PayPal
In 9 briefs, most recently 1 May 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Coverage in DanSec Daily
- Roblox credential theft via fake game enhancements, an actively exploited cPanel zero-day, and the Mini Shai-Hulud SAP npm supply chain attack.
- The Stryker Microsoft environment wiper attack, GlassWorm hitting Python repos, and Vidar delivered via hacked WordPress sites.
- Optimizely vishing breach, Vanta Diagnostics breach claimed by Everest ransomware, and actively exploited RoundCube Webmail flaws.
- Advantest ransomware attack, PayPal loan-app breach exposing SSNs, and BeyondTrust RCE CVE-2026-1731 exploited in ransomware attacks.
- SoundCloud breach and VPN disruption, Askul ransomware exposing 740,000 records, and ShinyHunters extorting PornHub over Mixpanel-linked data theft.
- Frogblight Android banker hits Turkish users, CyberVolk launches VolkLocker ransomware with a master key, and PayPal Subscriptions abused in scam emails.
- The npm supply chain attack, the Salesloft Drift breach hitting Salesforce, and GhostAction's theft of 3,325 CI secrets from GitHub workflows.
- Jaguar Land Rover cyberattack disrupts operations, Workiva breach via Salesforce CRM, and Salesloft/Drift fallout hits Cloudflare, Palo Alto Networks and …
- Ingram Micro ransomware outage, Qantas extortion over 6 million customer records, and a $140M theft from six Brazilian banks.