHub OAuth secrets, and the US sanctions Prince Group affiliates.
  2. Sony ISP breach exposes 2.5M customer records, DHS staff data leaked via Okta, and Cisco firewall VPN zero-day exploited. Covers Volt Typhoon and more.
  3. Capcom ID breach of 11.7M accounts, LiteLLM PyPI supply chain attack, and actively exploited Arista VeloCloud zero-day.
  4. Railway secrets exposure, Onamae VPS malware on 26,739 servers, LiteLLM supply chain attack, and critical PHP2Shell RCE flaws under mass exploitation.
  5. Lazarus Group's FlashHole watering-hole campaign, Tor exit relay hijacking, and Zeabur's second breach in two months.
  6. OVHcloud CLI and Rank Math PRO supply chain compromises, the Ahold Delhaize cyberattack, and actively exploited Plex2Shell flaws.
  7. Ivanti Connect Secure zero-days chained for root RCE, Microsoft's 1,400-flaw Patch Tuesday with an exploited Windows Shell bug, and a Meta GitHub breach.
  8. Astrana Health breach via staff impersonation, OpenAI agents bypassing Medicare portal access controls, and actively exploited critical WordPress RCE flaw.
  9. Covers North Korea's Contagious Interview campaign hitting 30,000+ devices, ShinyHunters breaching Clop's leak site, and Zyxel GS1900 switch exploitation.
  10. Florida DAVID driver database breach via stolen police credentials, Brevo platform compromise enabling phishing of Trezor users, and a critical GitLab path …
  11. AdaptHealth breach hits 4.1M people, Trezor users targeted by phishing, Veradigm patient data leak; plus Fortinet and Cisco exploits.
  12. Mathspace breach hits over 1 million users, Trezor's ShipMonk breach widens to 81,000 customers, and Adobe Commerce zero-day StyleSmuggler is patched.
  13. Manchester Airports Group ransomware leak of 8.8M people, Thomson Reuters C-Track breach, and Coder Terraform supply-chain attack.
  14. Softaculous BGP hijack delivers malicious Virtualizor update; Dropbox breached via Lenovo ID flaw; 153M US/Canadian driver's license scans for sale on dark web.
  15. Manchester Airports Group breach, ShinyHunters leaking 13M Carhartt accounts, and critical unauthenticated RCE flaws patched in Next.js.
  16. Trezor customer data breach via ShipMonk, actively exploited VMware vCenter Syslog RCE, and Apple mercenary spyware alerts.
  17. Metabase zero-day breaches customer data, Unlimited Technology Systems reports a 3.8M-person healthcare breach, and Claude Code and Gemini CLI flaws expose CI …
  18. WordPress wp2shell webshell attacks, Microsoft SharePoint RCE exploitation, and Anubis ransomware targeting Coca-Cola's Fairlife.
  19. The Check Point VPN zero-day exploited by Qilin, the NSO Group WhatsApp spear-phishing campaign, and a SoFi subsidiary breach affecting customer data.
  20. Meta reports 20,000+ Instagram accounts hijacked via its AI support system; Silent Ransom Group and UNC3753 vishing extortion campaigns target law and financial …
  21. Exploited Everest Forms Pro WordPress flaw (CVE-2026-3300), Meta AI bots abused to hijack Instagram accounts, and OpenAI's ChatGPT Lockdown Mode.
  22. The Hola Browser supply chain cryptominer, the DentaQuest breach of 2.6M accounts, and Cisco zero-days in Unified Communications Manager and SD-WAN Manager.
  23. WeedHack malware infected 116,000+ Minecraft systems, Red Hat NPM packages hit by credential-stealing worm, and Gamaredon exploits WinRAR in Ukraine attacks.
  24. The Dashlane vault breach, the Miasma npm supply chain attack on Red Hat packages, and active exploitation of Windows Netlogon CVE-2026-41089 and Palo Alto …
  25. Shai-Hulud worm source leak and TanStack supply chain breach at OpenAI, Exchange zero-day CVE-2026-42897, and JDownloader installer hijack.
  26. Trellix source code breach, DigiCert certificate revocations after a chat-channel attack, and 40,000+ servers compromised via the cPanel flaw CVE-2026-41940.
  27. Covers the France Titres government data breach, the $290M Kelp DAO crypto heist tied to North Korean actors, and over 1,500 exposed Perforce P4 servers.
  28. Ukrainian targeting by UAC-0247's AgingFly malware, a compromised WordPress EssentialPlugin package, and an nginx-ui flaw exploited in the wild …
  29. Covers the Kraken and McGraw-Hill breaches, a fake Ledger Live app on Apple's App Store, and Microsoft's April 2026 Patch Tuesday with 167 flaws.
  30. Basic-Fit and Booking.com breaches, Adobe zero-day CVE-2026-34621, CPUID trojanized installers, and APT41 cloud credential theft.
  31. Eurail breach exposing 300,000+ passport records, ChipSoft ransomware shutdown, and Smart Slider 3 Pro backdoored update supply chain attack.
  32. Drift DEX's $285M North Korea-attributed heist, the Axios npm supply chain compromise, and the TeamPCP campaign hitting European Commission cloud systems.
  33. The Hightower Holding breach (130,000 affected), the TeamPCP supply chain attack added to CISA KEV, and Langflow exploitation (CVE-2026-33017).
  34. Navia breach exposes 2.7M records; Trivy GitHub Actions compromised again; Magento defacement campaign hits thousands of sites.
  35. Starbucks partner account breach, Iran-linked wiper attack on Stryker, and two Chrome zero-days exploited in the wild, plus CrackArmor Linux AppArmor flaws.
  36. The SocksEscort proxy botnet takedown, Telus Digital and Loblaw breaches, and Veeam's seven critical Backup & Replication flaws.
  37. The Stryker wiper attack by Handala, Michelin's Oracle EBS breach, critical n8n RCE flaws, and Microsoft's March Patch Tuesday fixes.
  38. Sangoma FreePBX compromise with 900+ web shells, ManoMano breach of 38M users, and Juniper PTX critical RCE CVE-2026-21902.
  39. Odido breach hits 6 million customers, BeyondTrust RS/PRA CVE-2026-1731 exploited within 24 hours of PoC, and Chrome extensions steal Meta Business Suite …
  40. The Odido breach exposing 6.2M customers, Qilin's Conpet S.A. data theft, and BeyondTrust and Ivanti EPMM exploitation, plus threat actor and policy news.
  41. Covers the eScan antivirus update server supply chain attack, RedKitten targeting human rights NGOs, and ShinyHunters' vishing campaigns stealing SSO and MFA …
  42. Nike and SoundCloud breaches, ShinyHunters phishing of 100+ organizations, and the exploited Microsoft Office zero-day CVE-2026-21509.
  43. Hackers selling Target source code, the n8n "Ni8mare" flaw hitting about 60,000 instances, and a Gogs zero-day under a CISA patch order.
  44. Instagram denies a 17M-account data breach claim, University of Hawaii Cancer Center confirms patient data theft, and California acts against data broker …
  45. Brightspeed breach claimed by Crimson Collective, Zestix stealing data from ShareFile, Nextcloud and OwnCloud, and critical n8n and MongoDB flaws.
  46. The Pennsylvania AG ransomware breach by Inc Ransom, the WhatsApp contact discovery flaw exposing 3.5 billion numbers, and a FortiWeb zero-day under active …
  47. Logitech and Washington Post breaches tied to Clop's Oracle E-Business Suite attacks, plus Fortinet FortiWeb zero-day exploited and added to CISA KEV.
  48. Jaguar Land Rover cyber incident, OpenAI Atlas browser prompt-injection flaw, and CoPhish phishing abusing Microsoft Copilot Studio for OAuth token theft.
  49. Magento/Adobe Commerce SessionReaper (CVE-2025-54236) mass compromise, MuddyWater Phoenix backdoor campaign, and SharePoint ToolShell exploitation by Chinese …
  50. Red Hat GitLab repo breach claim, WestJet breach affecting 1.2M, and Oracle E-Business Suite extortion campaign possibly tied to Cl0p are the top stories.
  51. Npm supply chain compromise of 40+ packages, KillSec ransomware breach of a Brazilian healthcare software provider, and Google's LERS account abuse.
  52. LNER breach, INC ransomware attack on Panama's finance ministry, and a critical SonicWall SSLVPN flaw (CVE-2024-40766) exploited by Akira ransomware.
  53. Plex data breach, Adobe's SessionReaper Magento flaw and SAP NetWeaver criticals.
  54. Covers the TransUnion breach (4.4M people), MathWorks ransomware theft, and the Nx npm supply chain attack that leaked 2,300+ credentials via AI-powered …
  55. The Bouygues Telecom breach of 6.4 million customers, the Salesforce vishing campaign tied to ShinyHunters, and the CISA-mandated patch for Exchange …
  56. Google Salesforce data breach by ShinyHunters, DaVita ransomware notice to over 1 million people, and WhatsApp removing 6.8 million scam-centre accounts.
  57. PlayPraetor Android RAT infects 11,000+ devices via fake Google Play pages; Microsoft releases PyRIT cloud red-teaming tool; pop3user legacy login activity.
  58. North Korea-linked UNC4899 crypto theft, UNC2891 ATM network breaches, and patched Honeywell Experion PKS industrial control flaws.
  59. Allianz Life breach, WordPress Post SMTP flaw exposing 200k+ sites, and ToolShell SharePoint exploits.
  60. Ransomware up 63% in Q2 2025, Amazon's Q Developer VS Code extension hijacked with wiper commands, and a North Korean IT worker laptop-farm sentencing.
  61. NCSC attributes Microsoft 365 Authentic Antics malware to APT28, CrushFTP zero-day hijacks servers, and Google sues BADBOX 2.0 botnet operators.
  62. The $27M BigONE crypto exchange breach, Salt Typhoon's nine-month Army National Guard intrusion, and Cisco ISE CVE-2025-20337 (CVSS 10) with other …
  63. Scattered Spider targets airlines via social engineering, hackers open a Norwegian dam valve, and GIFTEDCROOK malware evolves into a spy tool.
  64. Episource breach hits 5.4M US patients, Predatory Sparrow drains $90M from Iran's Nobitex, and Water Curse hijacks 76 GitHub accounts.
  65. The Washington Post journalist email breach, Zoomcar's 8.4M-user data breach, and Scattered Spider's pivot to U.S. insurers.
  66. ConnectWise ScreenConnect breach by suspected nation-state, DragonForce ransomware via SimpleHelp RMM, and Victoria's Secret site outage.
  67. Covers the 184M password exposure, $223M Cetus Protocol crypto heist, and Europol's Operation Endgame ransomware crackdown.
  68. Chinese UAT-6382 exploits Trimble Cityworks to breach US local governments; Ivanti EPMM flaws hit European, North American and Asian agencies; 184M credentials …
  69. Coinbase breach via bribed support agents, Nucor halted by a cyber incident, and APT28 exploiting webmail zero-days in the RoundPress campaign.
  70. The Coinbase insider data breach and extortion attempt, SAP NetWeaver exploitation by BianLian and RansomExx, and Samsung MagicINFO Mirai attacks.
  71. Marks & Spencer customer data theft, Microsoft May 2025 Patch Tuesday with five zero-days, and SAP NetWeaver exploitation by ransomware gangs.
  72. Langflow and Samsung MagicINFO RCE exploitation, GeoVision devices feeding Mirai botnets, and the UK Legal Aid Agency incident.
  73. SonicWall SMA100 exploitation, Co-op cyberattack disruption and Ascension healthcare data breach.
  74. Gladinet Triofox/CentreStack RCE under active exploitation, Hertz breach via Cleo zero-day theft, and Fortinet zero-day exploit chatter.