DanSec

Vendor

PyPI

In 29 briefs, most recently 31 July 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Coverage in DanSec Daily

  1. Anthropic's Claude agent breaching real organizations, the Brinks Home ShinyHunters breach, and a critical JetBrains TeamCity authentication bypass …
  2. Coca-Cola's Fairlife data theft, Ernst & Young and Origin Energy breaches, and a FastJson zero-day exploited in the wild, plus Dysphoria botnet and Mirage …
  3. PEAR ransomware claims 3 TB breach of medical firm MCBS; scanning targets ESAFENET CDG 3 weak logins; GitHub and PyPI add time-based Dependabot protections.
  4. AssuranceAmerica breach hits 6.9M drivers, KDDI zero-day breach affects 12M, and GodDamn ransomware uses a signed Microsoft driver to kill security tools.
  5. The Check Point VPN zero-day exploited by Qilin, the NSO Group WhatsApp spear-phishing campaign, and a SoFi subsidiary breach affecting customer data.
  6. Megalodon attack compromises 5,500+ GitHub repos; Ghost CMS SQL injection CVE-2026-26980 actively exploited; TrapDoor hits npm, PyPI, Crates.io.
  7. South Staffordshire Water fined £963,900 after breach; TeamPCP Mini Shai-Hulud worm hits npm/PyPI; ShinyHunters attack Instructure Canvas twice.
  8. Canvas/Instructure breach exposing up to 275M students, DAEMON Tools supply chain backdoor, and a zero-day in Palo Alto PAN-OS firewalls.
  9. Roblox credential theft via fake game enhancements, an actively exploited cPanel zero-day, and the Mini Shai-Hulud SAP npm supply chain attack.
  10. Covers the European Commission's Amazon cloud breach, the hack of FBI Director Kash Patel's email, and TeamPCP's Telnyx PyPI supply chain attack.
  11. LeakBase admin arrest, HackerOne employee data breach via Navia, and Microsoft 365 device code phishing hitting 340+ organizations.
  12. Flickr third-party email breach, SmarterMail RCE (CVE-2026-24423) exploited in ransomware, and TGR-STA-1030 espionage across 37 countries.
  13. The Polish energy grid cyberattack attributed to ELECTRUM, the eScan update server breach, and the FBI seizure of the RAMP cybercrime forum.
  14. Under Armour ransomware breach, Fortinet FortiGate attacks, and Osiris ransomware hitting a Southeast Asian food franchisee, plus SmarterMail and Cisco …
  15. FFF data breach, 17,000+ secrets exposed in public GitLab repos, and North Korean Contagious Interview npm packages spreading OtterCookie malware.
  16. Co-op's £80M cyberattack loss, Shai-Hulud npm worm infecting 500+ packages, and Cisco zero-days under CISA emergency directive.
  17. Boyd Gaming breach, GeoServer flaw (CVE-2024-36401) hitting a US federal agency, and RTX ransomware disrupting European airports via Collins Aerospace.
  18. SonicWall cloud backup breach, Tiffany & Co. data theft and BianLian-linked Medical Associates of Brevard breach affecting nearly 250,000 people.
  19. The npm supply chain attack, the Salesloft Drift breach hitting Salesforce, and GhostAction's theft of 3,325 CI secrets from GitHub workflows.
  20. Allianz Life Salesforce breach exposes 1.1M records, Play ransomware exploits Windows CLFS, and ActiveMQ attackers deploy DripDropper malware.
  21. Columbia University breach hits 870,000, Bouygues discloses 6.4M-customer breach, and Royal/BlackSuit ransomware dismantled after 450+ U.S. victims.
  22. ShinyHunters vishing breaches at Qantas, Allianz Life and Adidas; SafePay claims 3.5TB Ingram Micro theft; Microsoft SharePoint mass exploitation hits South …
  23. Saint Paul city cyberattack prompting National Guard activation, Aeroflot flight cancellations, and Allianz Life breach hitting 1.4M US customers.
  24. The Washington Post journalist email breach, Zoomcar's 8.4M-user data breach, and Scattered Spider's pivot to U.S. insurers.
  25. Malicious PyPI package impersonating Chimera steals developer AWS and CI/CD secrets; 46,000+ Grafana instances unpatched; Windows Server June update freezes …
  26. The UK Legal Aid Agency data breach, the Arla Foods cyberattack disrupting production, and the RVTools compromise delivering Bumblebee malware.
  27. Pearson breach, Insight Partners data theft, and Toronto school district ransom, plus SonicWall and Cisco flaws and Qilin ransomware activity.
  28. Harrods cyberattack amid UK retail spree, Commvault zero-day CVE-2025-3928 breach, and NullBulge's Disney Slack data theft guilty plea.
  29. Phishing tops UK attacks, North Korea expands IT worker fraud, and MITRE's CVE funding expires, threatening the vulnerability database.