YARA-X
In 6 briefs, most recently 26 October 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Coverage in DanSec Daily
- Genesys data exposure, Quest Diagnostics patient-records breach and PHP2Shell RCE actively exploited against industrial vendors Siemens, Schneider Electric and …
- TerminalFix ClickFix malware abusing fake Cloudflare CAPTCHAs and critical WordPress plugin and theme flaws in Avada, GiveWP and others.
- Russian intelligence credential theft targeting Ukrainian messaging users, LastPass repeat breach, and DCloud Uni-App abused for 200,000+ scam sites.
- Dutch authorities dismantle a 17-million-device botnet; WP Maps Pro WordPress plugin flaw actively exploited to create rogue admin accounts.
- Velvet Tempest deploys Termite ransomware via ClickFix; 100+ GitHub repos spread BoryptGrab stealer; Leakbase cybercrime forum dismantled by police.
- Iberia discloses customer data leak via third-party supplier breach, plus Wireshark 4.6.1 and SmbCrawler release for red teams.