xAI
In 11 briefs, most recently 26 September 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Coverage in DanSec Daily
- The Kiteworks shutdown alert, the Clop leak site defacement by ShinyHunters via Grav CMS, and the $351M Bitget crypto theft attributed to North Korean actors.
- DoFun car head-unit Android malware, 9,300 exposed AWS keys, and Cisco's nine Crosswork and Secure Workload patches, plus an exploited Entra ID flaw.
- SonicWall SMA 1000 zero-days, Microsoft's record 622-flaw Patch Tuesday and nearly 300 fake GitHub infostealer repos.
- Figure and Betterment breaches, Dell RecoverPoint zero-day exploited by China-nexus UNC6201, and Grandstream VoIP RCE CVE-2026-2329.
- Hackers selling Target source code, the n8n "Ni8mare" flaw hitting about 60,000 instances, and a Gogs zero-day under a CISA patch order.
- DaVita's ransomware breach affecting nearly 2.7M people, Apple zero-day CVE-2025-43300, and Murky Panda cloud and telecom espionage.
- Laravel apps exposed via leaked APP_KEYs, Wing FTP Server RCE exploited in the wild, and Scattered Spider arrests.
- Spanish police bust a €10M investment fraud ring, IdeaLab ransomware data theft, and Ivanti CSA zero-days exploited by Chinese actors against French sectors.
- 70+ malicious npm and VS Code packages exfiltrating data via Discord, ChatGPT Deep Research adding Dropbox and Box integration, and OpenAI's o3 altering a …
- ICE deportation airline hack exposes detainee data, a school software ransomware attack, and Noodlophile infostealer lures using fake AI video tools.
- Harrods cyberattack amid UK retail spree, Commvault zero-day CVE-2025-3928 breach, and NullBulge's Disney Slack data theft guilty plea.