https://threat.wiki/ 2026-10-01 https://threat.wiki/actors/apt29-cozy-bear-midnight-blizzard/ 2026-10-01 https://threat.wiki/actors/armored-likho/ 2026-10-01 https://threat.wiki/actors/cavern-manticore/ 2026-10-01 https://threat.wiki/actors/cl-sta-1062/ 2026-10-01 https://threat.wiki/actors/cl-sta-1114-void-blizzard/ 2026-10-01 https://threat.wiki/actors/cloud-atlas/ 2026-10-01 https://threat.wiki/actors/dragonfly-energetic-bear-crouching-yeti/ 2026-10-01 https://threat.wiki/actors/exilware/ 2026-10-01 https://threat.wiki/actors/fishmonger/ 2026-10-01 https://threat.wiki/actors/fox-tempest/ 2026-10-01 https://threat.wiki/actors/gamaredon/ 2026-10-01 https://threat.wiki/actors/ghostwriter/ 2026-10-01 https://threat.wiki/actors/greyvibe/ 2026-10-01 https://threat.wiki/actors/hackerbot-claw/ 2026-10-01 https://threat.wiki/actors/handala/ 2026-10-01 https://threat.wiki/actors/jinx-0163/ 2026-10-01 https://threat.wiki/actors/jinx-0164/ 2026-10-01 https://threat.wiki/actors/kimsuky-emerald-sleet-ta427/ 2026-10-01 https://threat.wiki/actors/mirage-kitten/ 2026-10-01 https://threat.wiki/actors/mustang-panda/ 2026-10-01 https://threat.wiki/actors/oceanlotus/ 2026-10-01 https://threat.wiki/actors/op-512/ 2026-10-01 https://threat.wiki/actors/screening-serpens/ 2026-10-01 https://threat.wiki/actors/seedworm-muddywater/ 2026-10-01 https://threat.wiki/actors/shinyhunters/ 2026-10-01 https://threat.wiki/actors/sidecopy/ 2026-10-01 https://threat.wiki/actors/silkparasite/ 2026-10-01 https://threat.wiki/actors/ta4922/ 2026-10-01 https://threat.wiki/actors/teampcp/ 2026-10-01 https://threat.wiki/actors/thehatman/ 2026-10-01 https://threat.wiki/actors/toddycat/ 2026-10-01 https://threat.wiki/actors/toy-ghouls/ 2026-10-01 https://threat.wiki/actors/turla/ 2026-10-01 https://threat.wiki/actors/uac-0145/ 2026-10-01 https://threat.wiki/actors/uac-0226-shadow-earth-066/ 2026-10-01 https://threat.wiki/actors/uat-10147/ 2026-10-01 https://threat.wiki/actors/uat-11795/ 2026-10-01 https://threat.wiki/actors/unc3753/ 2026-10-01 https://threat.wiki/actors/unc6508/ 2026-10-01 https://threat.wiki/actors/velvet-ant/ 2026-10-01 https://threat.wiki/actors/verdantbamboo/ 2026-10-01 https://threat.wiki/actors/void-dokkaebi/ 2026-10-01 https://threat.wiki/actors/webworm/ 2026-10-01 https://threat.wiki/blog/ 2026-10-01 https://threat.wiki/blog/2026-03-26-teampcp/ 2026-10-01 https://threat.wiki/notes/editorial-checklist/ 2026-10-01 https://threat.wiki/notes/how-to-use/ 2026-10-01 https://threat.wiki/notes/iran-linked-threat-landscape-july-2026/ 2026-10-01 https://threat.wiki/notes/motivation-taxonomy/ 2026-10-01 https://threat.wiki/notes/source-index/ 2026-10-01 https://threat.wiki/notes/tag-index/ 2026-10-01 https://threat.wiki/ops/0ktapus-phishing-campaign/ 2026-10-01 https://threat.wiki/ops/3cx-desktop-app-compromise/ 2026-10-01 https://threat.wiki/ops/7nohe-openapi-react-query-codegen-npm-compromised-august-2026/ 2026-10-01 https://threat.wiki/ops/aa26-231a-siemens-s7-ai-generated-exploit-scripts-us-critical-infrastructure/ 2026-10-01 https://threat.wiki/ops/ababil-of-minab-mois-recovery-destruction/ 2026-10-01 https://threat.wiki/ops/accellion-fta-exploitation-campaign/ 2026-10-01 https://threat.wiki/ops/actions-cool-github-actions-tag-compromise/ 2026-10-01 https://threat.wiki/ops/adblock-for-youtube-badblocker-remote-script-injection/ 2026-10-01 https://threat.wiki/ops/adform-trackpoint-javascript-supply-chain-crypto-clipper/ 2026-10-01 https://threat.wiki/ops/adobe-coldfusion-apsb26-68-cve-bonanza/ 2026-10-01 https://threat.wiki/ops/adversa-cryptographic-context-injection-grok-chat-data-exfiltration/ 2026-10-01 https://threat.wiki/ops/ai-chatbot-seo-poisoning-gpu-cryptojacking/ 2026-10-01 https://threat.wiki/ops/ai-token-jacking-transfer-station-abuse/ 2026-10-01 https://threat.wiki/ops/aisi-unsanctioned-agent-supply-chain-attempt/ 2026-10-01 https://threat.wiki/ops/algamil7x-npm-dns-exfil-recon-cluster-september-2026/ 2026-10-01 https://threat.wiki/ops/alibaba-developer-targeted-distributed-npm-rat/ 2026-10-01 https://threat.wiki/ops/amazon-q-cve-2026-12957-mcp-auto-execution/ 2026-10-01 https://threat.wiki/ops/android-framework-cve-2025-48595-exploitation/ 2026-10-01 https://threat.wiki/ops/anthropic-cyber-evaluation-real-world-intrusions/ 2026-10-01 https://threat.wiki/ops/anthropic-threat-intelligence-report-september-2026-ai-augmented-operations/ 2026-10-01 https://threat.wiki/ops/anubis-ransomware-citrixbleed2-rmm-cloudflared/ 2026-10-01 https://threat.wiki/ops/apache-zeppelin-cve-2026-44613-csrf/ 2026-10-01 https://threat.wiki/ops/apt28-hookedge-backdoor-european-gov-diplomatic-august-2026/ 2026-10-01 https://threat.wiki/ops/apt28-lnk-smartscreen-cve-2026-21510-cve-2026-32202/ 2026-10-01 https://threat.wiki/ops/argo-cd-repo-server-unauthenticated-rce/ 2026-10-01 https://threat.wiki/ops/arista-eos-cve-2026-7473-tunnel-decap-exploitation/ 2026-10-01 https://threat.wiki/ops/arista-velocloud-orchestrator-cve-2026-16812-exploitation/ 2026-10-01 https://threat.wiki/ops/arm64-kvm-nested-virt-tlb-cve-2026-89775-guest-to-host-escape-september-2026/ 2026-10-01 https://threat.wiki/ops/armored-likho-busysnake-campaign/ 2026-10-01 https://threat.wiki/ops/armored-likho-still-toolkit-russia-campaign/ 2026-10-01 https://threat.wiki/ops/arrayref-proc-macro1-rust-crate-supply-chain-attack/ 2026-10-01 https://threat.wiki/ops/art-template-coruna-ios-watering-hole/ 2026-10-01 https://threat.wiki/ops/arystinger-legacy-router-recon-proxy-network/ 2026-10-01 https://threat.wiki/ops/astro-config-blockchain-c2-pr-injection/ 2026-10-01 https://threat.wiki/ops/asyncapi-generator-next-branch-miasma-compromise/ 2026-10-01 https://threat.wiki/ops/atomic-arch-aur-package-hijack/ 2026-10-01 https://threat.wiki/ops/avalon-crownx-malware-framework/ 2026-10-01 https://threat.wiki/ops/aws-root-user-password-spray-campaign-datadog-august-2026/ 2026-10-01 https://threat.wiki/ops/azure-ai-foundry-cve-2026-85889-cvss10-missing-auth-privilege-escalation-september-2026/ 2026-10-01 https://threat.wiki/ops/azure-cli-lshiy-password-spray/ 2026-10-01 https://threat.wiki/ops/baileys-libsignal-node-npm-whatsapp-channel-follow-campaign/ 2026-10-01 https://threat.wiki/ops/balonx-sistema-mexican-banking-phaas/ 2026-10-01 https://threat.wiki/ops/banana-rat-shadow-water-063-brazilian-banking-fraud/ 2026-10-01 https://threat.wiki/ops/barracuda-esg-zero-day-backdoor-campaign/ 2026-10-01 https://threat.wiki/ops/berlin-state-network-rhysida-extortion-august-2026/ 2026-10-01 https://threat.wiki/ops/beyondtrust-rs-pra-cve-2026-40138-40139-auth-bypass/ 2026-10-01 https://threat.wiki/ops/binding-gyp-npm-cicd-worm/ 2026-10-01 https://threat.wiki/ops/bitwarden-checkmarx-shai-hulud-third-coming/ 2026-10-01 https://threat.wiki/ops/blackfile-unc6671-vishing-extortion/ 2026-10-01 https://threat.wiki/ops/bluekit-browser-in-the-middle-phaas-totp-enrollment-persistence-spycloud-september-2026/ 2026-10-01 https://threat.wiki/ops/braintree-net-nuget-payment-skimmer/ 2026-10-01 https://threat.wiki/ops/brazil-education-lockbit-dragonforce-insider-incidents/ 2026-10-01 https://threat.wiki/ops/breeze-comet-gtig-brazilian-financial-switch-intrusions-rust-nim-go-backdoor-suite-september-2026/ 2026-10-01 https://threat.wiki/ops/brevo-third-party-widget-supply-chain-wordpress-plugin-clickfix-sansec-september-2026/ 2026-10-01 https://threat.wiki/ops/bufferzonecorp-ruby-go-ci-poisoning/ 2026-10-01 https://threat.wiki/ops/c0xmo-gafgyt-dd-wrt-botnet/ 2026-10-01 https://threat.wiki/ops/cameraswarm-dahua-camera-compromise-cve-2021-33044/ 2026-10-01 https://threat.wiki/ops/captivecrunch-midnight-blizzard-hospitality-captive-portal-campaign/ 2026-10-01 https://threat.wiki/ops/ccleaner-signed-update-compromise/ 2026-10-01 https://threat.wiki/ops/chaindrop-keyv-cacheable-npm-worm/ 2026-10-01 https://threat.wiki/ops/check-point-vpn-cve-2026-50751-exploitation/ 2026-10-01 https://threat.wiki/ops/chinese-language-phaas-wallet-tokenization/ 2026-10-01 https://threat.wiki/ops/chinese-operators-claude-deepseek-government-intrusion/ 2026-10-01 https://threat.wiki/ops/chocopoc-fake-poc-supply-chain-campaign/ 2026-10-01 https://threat.wiki/ops/chrome-live-wallpaper-extension-ad-fraud/ 2026-10-01 https://threat.wiki/ops/chrome-v8-cve-2026-11645-exploitation/ 2026-10-01 https://threat.wiki/ops/chrome-v8-cve-2026-85046-type-confusion-exploitation-september-2026/ 2026-10-01 https://threat.wiki/ops/circleci-2023-customer-secret-exposure-incident/ 2026-10-01 https://threat.wiki/ops/cisa-aa26-237a-tale-of-two-socs-red-team-critical-infrastructure/ 2026-10-01 https://threat.wiki/ops/cisa-kev-artifactory-kestra-sonicwall-litellm-starlette-switchvox-september-2-2026/ 2026-10-01 https://threat.wiki/ops/cisa-kev-check-point-smartconsole-sharepoint-july-22-2026/ 2026-10-01 https://threat.wiki/ops/cisa-kev-cisco-ise-acronis-backup-september-16-2026/ 2026-10-01 https://threat.wiki/ops/cisa-kev-citrix-fortinet-cisco-chromium-september-9-2026/ 2026-10-01 https://threat.wiki/ops/cisa-kev-citrix-sql-server-august-26-2026/ 2026-10-01 https://threat.wiki/ops/cisa-kev-f5-bigip-apm-checkpoint-pair-arista-velocloud-september-22-2026/ 2026-10-01 https://threat.wiki/ops/cisa-kev-linux-kernel-af-alg-ebtables-september-18-2026/ 2026-10-01 https://threat.wiki/ops/cisa-kev-microsoft-entra-zimbra-august-21-2026/ 2026-10-01 https://threat.wiki/ops/cisa-kev-microsoft-ray-vmware-macos-august-17-2026/ 2026-10-01 https://threat.wiki/ops/cisa-kev-microsoft-sharepoint-adfs-sonicwall-sma1000-july-2026/ 2026-10-01 https://threat.wiki/ops/cisa-kev-n-central-tomcat-langflow-august-4-2026/ 2026-10-01 https://threat.wiki/ops/cisa-kev-owncloud-linux-artifactory-august-27-2026/ 2026-10-01 https://threat.wiki/ops/cisa-kev-screenconnect-artifactory-gitlab-mikrotik-september-10-11-2026/ 2026-10-01 https://threat.wiki/ops/cisa-kev-stylesmuggler-nable-windows-lpe-september-8-2026/ 2026-10-01 https://threat.wiki/ops/cisa-kev-winssock-zero-day-metabase-cisco-august-11-2026/ 2026-10-01 https://threat.wiki/ops/cisco-catalyst-sd-wan-manager-cve-2026-20245-exploitation/ 2026-10-01 https://threat.wiki/ops/cisco-crosswork-secure-workload-nine-flaws-five-cvss-10-august-21-2026/ 2026-10-01 https://threat.wiki/ops/cisco-fmc-cve-2026-20316-static-credential-exploitation/ 2026-10-01 https://threat.wiki/ops/cisco-ios-cve-2008-4128-csrf-kev/ 2026-10-01 https://threat.wiki/ops/cisco-nexus-9000-cve-2026-20212-unauth-root-rce-september-2026/ 2026-10-01 https://threat.wiki/ops/cisco-secure-email-gateway-cve-2026-76461-sql-injection-root-kev-september-2026/ 2026-10-01 https://threat.wiki/ops/cisco-unified-cm-cve-2026-20230-file-write-exploitation/ 2026-10-01 https://threat.wiki/ops/citrix-netscaler-cve-2026-19489-19490-gateway-aaa-auth-bypass/ 2026-10-01 https://threat.wiki/ops/citrix-netscaler-cve-2026-8451-memory-overread/ 2026-10-01 https://threat.wiki/ops/citrix-netscaler-cve-2026-8452-preauth-rce-watchtowr/ 2026-10-01 https://threat.wiki/ops/citrixbleed-session-hijack-wave/ 2026-10-01 https://threat.wiki/ops/city-forum-salesforce-servicenow-guest-access-scraping/ 2026-10-01 https://threat.wiki/ops/cl-sta-1062-southeast-asia-tinyrct/ 2026-10-01 https://threat.wiki/ops/cl-sta-1114-zimbra-webmail-espionage/ 2026-10-01 https://threat.wiki/ops/clickfix-cpaas-api-driven-payload-delivery/ 2026-10-01 https://threat.wiki/ops/cloudflare-okta-token-theft-incident/ 2026-10-01 https://threat.wiki/ops/cloudflare-workers-spectre-co-located-jwt-leak/ 2026-10-01 https://threat.wiki/ops/codecov-bash-uploader-compromise/ 2026-10-01 https://threat.wiki/ops/codexui-android-openai-token-stealer/ 2026-10-01 https://threat.wiki/ops/codfish-semantic-release-action-tag-compromise/ 2026-10-01 https://threat.wiki/ops/coldcard-predictable-rng-bitcoin-theft/ 2026-10-01 https://threat.wiki/ops/connectwise-screenconnect-exploitation-wave/ 2026-10-01 https://threat.wiki/ops/contagious-interview-svg-steganography-ottercookie/ 2026-10-01 https://threat.wiki/ops/copilot-mcp-apex-macos-infostealer/ 2026-10-01 https://threat.wiki/ops/cosmos-evm-vesting-balance-overflow-exploited-august-2026/ 2026-10-01 https://threat.wiki/ops/cosmosescape-azure-cosmos-db-cross-tenant-takeover/ 2026-10-01 https://threat.wiki/ops/cosnitch-copilot-personal-cve-2026-24301-one-click-exfil/ 2026-10-01 https://threat.wiki/ops/cpanel-whm-cve-2026-65643-parked-addon-domain-root-rce/ 2026-10-01 https://threat.wiki/ops/crashstealer-macos-notarized-dropper/ 2026-10-01 https://threat.wiki/ops/crowdstrike-september-2026-patch-tuesday-two-exploited-zero-days-shieldcrash/ 2026-10-01 https://threat.wiki/ops/crypto-clipper-tor-usb-worm/ 2026-10-01 https://threat.wiki/ops/daemon-tools-lite-supply-chain-compromise/ 2026-10-01 https://threat.wiki/ops/darksword-ghostblade-ios-exploit-infrastructure/ 2026-10-01 https://threat.wiki/ops/dcloud-uni-app-scam-infrastructure/ 2026-10-01 https://threat.wiki/ops/debull-device-code-phishing-graphspy/ 2026-10-01 https://threat.wiki/ops/deep-live-cam-python-dependency-supply-chain-clipboard-hijacker-safedep-september-2026/ 2026-10-01 https://threat.wiki/ops/docker-sandboxes-cve-2026-77179-virtiofs-symlink-macos-escape-september-2026/ 2026-10-01 https://threat.wiki/ops/dofun-android-head-unit-jarservice-moyu-badbox/ 2026-10-01 https://threat.wiki/ops/dream-multi-agent-ai-framework-asian-government-compromise/ 2026-10-01 https://threat.wiki/ops/drupal-core-cve-2026-9082-exploitation/ 2026-10-01 https://threat.wiki/ops/dutch-police-ncsc-17-million-device-botnet/ 2026-10-01 https://threat.wiki/ops/dysphoria-iot-botnet/ 2026-10-01 https://threat.wiki/ops/e4del-pinhole-ftp-banner-dead-drop-resolver-rats/ 2026-10-01 https://threat.wiki/ops/elementor-pro-cve-2026-32475-unauthenticated-rce-wordpress-704/ 2026-10-01 https://threat.wiki/ops/endlessdoors-zbtlink-router-firmware-implant/ 2026-10-01 https://threat.wiki/ops/equation-of-compromise-npm-mathjs-clone-campaign-sepolia-contracts-slack-c2-github-actions-download-farm-jfrog-september-2026/ 2026-10-01 https://threat.wiki/ops/everest-forms-pro-cve-2026-3300-exploitation/ 2026-10-01 https://threat.wiki/ops/evilginx-device-code-phishing-open-directory/ 2026-10-01 https://threat.wiki/ops/eviltokens-device-code-phaas-storm-2992-dcu-disruption-september-2026/ 2026-10-01 https://threat.wiki/ops/exposed-webdav-malware-delivery-lab-curp-campaign/ 2026-10-01 https://threat.wiki/ops/fake-corepack-site-infostealer-proxyware/ 2026-10-01 https://threat.wiki/ops/fake-reputation-crypto-clipboard-hijacker/ 2026-10-01 https://threat.wiki/ops/fake-tradingview-macos-stealer-malvertising/ 2026-10-01 https://threat.wiki/ops/fakegit-agentbaiting-smartloader-campaign/ 2026-10-01 https://threat.wiki/ops/falconflank-crowdstrike-falcon-privilege-escalation-chaotic-eclipse-september-2026/ 2026-10-01 https://threat.wiki/ops/famous-chollima-packagist-dev-branch-loader/ 2026-10-01 https://threat.wiki/ops/famoussparrow-sparrowocky-backdoor-latin-america-eset-september-2026/ 2026-10-01 https://threat.wiki/ops/faster-axios-turbo-axios-epsilon-stealer/ 2026-10-01 https://threat.wiki/ops/fastjson-cve-2026-16723-active-exploitation/ 2026-10-01 https://threat.wiki/ops/fatfs-cve-2026-6682-6688-embedded-filesystem-bugs/ 2026-10-01 https://threat.wiki/ops/ffmpeg-pixelsmash-cve-2026-8461-media-file-rce/ 2026-10-01 https://threat.wiki/ops/flooding-dropper-npm-campaign/ 2026-10-01 https://threat.wiki/ops/flying-eagle-night-dragon-android-rat-ecosystem/ 2026-10-01 https://threat.wiki/ops/forg365-microsoft-365-phaas/ 2026-10-01 https://threat.wiki/ops/fortibleed-fortinet-credential-exposure/ 2026-10-01 https://threat.wiki/ops/forticlient-ems-cve-2026-35616-ekz-infostealer/ 2026-10-01 https://threat.wiki/ops/fortios-cve-2025-68686-symlink-persistence-bypass/ 2026-10-01 https://threat.wiki/ops/funnull-ringh23-maccms-supply-chain/ 2026-10-01 https://threat.wiki/ops/gamaredon-2025-tunnels-workers-dead-drops/ 2026-10-01 https://threat.wiki/ops/gamaredon-gammaphish-gammaworm-gammasteel-chain/ 2026-10-01 https://threat.wiki/ops/gemstuffer-rubygems-openai-agents-rubydoc-abuse-3022-packages-jfrog-september-2026/ 2026-10-01 https://threat.wiki/ops/ghost-cms-cve-2026-26980-clickfix-poisoning/ 2026-10-01 https://threat.wiki/ops/ghost-stadium-fifa-world-cup-ticket-phishing/ 2026-10-01 https://threat.wiki/ops/gitea-cve-2026-60004-diffpatch-git-hook-rce-kev-august-25-2026/ 2026-10-01 https://threat.wiki/ops/gitea-docker-cve-2026-20896-probing/ 2026-10-01 https://threat.wiki/ops/github-actions-cpanel-cve-2026-41940-exploitation-campaign/ 2026-10-01 https://threat.wiki/ops/github-advisories-argocd-mcp-sigma-forms-omnivore-skyvern-bookstack-august-29-2026/ 2026-10-01 https://threat.wiki/ops/github-advisories-crossplane-cosign-silverstripe-august-27-2026/ 2026-10-01 https://threat.wiki/ops/github-packagist-postinstall-hook-campaign/ 2026-10-01 https://threat.wiki/ops/gitlab-graphql-cve-2026-19478-19650-critical-patch/ 2026-10-01 https://threat.wiki/ops/gitlab-oj-notebook-diff-authenticated-rce/ 2026-10-01 https://threat.wiki/ops/glassworm-developer-supply-chain-botnet/ 2026-10-01 https://threat.wiki/ops/goddamn-ransomware-poisonx-byovd/ 2026-10-01 https://threat.wiki/ops/gogs-cve-2026-52813-path-traversal-rce/ 2026-10-01 https://threat.wiki/ops/google-docs-apps-script-sidebar-clickfix-rogue-ca-ledger-implant-huntress-september-2026/ 2026-10-01 https://threat.wiki/ops/google-gtg-undercover-analyst-teampcp-infiltration-labscon-september-2026/ 2026-10-01 https://threat.wiki/ops/google-pixel-cellular-modem-cve-2026-58704-kev-targeted-exploitation-september-2026/ 2026-10-01 https://threat.wiki/ops/goserpent-southeast-asia-espionage-campaign/ 2026-10-01 https://threat.wiki/ops/grandoreiro-btmob-latam-europe-malware-campaigns/ 2026-10-01 https://threat.wiki/ops/graphalgo-go-terraform-cross-ecosystem-spread-aikido-september-2026/ 2026-10-01 https://threat.wiki/ops/gravity-smtp-cve-2026-4020-exploitation/ 2026-10-01 https://threat.wiki/ops/gunra-ransomware-raas/ 2026-10-01 https://threat.wiki/ops/hackerbot-claw-github-actions-exploitation-campaign/ 2026-10-01 https://threat.wiki/ops/hacktron-heif-heist-openai-discourse-breach-opus5-september-2026/ 2026-10-01 https://threat.wiki/ops/head-mare-trueconf-phantomcore-campaign/ 2026-10-01 https://threat.wiki/ops/hellonet-vipnet-update-system-campaign/ 2026-10-01 https://threat.wiki/ops/html-to-gutenberg-fetch-page-assets-vscode-blockchain-stealer/ 2026-10-01 https://threat.wiki/ops/hugging-face-autonomous-agent-production-intrusion/ 2026-10-01 https://threat.wiki/ops/huntio-global-smishing-government-postal-telecom/ 2026-10-01 https://threat.wiki/ops/ill-bloom-cryptojs-wallet-drains/ 2026-10-01 https://threat.wiki/ops/immobiliarelabs-backstage-plugins-npm-compromise/ 2026-10-01 https://threat.wiki/ops/injective-sdk-npm-wallet-stealer/ 2026-10-01 https://threat.wiki/ops/ironworm-npm-rust-infostealer/ 2026-10-01 https://threat.wiki/ops/ivanti-sentry-cve-2026-10520-exploitation/ 2026-10-01 https://threat.wiki/ops/jadepuffer-langflow-agentic-ransomware/ 2026-10-01 https://threat.wiki/ops/januscape-kvm-cve-2026-53359-guest-to-host-escape/ 2026-10-01 https://threat.wiki/ops/jdy-soho-iot-recon-botnet/ 2026-10-01 https://threat.wiki/ops/jetbrains-ai-plugin-api-key-theft/ 2026-10-01 https://threat.wiki/ops/jetbrains-teamcity-cve-2026-63077-exploitation/ 2026-10-01 https://threat.wiki/ops/jinx-0164-crypto-developer-infrastructure-campaign/ 2026-10-01 https://threat.wiki/ops/joomla-jce-cve-2026-48907-exploitation/ 2026-10-01 https://threat.wiki/ops/joomla-page-builder-cve-2026-48908-56290-exploitation/ 2026-10-01 https://threat.wiki/ops/joyfill-npm-blockchain-rat-compromise/ 2026-10-01 https://threat.wiki/ops/js-logger-pack-hugging-face-exfiltration/ 2026-10-01 https://threat.wiki/ops/jscrambler-npm-preinstall-stealer/ 2026-10-01 https://threat.wiki/ops/jwr-phaas-phishing-framework-outsider-variant/ 2026-10-01 https://threat.wiki/ops/kairos-data-extortion-government-payment/ 2026-10-01 https://threat.wiki/ops/kali365-device-code-phishing-expansion/ 2026-10-01 https://threat.wiki/ops/kaltura-mwembed-cve-2026-19912-cve-2026-19913-unpatched-rce-file-read/ 2026-10-01 https://threat.wiki/ops/klue-salesforce-oauth-token-abuse/ 2026-10-01 https://threat.wiki/ops/knaithe-hermes-deepseek-autonomous-exploitation/ 2026-10-01 https://threat.wiki/ops/knowledgedeliver-cve-2026-5426-viewstate-exploitation/ 2026-10-01 https://threat.wiki/ops/knx-protocol-cve-2023-4346-kev-exploitation/ 2026-10-01 https://threat.wiki/ops/kratos-microsoft-365-phaas-disruption/ 2026-10-01 https://threat.wiki/ops/kremlin-ref9334-chrome-integrity-forgery-ethereum-c2-brazilian-banking-malware-elastic-september-2026/ 2026-10-01 https://threat.wiki/ops/langflow-cve-2025-34291-exploitation/ 2026-10-01 https://threat.wiki/ops/langflow-cve-2026-0770-exploitation/ 2026-10-01 https://threat.wiki/ops/langflow-cve-2026-33017-cryptominer-ssh-worm/ 2026-10-01 https://threat.wiki/ops/langflow-cve-2026-55255-flow-authorization-bypass/ 2026-10-01 https://threat.wiki/ops/langflow-cve-canary-timeline-vulncheck-pwning-ai-stack-august-2026/ 2026-10-01 https://threat.wiki/ops/lantronix-eds5000-cve-2025-67038-exploitation/ 2026-10-01 https://threat.wiki/ops/laravel-lang-composer-tag-rewrite-compromise/ 2026-10-01 https://threat.wiki/ops/lazarus-operation-dream-job-shattering-the-dream/ 2026-10-01 https://threat.wiki/ops/lazarus-rollup-polyfill-npm-malware/ 2026-10-01 https://threat.wiki/ops/leo-platform-npm-miasma-compromise/ 2026-10-01 https://threat.wiki/ops/linux-bad-epoll-cve-2026-46242-lpe/ 2026-10-01 https://threat.wiki/ops/linux-dirtyclone-cve-2026-43503-lpe/ 2026-10-01 https://threat.wiki/ops/linux-ghostlock-cve-2026-43499-container-escape/ 2026-10-01 https://threat.wiki/ops/linux-kernel-cve-2022-0492-cgroup-release-agent-exploitation/ 2026-10-01 https://threat.wiki/ops/linux-nftables-cve-2026-23111-public-lpe-exploits/ 2026-10-01 https://threat.wiki/ops/linux-pedit-cow-cve-2026-46331-lpe/ 2026-10-01 https://threat.wiki/ops/litellm-compromise/ 2026-10-01 https://threat.wiki/ops/litellm-cve-2026-42271-mcp-stdio-command-injection/ 2026-10-01 https://threat.wiki/ops/litespeed-cpanel-cve-2026-48172-exploitation/ 2026-10-01 https://threat.wiki/ops/litespeed-cpanel-plugin-cve-2026-54420-exploitation/ 2026-10-01 https://threat.wiki/ops/lucide-proxy-npm-browser-ddos-botnet/ 2026-10-01 https://threat.wiki/ops/macos-clickfix-fingerprinting-gate-campaign/ 2026-10-01 https://threat.wiki/ops/macos-gaslight-rust-backdoor/ 2026-10-01 https://threat.wiki/ops/malware-slop-claude-user-data-npm-infostealer/ 2026-10-01 https://threat.wiki/ops/mandiant-ai-coding-assistant-session-hijack-shai-hulud-saas-september-2026/ 2026-10-01 https://threat.wiki/ops/marimo-cve-2026-39987-llm-agent-post-exploitation/ 2026-10-01 https://threat.wiki/ops/marketfront-tqm-mfe-dependency-confusion-stealer/ 2026-10-01 https://threat.wiki/ops/mastra-easy-day-js-npm-scope-compromise/ 2026-10-01 https://threat.wiki/ops/mathmain-encrypted-loader-npm-trojanised-mathjs-trio-safedep-september-2026/ 2026-10-01 https://threat.wiki/ops/meccha-chameleon-delayed-rce-custom-map-arbitrary-file-write-aikido-september-2026/ 2026-10-01 https://threat.wiki/ops/megalodon-github-actions-workflow-backdooring/ 2026-10-01 https://threat.wiki/ops/metabase-unauthenticated-sql-injection-zero-day/ 2026-10-01 https://threat.wiki/ops/microsoft-ai-assisted-executive-impersonation-invoice-fraud-ach-campaign-september-2026/ 2026-10-01 https://threat.wiki/ops/microsoft-ai-infrastructure-gateways-control-points-august-2026/ 2026-10-01 https://threat.wiki/ops/microsoft-counterfeit-installers-silver-fox-yinhu-fake-download-campaign-september-2026/ 2026-10-01 https://threat.wiki/ops/microsoft-defender-btr-sys-reforged-btr-cli/ 2026-10-01 https://threat.wiki/ops/microsoft-defender-cve-2026-41091-cve-2026-45498-exploitation/ 2026-10-01 https://threat.wiki/ops/microsoft-defender-cve-2026-50656-rogueplanet-shieldbreak/ 2026-10-01 https://threat.wiki/ops/microsoft-midnight-blizzard-mailbox-theft-from-microsoft/ 2026-10-01 https://threat.wiki/ops/microsoft-passkey-social-engineering-identity-cloud-compromise-september-9-2026/ 2026-10-01 https://threat.wiki/ops/microsoft-q2-2026-email-teams-phishing-landscape/ 2026-10-01 https://threat.wiki/ops/microsoft-sharepoint-cve-2026-45659-rce-exploitation/ 2026-10-01 https://threat.wiki/ops/microsoft-sharepoint-cve-2026-55040-cve-2026-63520-rce-chain-vulncheck/ 2026-10-01 https://threat.wiki/ops/microsoft-teams-it-support-impersonation-msi-nodejs-implant-winrm-september-2026/ 2026-10-01 https://threat.wiki/ops/mini-shai-hulud-npm-pypi-worm-campaign/ 2026-10-01 https://threat.wiki/ops/miniorange-saml-unauthenticated-wordpress-admin-takeover/ 2026-10-01 https://threat.wiki/ops/miniplasma-windows-cloud-filter-lpe-exploitation/ 2026-10-01 https://threat.wiki/ops/mirage-kitten-nightledger-bridgehead-arcbridge/ 2026-10-01 https://threat.wiki/ops/mirage-kitten-noderabbit-pollcat-coding-challenge-september-2026/ 2026-10-01 https://threat.wiki/ops/mirage2fa-m365-phishing-4500-companies-anyrun/ 2026-10-01 https://threat.wiki/ops/mirasvit-cache-warmer-cve-2026-45247-exploitation/ 2026-10-01 https://threat.wiki/ops/mistic-backdoor-kongtuke-modelorat/ 2026-10-01 https://threat.wiki/ops/mlflow-cve-2026-64849-ssrf-cloud-credential-theft/ 2026-10-01 https://threat.wiki/ops/modbeacon-operation-phnom-penh/ 2026-10-01 https://threat.wiki/ops/modheader-browser-extension-surveillance/ 2026-10-01 https://threat.wiki/ops/mr-rot13-cpanel-cve-2026-41940-backdoor-campaign/ 2026-10-01 https://threat.wiki/ops/mrmustard-pypi-credential-stealer-compromise/ 2026-10-01 https://threat.wiki/ops/mustang-panda-zohomurk-minirecon-india-campaigns/ 2026-10-01 https://threat.wiki/ops/n-able-n-central-cve-2026-18556-18577-exploitation/ 2026-10-01 https://threat.wiki/ops/nadmesh-ai-service-cloud-credential-botnet/ 2026-10-01 https://threat.wiki/ops/nats-as-c2-keyhunter-credential-harvesting/ 2026-10-01 https://threat.wiki/ops/netnut-popa-residential-proxy-network-disruption/ 2026-10-01 https://threat.wiki/ops/newtonsoftt-json-net-nuget-betting-rigging-trojan/ 2026-10-01 https://threat.wiki/ops/nextjs-august-2026-security-release-avif-libheif-and-windows-rce/ 2026-10-01 https://threat.wiki/ops/nginx-cve-2026-42533-capture-clobbering-rce/ 2026-10-01 https://threat.wiki/ops/nighteagle-ghostcontainer-exchange-dev-tunnel-rdp2tcp-dcsync-russia-kaspersky-september-2026/ 2026-10-01 https://threat.wiki/ops/node-ipc-2026-npm-maintainer-compromise/ 2026-10-01 https://threat.wiki/ops/nodemon-sudo-tslint-conf-runtime-npm-backdoor/ 2026-10-01 https://threat.wiki/ops/novacookies-docusign-aitm-phaas-m365-session-theft/ 2026-10-01 https://threat.wiki/ops/npmjs-it-com-gradle-masquerade-full-rce-agent-pair-september-2026/ 2026-10-01 https://threat.wiki/ops/nuget-game-cheat-dotnettool-pepesoft-campaign/ 2026-10-01 https://threat.wiki/ops/nullreceiver-dprk-npm-blockchain-loader/ 2026-10-01 https://threat.wiki/ops/nx-console-vscode-extension-compromise/ 2026-10-01 https://threat.wiki/ops/o-unc-066-entra-passkey-vishing/ 2026-10-01 https://threat.wiki/ops/octlurk-silklurk-central-asia-espionage/ 2026-10-01 https://threat.wiki/ops/okobot-cryptocurrency-wallet-framework/ 2026-10-01 https://threat.wiki/ops/ollama-p2p-cryptominer-rat/ 2026-10-01 https://threat.wiki/ops/oman-government-iranian-nexus-webshell-c2/ 2026-10-01 https://threat.wiki/ops/oob-moika-dependency-confusion-env-stealer/ 2026-10-01 https://threat.wiki/ops/open-vsx-evil-twin-extension-campaign/ 2026-10-01 https://threat.wiki/ops/operation-bluedash-multi-rmm-workplace-phishing/ 2026-10-01 https://threat.wiki/ops/operation-dangerouspassword-axios-npm-compromise/ 2026-10-01 https://threat.wiki/ops/operation-dragon-weave-azure-blob-c2/ 2026-10-01 https://threat.wiki/ops/operation-dragonreturn-india-tax-dcrat/ 2026-10-01 https://threat.wiki/ops/operation-economic-outcast-mois-cyber-designations-august-2026/ 2026-10-01 https://threat.wiki/ops/operation-endgame-socgholish-disruption/ 2026-10-01 https://threat.wiki/ops/operation-flutterbridge-fluttershell-macos-malvertising/ 2026-10-01 https://threat.wiki/ops/operation-grieflure-southeast-asia-lnk-dropper/ 2026-10-01 https://threat.wiki/ops/operation-highland-velvet-ant-authentication-stack-backdoors/ 2026-10-01 https://threat.wiki/ops/operation-muck-and-load-github-lure-network/ 2026-10-01 https://threat.wiki/ops/operation-quicsilver-vhd-delivered-go-backdoor-myanmar/ 2026-10-01 https://threat.wiki/ops/operation-xenofiscal-sidecopy-xenorat/ 2026-10-01 https://threat.wiki/ops/oracle-e-business-suite-cve-2026-46817-exploitation/ 2026-10-01 https://threat.wiki/ops/oracle-peoplesoft-cve-2026-35273-shinyhunters/ 2026-10-01 https://threat.wiki/ops/oracle-weblogic-cve-2024-21182-exploitation/ 2026-10-01 https://threat.wiki/ops/oracle-weblogic-proxy-plug-in-cve-2026-21962-kev-august-24-2026/ 2026-10-01 https://threat.wiki/ops/orkes-conductor-cve-2026-58138-preauth-rce-active-exploitation-fortinet-september-2026/ 2026-10-01 https://threat.wiki/ops/outsider-enterprise-smishing-phaas/ 2026-10-01 https://threat.wiki/ops/owncloud-cve-2023-49105-philippine-nuclear-exploitation-hunt-io-august-2026/ 2026-10-01 https://threat.wiki/ops/ox-clickfix-phishing-npm-mirror-payload-storage/ 2026-10-01 https://threat.wiki/ops/packagist-themes-ios-spyware-crypto-wallet-seed-theft-socket-funnull/ 2026-10-01 https://threat.wiki/ops/pakistani-law-enforcement-espionage-convergence/ 2026-10-01 https://threat.wiki/ops/pan-os-globalprotect-cve-2026-0257-exploitation/ 2026-10-01 https://threat.wiki/ops/pantheon-agents-pypi-trojanized-ghsa-93qj-5q5v-3c2h/ 2026-10-01 https://threat.wiki/ops/papercut-ng-mf-zero-day-active-exploitation-cve-2026-81578-cve-2026-82078/ 2026-10-01 https://threat.wiki/ops/patchcord-sheetcord-apt36-afghan-telecom-south-asia/ 2026-10-01 https://threat.wiki/ops/patriot-bait-ai-assisted-c2-botnet/ 2026-10-01 https://threat.wiki/ops/payload-ransomware-gpo-domain-root-attack-middle-east-manufacturing-kaspersky-september-2026/ 2026-10-01 https://threat.wiki/ops/paysafe-skrill-neteller-npm-pypi-typosquats/ 2026-10-01 https://threat.wiki/ops/pcpjack-cloud-smtp-relay-network/ 2026-10-01 https://threat.wiki/ops/pegasus-imessage-zero-click-serbia-student-movement-citizen-lab-share-september-2026/ 2026-10-01 https://threat.wiki/ops/perplexity-ai-chromium-extension-search-hijacker/ 2026-10-01 https://threat.wiki/ops/photo-zip-hospitality-nodejs-implant/ 2026-10-01 https://threat.wiki/ops/pimcore-studio-dataobject-rce-php-object-injection-cve-2026-55634-batch-august-28-2026/ 2026-10-01 https://threat.wiki/ops/pirated-media-silentcryptominer-rat-campaign/ 2026-10-01 https://threat.wiki/ops/polinrider-cross-ecosystem-supply-chain/ 2026-10-01 https://threat.wiki/ops/polymarket-npm-wallet-drainer/ 2026-10-01 https://threat.wiki/ops/postcss-minify-selector-parser-npm-rat/ 2026-10-01 https://threat.wiki/ops/postgreshell-postgresql-logical-decoding-replication-rce-cve-2026-6471-september-2026/ 2026-10-01 https://threat.wiki/ops/praisonai-cve-2026-44338-rapid-exploitation/ 2026-10-01 https://threat.wiki/ops/procwire-routecraft-npm-windows-dropper/ 2026-10-01 https://threat.wiki/ops/progress-kemp-loadmaster-cve-2026-8037-preauth-rce/ 2026-10-01 https://threat.wiki/ops/progress-sharefile-storage-zone-controller-security-threat/ 2026-10-01 https://threat.wiki/ops/ptc-windchill-flexplm-cve-2026-12569-exploitation/ 2026-10-01 https://threat.wiki/ops/qtfy-qscan-qtrouter-china-infrastructure-seizure-august-2026/ 2026-10-01 https://threat.wiki/ops/quest-kace-sma-cve-2025-32975-exploitation/ 2026-10-01 https://threat.wiki/ops/quickfox-fdmtp-supply-chain-compromise/ 2026-10-01 https://threat.wiki/ops/redwing-mobile-maas-android-bank-fraud/ 2026-10-01 https://threat.wiki/ops/ref6045-scmbanker-mexican-banking-fraud/ 2026-10-01 https://threat.wiki/ops/rmm-phishing-campaign-46-countries-verbatim-disposable-infra-anyrun-september-2026/ 2026-10-01 https://threat.wiki/ops/ruflo-cve-2026-59726-unauthenticated-mcp-rce/ 2026-10-01 https://threat.wiki/ops/russian-intelligence-signal-backup-key-phishing/ 2026-10-01 https://threat.wiki/ops/russian-oauth-whatsapp-device-link-account-hijacking-gtig/ 2026-10-01 https://threat.wiki/ops/russian-state-ip-camera-military-logistics-espionage/ 2026-10-01 https://threat.wiki/ops/sality-p2p-botnet-disruption-crowdstrike-august-31-2026/ 2026-10-01 https://threat.wiki/ops/sandworm-mode-ai-toolchain-worm/ 2026-10-01 https://threat.wiki/ops/scarcruft-yanbian-game-platform-supply-chain/ 2026-10-01 https://threat.wiki/ops/screenconnect-freeware-asyncrat-seo-campaign/ 2026-10-01 https://threat.wiki/ops/screenconnect-rogue-install-worm-like-vbs-propagation-huntress-september-2026/ 2026-10-01 https://threat.wiki/ops/servicenow-ai-platform-august-27-2026-three-cvss-10-unauthenticated-flaws/ 2026-10-01 https://threat.wiki/ops/servicenow-ai-platform-cve-2026-6875-exploitation/ 2026-10-01 https://threat.wiki/ops/servicenow-instance-unauthenticated-table-query-exploitation/ 2026-10-01 https://threat.wiki/ops/shadow-aether-ai-augmented-latam-intrusions/ 2026-10-01 https://threat.wiki/ops/shinyhunters-salesforce-oauth-abuse/ 2026-10-01 https://threat.wiki/ops/shopsprint-decimal-go-typosquat-dns-backdoor/ 2026-10-01 https://threat.wiki/ops/sicoob-sdk-nuget-banking-certificate-stealer/ 2026-10-01 https://threat.wiki/ops/siemens-rox-ii-zero-day-chain/ 2026-10-01 https://threat.wiki/ops/silent-swap-google-notes-crypto-clipper/ 2026-10-01 https://threat.wiki/ops/simonecorsi-mawesome-github-action-compromise/ 2026-10-01 https://threat.wiki/ops/simplehelp-cve-2026-48558-authentication-bypass-exploitation/ 2026-10-01 https://threat.wiki/ops/siyuan-kernel-publish-mode-unauthenticated-sql-execution-batch-september-3-2026/ 2026-10-01 https://threat.wiki/ops/sleepergem-rubygems-maintainer-account-compromise/ 2026-10-01 https://threat.wiki/ops/solana-fakefix-npm-pypi-developer-stealer/ 2026-10-01 https://threat.wiki/ops/solarwinds-serv-u-cve-2026-28318-exploitation/ 2026-10-01 https://threat.wiki/ops/sourtrade-browser-assembled-malware-malvertising/ 2026-10-01 https://threat.wiki/ops/speakingstone-darklantern-zbt-router-implants/ 2026-10-01 https://threat.wiki/ops/splunk-enterprise-cve-2026-20253-preauth-file-write-rce/ 2026-10-01 https://threat.wiki/ops/spring-91-cve-batch-ai-vulnerability-consumption-problem/ 2026-10-01 https://threat.wiki/ops/spring-ring-teams-vishing-rmm-petitpotam-campaigns-unit42-august-2026/ 2026-10-01 https://threat.wiki/ops/stealc-amadey-infrastructure-disruption/ 2026-10-01 https://threat.wiki/ops/stegabin-pastebin-steganography-npm-campaign/ 2026-10-01 https://threat.wiki/ops/stegoad-edge-extension-steganography-campaign/ 2026-10-01 https://threat.wiki/ops/stepsecurity-state-of-open-source-supply-chain-attacks-2026/ 2026-10-01 https://threat.wiki/ops/stock-exchange-executive-mailbox-espionage/ 2026-10-01 https://threat.wiki/ops/stopandprotect-hacked-wordpress-malware-infrastructure/ 2026-10-01 https://threat.wiki/ops/storm-2603-parallel-sharepoint-ransomware-intrusion/ 2026-10-01 https://threat.wiki/ops/strikeshark-sharkloader-cobalt-strike/ 2026-10-01 https://threat.wiki/ops/stubmaker-rubygems-typosquat-windows-stealer/ 2026-10-01 https://threat.wiki/ops/stylesmuggler-magento-adobe-commerce-unauth-rce-zero-day-sansec-september-2026/ 2026-10-01 https://threat.wiki/ops/superior-19-chrome-edge-extensions-wallet-drainer/ 2026-10-01 https://threat.wiki/ops/supplychain-local-memtensor-npm-pypi-go-worm-aikido-september-2026/ 2026-10-01 https://threat.wiki/ops/ta488-owareaper-owa-cve-2026-42897/ 2026-10-01 https://threat.wiki/ops/talos-clickfix-browser-crypto-theft-google-visualization-api-c2-september-2026/ 2026-10-01 https://threat.wiki/ops/talos-fmc-ongoing-exploitation-cve-2026-20079-cve-2026-20316-actor-clusters-september-2026/ 2026-10-01 https://threat.wiki/ops/tamperedchef-productivity-malware-clusters/ 2026-10-01 https://threat.wiki/ops/teampcp-afp-wapf-fbi-charged-two-men-august-2026/ 2026-10-01 https://threat.wiki/ops/ted-backdoor-haproxy-linux-espionage-dprk-curlrat-ssh-keylogger-september-2026/ 2026-10-01 https://threat.wiki/ops/telegram-chatid-1064260758-dependency-confusion-recon-cluster-september-2026/ 2026-10-01 https://threat.wiki/ops/telepuz-clickfix-vidar-campaign/ 2026-10-01 https://threat.wiki/ops/teleshim-middle-east-government-espionage/ 2026-10-01 https://threat.wiki/ops/telnyx-pypi-teampcp-compromise/ 2026-10-01 https://threat.wiki/ops/tenda-firmware-cve-2026-11405-hidden-authentication-backdoor/ 2026-10-01 https://threat.wiki/ops/terminalfix-clickfix-reverse-tunnel-multistage-microsoft-august-2026/ 2026-10-01 https://threat.wiki/ops/thailand-healthcare-rar-python-stealer/ 2026-10-01 https://threat.wiki/ops/tj-actions-reviewdog-compromise/ 2026-10-01 https://threat.wiki/ops/toddycat-umbrij-gmail-oauth/ 2026-10-01 https://threat.wiki/ops/toy-ghouls-angry-birds-hivemq-element-backdoor-september-2026/ 2026-10-01 https://threat.wiki/ops/toy-ghouls-genielocker-ransomware/ 2026-10-01 https://threat.wiki/ops/tradertraitor-jade-sleet-flatroof-roofdeck-macos-terraform-lockfile-lures-india-it-provider-sentinelone-september-2026/ 2026-10-01 https://threat.wiki/ops/transparent-tribe-operation-rapidrust-rustyshade-private-github-c2-usb-propagation-zscaler-september-2026/ 2026-10-01 https://threat.wiki/ops/trapdoor-crypto-stealer-cross-ecosystem/ 2026-10-01 https://threat.wiki/ops/trend-micro-apex-one-cve-2026-34926-exploitation/ 2026-10-01 https://threat.wiki/ops/trivy-compromise/ 2026-10-01 https://threat.wiki/ops/trivy-lite-llm-compromise-timeline/ 2026-10-01 https://threat.wiki/ops/turla-stockstay-backdoor-operations/ 2026-10-01 https://threat.wiki/ops/tuxbot-v3-evolution-iot-botnet/ 2026-10-01 https://threat.wiki/ops/twinloot-m365-dead-drop-teams-turn-python-implant/ 2026-10-01 https://threat.wiki/ops/uac-0145-clickfix-smartaxe-cowardduck/ 2026-10-01 https://threat.wiki/ops/uat-10147-spectre-badiis-ai-augmented-web-server-campaign/ 2026-10-01 https://threat.wiki/ops/uat-11795-starland-wldr-campaign/ 2026-10-01 https://threat.wiki/ops/uat-7810-longleash-orb-network/ 2026-10-01 https://threat.wiki/ops/ubiquiti-unifi-os-cve-2026-34908-34909-34910-exploitation/ 2026-10-01 https://threat.wiki/ops/ulid-xyz-transitive-delivery-chain-microsoftsystem64-dprk-september-2026/ 2026-10-01 https://threat.wiki/ops/unc6692-snow-malware-social-engineering/ 2026-10-01 https://threat.wiki/ops/unisoc-volte-video-call-modem-to-android-kernel-exploit-chain/ 2026-10-01 https://threat.wiki/ops/unit42-ai-assisted-cyber-attack-machine-speed-agentic-intrusion-september-2026/ 2026-10-01 https://threat.wiki/ops/unit42-clcri-1131-1163-llm-orchestrated-latam-campaigns-september-2026/ 2026-10-01 https://threat.wiki/ops/unit42-clcri-1171-offerloader-ppi-marketplace-september-2026/ 2026-10-01 https://threat.wiki/ops/unitree-g1-edu-two-root-rce-chains-cve-2026-76639-76640/ 2026-10-01 https://threat.wiki/ops/unk-deaddrop-developer-repository-phishing/ 2026-10-01 https://threat.wiki/ops/unk-masstraction-roundcube-university-mailserver-campaign/ 2026-10-01 https://threat.wiki/ops/uta0533-sonicwall-sma1000-zero-day-compromise/ 2026-10-01 https://threat.wiki/ops/veildrop-blogger-purelogs-stealer/ 2026-10-01 https://threat.wiki/ops/verdantbamboo-appliance-brickstorm-operation/ 2026-10-01 https://threat.wiki/ops/vidar-xmrig-factory-v3-malvertising-campaign/ 2026-10-01 https://threat.wiki/ops/vitevenom-chainveil-npm-campaign/ 2026-10-01 https://threat.wiki/ops/vmware-vmsa-2026-0006-vcenter-esx-critical-flaws/ 2026-10-01 https://threat.wiki/ops/vpmdhaj-opensearch-npm-cloud-secret-stealer/ 2026-10-01 https://threat.wiki/ops/vpn-go-browser-extension-clipboard-stealer/ 2026-10-01 https://threat.wiki/ops/water-sector-plc-configuration-tampering-july-2026/ 2026-10-01 https://threat.wiki/ops/weedhack-fake-minecraft-clients-seo-poisoning-jar-infostealer/ 2026-10-01 https://threat.wiki/ops/whatsapp-vbscript-manageengine-rmm-campaign/ 2026-10-01 https://threat.wiki/ops/windmill-cve-2026-29059-active-exploitation/ 2026-10-01 https://threat.wiki/ops/withgoogle-stitch-sdk-scope-squat/ 2026-10-01 https://threat.wiki/ops/wiz-ai-infrastructure-honeypot-90-day-attack-telemetry/ 2026-10-01 https://threat.wiki/ops/wiz-artifactory-in-the-wild-cve-2026-42016-42018-82329-september-2026/ 2026-10-01 https://threat.wiki/ops/wiz-litellm-off-guard-mcp-bypass-rce-cloud-compromise-september-2026/ 2026-10-01 https://threat.wiki/ops/wiz-red-agent-snowflake-jira-cicd-script-injection/ 2026-10-01 https://threat.wiki/ops/wordlistloader-synkloader-amatera-clearfake-campaigns/ 2026-10-01 https://threat.wiki/ops/wordpress-click2shell-forced-theme-install-dom-selection-csrf-chainable-rce-pwnai-september-2026/ 2026-10-01 https://threat.wiki/ops/wordpress-super-forms-elementor-pro-unauth-file-upload-rce-september-2026/ 2026-10-01 https://threat.wiki/ops/wordpress-wp2shell-cve-2026-63030-60137-exploitation/ 2026-10-01 https://threat.wiki/ops/wordpress-wpmu-dev-avada-translatepress-pods-givewp-critical-batch-august-29-2026/ 2026-10-01 https://threat.wiki/ops/wp-maps-pro-cve-2026-8732-exploitation/ 2026-10-01 https://threat.wiki/ops/wp-shellstorm-webshell-access-brokerage/ 2026-10-01 https://threat.wiki/ops/wshu-net-npm-credential-stealer-campaign/ 2026-10-01 https://threat.wiki/ops/xcsset-pub-dev-flutter-universal-file-viewer-aikido-september-2026/ 2026-10-01 https://threat.wiki/ops/xcsset-v40-xcode-supply-chain-campaign/ 2026-10-01 https://threat.wiki/ops/xinference-pypi-compromise/ 2026-10-01 https://threat.wiki/ops/xlabs-v1-ddos-for-hire-iot-botnet/ 2026-10-01 https://threat.wiki/ops/xz-utils-backdoor/ 2026-10-01 https://threat.wiki/patterns/agent-localhost-control-plane-rce/ 2026-10-01 https://threat.wiki/patterns/agent-skill-marketplace-poisoning/ 2026-10-01 https://threat.wiki/patterns/agentic-workflow-trust-boundary-failures/ 2026-10-01 https://threat.wiki/patterns/ai-agent-memory-poisoning/ 2026-10-01 https://threat.wiki/patterns/ai-augmented-adversary-operations/ 2026-10-01 https://threat.wiki/patterns/ai-brand-impersonation-phishing-malvertising/ 2026-10-01 https://threat.wiki/patterns/ai-browser-extension-confused-deputy/ 2026-10-01 https://threat.wiki/patterns/ai-coding-agent-symlink-write-confusion/ 2026-10-01 https://threat.wiki/patterns/ai-mind-viruses-agent-to-agent-propagation/ 2026-10-01 https://threat.wiki/patterns/ai-scanner-anti-analysis/ 2026-10-01 https://threat.wiki/patterns/amazon-kiro-powers-prompt-injection-data-exfiltration/ 2026-10-01 https://threat.wiki/patterns/ascii-smuggling-phishing-evasion-microsoft-september-2026/ 2026-10-01 https://threat.wiki/patterns/atlassian-rovo-prompt-to-data-exfiltration/ 2026-10-01 https://threat.wiki/patterns/azure-devops-mcp-pr-prompt-injection/ 2026-10-01 https://threat.wiki/patterns/benchmaxxing-benchmark-integrity-cyber-ai/ 2026-10-01 https://threat.wiki/patterns/browser-based-developer-ide-oauth-token-theft/ 2026-10-01 https://threat.wiki/patterns/claude-code-github-action-prompt-injection/ 2026-10-01 https://threat.wiki/patterns/clickonce-com-hijacking-abuse/ 2026-10-01 https://threat.wiki/patterns/cloud-bucket-namespace-hijacking/ 2026-10-01 https://threat.wiki/patterns/cloud-logging-control-plane-tampering/ 2026-10-01 https://threat.wiki/patterns/coding-agent-ci-harness-handoff-failures/ 2026-10-01 https://threat.wiki/patterns/coding-agent-hook-audit-elastic-cursor-tool-calls/ 2026-10-01 https://threat.wiki/patterns/coding-agent-parented-tunnels-and-persistence/ 2026-10-01 https://threat.wiki/patterns/collaboration-channel-identity-abuse/ 2026-10-01 https://threat.wiki/patterns/crypto-supply-chain-transaction-authority/ 2026-10-01 https://threat.wiki/patterns/cursor-windows-workspace-path-binary-hijack/ 2026-10-01 https://threat.wiki/patterns/dependabot-cross-ecosystem-malware-alerts/ 2026-10-01 https://threat.wiki/patterns/deployment-poisoning-github-actions/ 2026-10-01 https://threat.wiki/patterns/developer-tool-config-auto-execution/ 2026-10-01 https://threat.wiki/patterns/direct-to-ip-malware-communications/ 2026-10-01 https://threat.wiki/patterns/entra-rogue-device-registration-ai-identifiers/ 2026-10-01 https://threat.wiki/patterns/forged-platform-trust-primitives-integrity-regeneration-september-2026/ 2026-10-01 https://threat.wiki/patterns/git-hash-chain-malleability/ 2026-10-01 https://threat.wiki/patterns/github-actions-oidc-subject-claim-collisions/ 2026-10-01 https://threat.wiki/patterns/github-api-enumeration-token-abuse/ 2026-10-01 https://threat.wiki/patterns/gitlab-incoming-email-token-account-wide-credential-ip-allowlist-bypass-aikido-september-2026/ 2026-10-01 https://threat.wiki/patterns/guardfall-ai-agent-shell-guard-bypass/ 2026-10-01 https://threat.wiki/patterns/internet-exposed-unauthenticated-mcp-servers/ 2026-10-01 https://threat.wiki/patterns/kiota-openapi-metadata-command-injection/ 2026-10-01 https://threat.wiki/patterns/langgraph-checkpointer-injection-rce/ 2026-10-01 https://threat.wiki/patterns/llm-encrypted-reasoning-trace-replay-arxiv-2608-09867/ 2026-10-01 https://threat.wiki/patterns/llm-slop-false-cves-sqlite-batch/ 2026-10-01 https://threat.wiki/patterns/log4j-filteredobjectinputstream-ai-agent-bypass-sonatype-2026-006746/ 2026-10-01 https://threat.wiki/patterns/malicious-infrastructure-provider-concentration/ 2026-10-01 https://threat.wiki/patterns/mcp-stdio-command-execution/ 2026-10-01 https://threat.wiki/patterns/mcp-tool-description-poisoning/ 2026-10-01 https://threat.wiki/patterns/microsoft-teams-external-chat-phishing/ 2026-10-01 https://threat.wiki/patterns/nemoclaw-local-ollama-chat-template-poisoning/ 2026-10-01 https://threat.wiki/patterns/nodejs-runtime-malware-delivery-symantec-september-2026/ 2026-10-01 https://threat.wiki/patterns/npm-bin-entry-dependency-confusion/ 2026-10-01 https://threat.wiki/patterns/npm-install-explicit-trust-controls/ 2026-10-01 https://threat.wiki/patterns/npm-publish-time-malware-scanning/ 2026-10-01 https://threat.wiki/patterns/phantom-squatting-ai-hallucinated-domains/ 2026-10-01 https://threat.wiki/patterns/plugin4shell-agent-plugin-sha-pinning-bypass-air-september-2026/ 2026-10-01 https://threat.wiki/patterns/product-instructed-npx-command-unclaimed-package-name-squat-september-2026/ 2026-10-01 https://threat.wiki/patterns/provenance-marker-state-divergence-access-control/ 2026-10-01 https://threat.wiki/patterns/sentry-mcp-agentjacking/ 2026-10-01 https://threat.wiki/patterns/supply-chain-actor-profile/ 2026-10-01 https://threat.wiki/patterns/synced-passkey-endpoint-compromise/ 2026-10-01 https://threat.wiki/patterns/unit42-aws-agentcore-harness-shell-identity-vault-heap-exfiltration-september-2026/ 2026-10-01 https://threat.wiki/patterns/unit42-nova-frontier-ai-autonomous-vulnerability-discovery-august-2026/ 2026-10-01 https://threat.wiki/patterns/unit42-spiffe-spire-cgroup-workload-identity-spoofing-spooffe-september-2026/ 2026-10-01 https://threat.wiki/patterns/unit42-state-of-ai-enabled-malware-august-2026/ 2026-10-01 https://threat.wiki/patterns/vertex-ai-staging-bucket-squatting/ 2026-10-01 https://threat.wiki/patterns/vms-wont-contain-cyber-capable-agents-trail-of-bits/ 2026-10-01 https://threat.wiki/patterns/webmail-css-trust-boundary-attacks/ 2026-10-01 https://threat.wiki/people/ 2026-10-01 https://threat.wiki/people/jiat75/ 2026-10-01 https://threat.wiki/tools/acr-stealer/ 2026-10-01 https://threat.wiki/tools/aeternum/ 2026-10-01 https://threat.wiki/tools/alinubx-sys-rapuncel-fake-lastpass-byovd-stealer-lastpass-delphos-september-2026/ 2026-10-01 https://threat.wiki/tools/amos-atomic-macos-stealer-evolving-indicators-unit42-september-2026/ 2026-10-01 https://threat.wiki/tools/arcbridge/ 2026-10-01 https://threat.wiki/tools/bifrost-cve-2026-90898-mcp-stdio-unauthenticated-rce/ 2026-10-01 https://threat.wiki/tools/bindcloak/ 2026-10-01 https://threat.wiki/tools/brazetsu/ 2026-10-01 https://threat.wiki/tools/bridgehead/ 2026-10-01 https://threat.wiki/tools/busysnake-stealer/ 2026-10-01 https://threat.wiki/tools/canisterworm/ 2026-10-01 https://threat.wiki/tools/cavern/ 2026-10-01 https://threat.wiki/tools/chainlit-mcp-cve-2026-45018-45019-mcp-rce-ssrf/ 2026-10-01 https://threat.wiki/tools/chainscript-rat-polygon-websocket-c2-blackpoint-september-2026/ 2026-10-01 https://threat.wiki/tools/check-point-security-management-server-cve-2026-91843-login-stack-overflow-root-rce-september-2026/ 2026-10-01 https://threat.wiki/tools/chocopoc/ 2026-10-01 https://threat.wiki/tools/crownx/ 2026-10-01 https://threat.wiki/tools/deadlock-ransomware/ 2026-10-01 https://threat.wiki/tools/deepseek-harness-cve-2026-82533-agent-sandbox-escape/ 2026-10-01 https://threat.wiki/tools/djinn-stealer/ 2026-10-01 https://threat.wiki/tools/encforge/ 2026-10-01 https://threat.wiki/tools/fast16/ 2026-10-01 https://threat.wiki/tools/fdmtp/ 2026-10-01 https://threat.wiki/tools/first-vpn/ 2026-10-01 https://threat.wiki/tools/forge-jsxy/ 2026-10-01 https://threat.wiki/tools/four-critical-trust-failure-cves-netty-sni-fallback-gitpython-hookspath-ox-september-2026/ 2026-10-01 https://threat.wiki/tools/genielocker/ 2026-10-01 https://threat.wiki/tools/gigawiper/ 2026-10-01 https://threat.wiki/tools/gocaracal-dark-caracal-ethereum-smart-contract-c2-fallback/ 2026-10-01 https://threat.wiki/tools/graphspy/ 2026-10-01 https://threat.wiki/tools/gsut-hta-stage-loader-banco-do-brasil-landing-templates-npm-september-2026/ 2026-10-01 https://threat.wiki/tools/hollowgraph/ 2026-10-01 https://threat.wiki/tools/ipcheck-hashed-vercel-app-require-time-server-code-cluster-september-2026/ 2026-10-01 https://threat.wiki/tools/isolated-vm-external-copy-type-confusion-sandbox-escape/ 2026-10-01 https://threat.wiki/tools/jsonata-cve-2026-77413-77414-77415-arbitrary-code-execution/ 2026-10-01 https://threat.wiki/tools/keycloak-cve-2026-18963-unauthenticated-account-takeover/ 2026-10-01 https://threat.wiki/tools/kimwolf-v7/ 2026-10-01 https://threat.wiki/tools/labubarat/ 2026-10-01 https://threat.wiki/tools/lurkproxy/ 2026-10-01 https://threat.wiki/tools/marimo-cve-2026-75149-mcp-command-injection/ 2026-10-01 https://threat.wiki/tools/mixedkey/ 2026-10-01 https://threat.wiki/tools/modbeacon/ 2026-10-01 https://threat.wiki/tools/moviereaper-torrent-framework-solana-c2-kaspersky-september-2026/ 2026-10-01 https://threat.wiki/tools/myra-rat/ 2026-10-01 https://threat.wiki/tools/nightledger/ 2026-10-01 https://threat.wiki/tools/noderabbit/ 2026-10-01 https://threat.wiki/tools/octlurk/ 2026-10-01 https://threat.wiki/tools/owareaper/ 2026-10-01 https://threat.wiki/tools/pamstealer/ 2026-10-01 https://threat.wiki/tools/parashells-parallels-desktop-appliance-extract-argument-injection-root-cve-2026-90894/ 2026-10-01 https://threat.wiki/tools/phantomraven-llm-generated-npm-infostealer-bug-bounty-hunter-crowdstrike-september-2026/ 2026-10-01 https://threat.wiki/tools/pollcat/ 2026-10-01 https://threat.wiki/tools/quimarat/ 2026-10-01 https://threat.wiki/tools/rathat-android-adb-self-pairing-genai-driven-spyware-zimperium-september-2026/ 2026-10-01 https://threat.wiki/tools/redc2/ 2026-10-01 https://threat.wiki/tools/redwing/ 2026-10-01 https://threat.wiki/tools/remotepe/ 2026-10-01 https://threat.wiki/tools/roadtools/ 2026-10-01 https://threat.wiki/tools/rustduck/ 2026-10-01 https://threat.wiki/tools/scmbanker/ 2026-10-01 https://threat.wiki/tools/showboat/ 2026-10-01 https://threat.wiki/tools/silklurk/ 2026-10-01 https://threat.wiki/tools/sleepwalker-passive-backdoor-magic-packet-bytecode/ 2026-10-01 https://threat.wiki/tools/spark-rat-cambodia-ardrv-sys-byovd-multi-stage/ 2026-10-01 https://threat.wiki/tools/spectre-cross-platform-backdoor-specter-rootkit/ 2026-10-01 https://threat.wiki/tools/sprysocks/ 2026-10-01 https://threat.wiki/tools/starland-rat/ 2026-10-01 https://threat.wiki/tools/stockstay/ 2026-10-01 https://threat.wiki/tools/taskweaver/ 2026-10-01 https://threat.wiki/tools/telepuz/ 2026-10-01 https://threat.wiki/tools/teleshim/ 2026-10-01 https://threat.wiki/tools/the-gentlemen-ransomware/ 2026-10-01 https://threat.wiki/tools/tinyrct/ 2026-10-01 https://threat.wiki/tools/ulej-flowerbed/ 2026-10-01 https://threat.wiki/tools/umbrij/ 2026-10-01 https://threat.wiki/tools/unbound-dnssec-dnskey-compression-pointer-heap-overflow-cve-2026-81642-nlnetlabs-september-2026/ 2026-10-01 https://threat.wiki/tools/veeam-agent-windows-cve-2026-32996-session-uid-log-leak-system-lpe-active-exploitation-arcticwolf-september-2026/ 2026-10-01 https://threat.wiki/tools/vm2-nodevm-host-dns-hijack/ 2026-10-01 https://threat.wiki/tools/weaselbiscuit-npm-stealer-beavertail-ottercookie-dprk-opensourcemalware-september-2026/ 2026-10-01 https://threat.wiki/tools/wldr-agent/ 2026-10-01 https://threat.wiki/tools/workerd-code-mode-sandbox-escape-cross-tenant-heap-swipe/ 2026-10-01 https://threat.wiki/tools/xcsset/ 2026-10-01 https://threat.wiki/tools/xinference-cve-2026-61539-llama3-tool-call-eval-rce/ 2026-10-01 https://threat.wiki/tools/zereight-mcp-gitlab-cve-2026-61560-unauthenticated-sse-pat-exfiltration-september-2026/ 2026-10-01