NSO Group
In 8 briefs, most recently 3 September 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Coverage in DanSec Daily
- Softaculous BGP hijack delivers malicious Virtualizor update; Dropbox breached via Lenovo ID flaw; 153M US/Canadian driver's license scans for sale on dark web.
- The Check Point VPN zero-day exploited by Qilin, the NSO Group WhatsApp spear-phishing campaign, and a SoFi subsidiary breach affecting customer data.
- Magento/Adobe Commerce SessionReaper (CVE-2025-54236) mass compromise, MuddyWater Phoenix backdoor campaign, and SharePoint ToolShell exploitation by Chinese …
- F5 breach, Muji ransomware outage via Askul, AWS two-hour outage, and Salt Typhoon's Snappybee attack on a European telecom, plus GlassWorm and WatchGuard …
- LockBit's breach, PowerSchool extortion of school districts, and the actively exploited OttoKit WordPress flaw.
- Langflow and Samsung MagicINFO RCE exploitation, GeoVision devices feeding Mirai botnets, and the UK Legal Aid Agency incident.
- SonicWall SMA100 exploitation, Co-op cyberattack disruption and Ascension healthcare data breach.
- North Korean IT worker schemes, AkiraBot's AI-generated spam campaign against 420,000 sites, and a Lovable AI jailbreak flaw.