Account required
Sign in to view threat intelligence
CTI data is restricted to registered users. Create a free account to browse the dashboard, then upgrade to a paid plan to unlock event details and IOCs.
Cyber Threat Intelligence
Daily snapshot
Daily brief 12 May 2026
Canvas ransom, Shai-Hulud npm wave, NoName DDoS surge
Instructure pays ShinyHunters for 3.65TB Canvas data; Mini Shai-Hulud npm wave hits TanStack, Mistral AI, UiPath; 56 alleged breach/leak claims.
Events
0
In current view
Critical exposure
0
Last 24 hours
0
vs previous 24h
Distinct actors
0
In current view
By attack category · 9
Data Exposure
0
Ransomware
0
Access Brokerage
0
DDoS
0
Web Defacement
0
Malware Ops
0
Vulnerability
0
Threat Alert
0
Cyber Operation
0
Top victim countries
No country data in this view.
Subscriber-only
CTI brief — 2026-05-12
The CTI dashboard tracks dark-web disclosures, ransomware claims, data leaks and active threat actors. Full event list, threat-actor profiles and historical archive are available to subscribers.
Events
showing 0
Category
Title
Actor
Country
Date
- Data BreachAlleged data breach of Banda Aceh City GovernmentCIAMIS CYBER TEAMIndonesia12 May
- Access BrokerageAlleged unauthorized access to unidentified T-Mobile stores in AustriaРЕЗЕРВNNNM057(16)Austria12 May
- DDoSIT ARMY OF RUSSIA targets the website of Pension Fund portal of UkraineIT ARMY OF RUSSIAUkraine12 May
- Data BreachAlleged Data Breach DPR-RI Citizen Data DatabaseJAX7Indonesia12 May
- Data BreachAlleged Data Breach of AMGtime Customer & Dealer DatabasecourtikaUnited States12 May
- Data BreachAlleged data breach of ZAMECO IZ4ne0daysPhilippines12 May
- Access BrokerageAlleged Sale of Canadian Credit Card RecordsbajbyCanada12 May
- Access BrokerageAlleged Sale of Unauthorized Access to an Unidentified software finance company in GermanyBig-BroGermany12 May
- Access BrokerageAlleged sale of unauthorized access to unidentified shop in ItalyBig-BroItaly12 May
- Data Breach1 million cryptocurrency tradershudiebi88Dark Web12 May
- Data Breachpaci.gov.kw0cx00iqKuwait12 May
- Data BreachPortugal Commercial/ Sales consulting companyKurdPortugal12 May
- Data BreachRoca Asociadosomni777Spain12 May
- Data Breachpurifyx.aiomni777Dark Web12 May
- Access BrokerageAlleged Sale of Unauthorized Access to an Unidentified Organisation in UKJhonsonUnited Kingdom12 May
- Data Breachfoodini.alomni777Albania12 May
- Data Breachmanzil.co - Halal Investing Platformomni777Canada12 May
- Data Breachakru.coomni777United States12 May
- Data BreachVirusTotal API Key - High-Tier Cybersecurity Corporate AccountZerrixUnited States12 May
- Data BreachDark Spot Corrector Products 156K ( nuhanciam.com )BambiFrance12 May
- Data Breachhuongdanvien.vn +500K ( Vietnam )BambiVietnam12 May
- Data BreachAlleged Data Breach of Cushman & WakefieldNiles in Cyber Threat Intelligence FeedsUnited States12 May
- Data LeakAlleged data leak of Multiple government and law enforcement entities0056113—12 May
- RansomwareKaplan Companies falls victim to Akira ransomwareakiraUnited States12 May
- RansomwareTaylor Clay Products. falls victim to Akira ransomwareakiraUnited States12 May
- DDoSRipperSec targets the website of GlatzRipperSecIsrael12 May
- Access BrokerageAlleged Unauthorized access to unidentified Turkish agricultural sectorArmenian codeTurkey12 May
- DDoSArmenian code targets the website of Telecom ArmeniaArmenian codeArmenia12 May
- Access BrokerageAlleged Unauthorized Access to MiCasinoALFANETCuraçao12 May
- RansomwareMediapost España falls victim to Qilin ransomwareQilinSpain12 May
- Data BreachAleeged data breach of CARMFlazasecFrance12 May
- Data BreachVirginia Department of Wildlifew1kkidUnited States12 May
- Data BreachKRIA T-EXSPEED + T-REDSPEEDprtscItaly12 May
- Data BreachGabloty.plKatarinkaPoland12 May
- Data Breachsivvi.com [~300kUAE]Databroker1United Arab Emirates12 May
- Data BreachCrypto Tax Platform DBMichelMonetDark Web12 May
- Data Breach0day - Linux LPEberz0kDark Web12 May
- Data Breach1,500,000 rows of PII from Guidely.inBigBrotherIndia12 May
- Data Breach3.9M Brazil habibs.com. Fast Foodxakoji3864Brazil12 May
- Data Breachsyria gulf banks-rootSyria12 May
- Threat AlertOpsShadowStrike claims to target IsraelOpsShadowStrikeIsrael12 May
- RansomwareMANHATTAN BROADCASTING COMPANY, INC. falls victim to Akira ransomwareakiraUnited States12 May
- RansomwareVision 3 Architects falls victim to Akira ransomwareakiraUnited States12 May
- Data BreachMBet.br.com | Online Casino KYC + PIIzSeniorBrazil12 May
- DDoSRipperSec targets the website of PostaRipperSecIsrael12 May
- Web DefacementBABAYO EROR SYSTEM targets the website of Kecamatan SukajadiBABAYO EROR SYSTEMIndonesia12 May
- Data BreachAlleged data breach of Marches PublicslazasecFrance12 May
- Data BreachAlleged data breach of eMedalscourtikaCanada12 May
- DDoSNoName targets the website of SCO2TNoName057(16)Austria12 May
- DDoSNoName targets the website of KunstHausWien – Museum HundertwasserNoName057(16)Austria12 May
- DDoSNoName targets the website of Haus der Musik Museum GmbHNoName057(16)Austria12 May
- VulnerabilityAlleged leak of a SQL injection vulnerability on RSUD BlambanganKONCO ERROR SYSTEMIndonesia12 May
- RansomwareAvanti Windows & Doors falls victim to Aur0ra RansomwareAur0raUnited States12 May
- Access BrokerageAlleged sale of unauthorized access to unidentified shop from USAzxc_ghoulUnited States12 May
- Web DefacementHax.or targets the website of digiet.comHax.or—12 May
- Data BreachAlleged Data Breach of AvnetFulcrumSecUnited States12 May
- RansomwareNorth West Handling Systems falls victim to Aur0ra RansomwareAur0raUnited States12 May
- RansomwareStartec Group of Companies falls victim to Aur0ra RansomwareAur0raCanada12 May
- RansomwareSAHARUANG CO., LTD. falls victim to Lamashtu ransomwareLAMASHTUThailand12 May
- RansomwareNaRaYa falls victim to Lamashtu ransomwareLAMASHTUThailand12 May
- Web DefacementHax.or targets the website of expertteam.topHax.or—12 May
- Data BreachAlleged data breach of BPJS Ketenagakerjaan Kota MetroJAX7Indonesia12 May
- VulnerabilityAlleged Vulnerability in Al-Sharkia PortalZ-BL4CX-H4TEgypt12 May
- DDoSZ-BL4CX-H4T targets the website of Patton & HyderZ-BL4CX-H4TUnited States12 May
- DDoSZ-BL4CX-H4T targets the website of MBC ShahidZ-BL4CX-H4TSaudi Arabia12 May
- Threat AlertALFANET Claims to Target City of Sioux FallsALFANETUnited States12 May
- DDoSNoName targets the website of AusschreibungssucheNoName057(16)Austria12 May
- DDoSNoName targets the website of Land VorarlbergNoName057(16)Austria12 May
- DDoSNoName targets the website of Visiting ViennaNoName057(16)Austria12 May
- DDoSNoName targets the website of Vienna Public TransportNoName057(16)Austria12 May
- Data LeakAlleged Leak of Driving License Data From USAAlberto228United States12 May
- DDoSNoName targets the website of Kraken Travel Ltd.NoName057(16)United Kingdom12 May
- DDoSNoName targets the website of Auftragnehmerkataster Österreich -ANKÖNoName057(16)Austria12 May
- Access BrokerageAlleged sale of unauthorized access to an unidentified shop from FranceBig-BroFrance12 May
- DDoSZ-BL4CX-H4T targets the website of Cairo Airport CompanyZ-BL4CX-H4TEgypt12 May
- DDoSZ-BL4CX-H4T targets the website of Port of HaifaZ-BL4CX-H4TIsrael12 May
- RansomwareRivadeneyra Treviño falls victim to BravoX ransomwareBravoXMexico12 May
- DDoSTHE GARUDA EYE targets the website of Embassies of the Republic of KosovoTHE GARUDA EYEKosovo12 May
- DDoSDieNet targets the website of Internet ArchiveDieNetUnited States12 May
- Access BrokerageAlleged sale of unauthorized access to unidentified shop from FranceBig-BroFrance12 May
- RansomwareSmilepoint Dental Group falls victim to Space Bears RansomwareSpace BearsUnited States12 May
- Web DefacementDEFACER INDONESIAN TEAM targets the website of Technology Corporate ManagementDEFACER INDONESIAN TEAMSouth Africa12 May
- Web DefacementDEFACER INDONESIAN TEAM targets the website of MIKI KKDEFACER INDONESIAN TEAMJapan12 May
- Access BrokerageAlleged sale of login credentials of OpenDesawhoareIndonesia12 May
- Access BrokerageAlleged sale of unauthorized access to unidentified shop from UKcorptodayUnited Kingdom12 May
- Access BrokerageAlleged sale of unauthorized access to more than 30 service hosts on .gov.comagicrevColombia12 May
- DDoSINFERNALIS targets the website of Meta Platforms, Inc.INFERNALISUnited States12 May
- Web DefacementNicotine targets the website of Maiden StrideNicotineQatar12 May
- Web DefacementNicotine targets the website of Mini Minds NurseryNicotineUnited Arab Emirates12 May
- Data BreachAlleged data leak of GablotyKatarinkaPoland12 May
- Data BreachAlleged data leak of AREALdnstRussia12 May
- Web DefacementOpsShadowStrike targets the website of AHAL – Action for Human Rights and LiberationOpsShadowStrikeIndia12 May
- Data BreachAlleged data leak of MBET.comzSenior—12 May
- RansomwareThe Law Offices of Ben F. Barcus & Associates, PLLC falls victim to Genesis RansomwareGENESISUnited States12 May
- RansomwareHostBooks Limited falls victim to Genesis RansomwareGENESISIndia12 May
- RansomwarePALO falls victim to Genesis RansomwareGENESISUnited States12 May
- Malware OpsAlleged sale of malicious ScreenConnect deployment serviceselmayo_1—12 May
- RansomwarePequod Associates Ltd falls victim to Genesis RansomwareGENESISUnited Kingdom12 May
- Data BreachAlleged data leak of Ministry of Health of the Republic of IndonesiaXSVSHACKERIndonesia12 May
- RansomwareIntegrated Process Engineers & Constructors, Inc. (IPEC) falls victim to Genesis RansomwareGENESISUnited States12 May
- Data BreachAlleged Sale of EGRARBIGBROTHERSaudi Arabia12 May
- RansomwareFargo Moorhead West Fargo Chamber of Commerce falls victim to Genesis RansomwareGENESISUnited States12 May
- RansomwareCasino Gaming Commission (CGC) falls victim to Genesis RansomwareGENESISJamaica12 May
- RansomwareRBH Aerospace, Inc. falls victim to INC RANSOM RansomwareINC RANSOMUnited States12 May
- RansomwareBideawee falls victim to INC RANSOM RansomwareINC RANSOMUnited States12 May
- Data BreachAlleged data leak of Lopesan Hotel GroupTrezorSpain12 May
- DDoSINFERNALIS targets the website of Hunter Morpeth Motel and VillasINFERNALISAustralia12 May
- DDoSINFERNALIS targets the website of Gimbal View Drone ServicesINFERNALISAustralia12 May
- DDoSINFERNALIS targets the website of National Aboriginal Sporting Chance Academy (NASCA)INFERNALISAustralia12 May
- DDoSINFERNALIS targets the website of American Auto ElectricalINFERNALISAustralia12 May
- Data LeakAlleged leak of UK payroll dataTrezorUnited Kingdom12 May
- RansomwareAppDirect falls victim to Qilin ransomwareQilinCanada12 May
- RansomwareARWINI eV falls victim to Kairos ransomwareKairosGermany12 May
- Malware OpsAlleged Sale of Android Malware Development ServicesAndroidKitKat—12 May
- Data BreachAlleged data breach of Goodreads313 TeamUnited States12 May
- Data LeakAlleged sale of unidentified court dataconvince—12 May
- Access BrokerageAlleged Sale of Unauthorized Forti VPN Access to an Unidentified Company in USASantaAdUnited States12 May
- DDoSDienet targets the website of Canvas LMSDieNetUnited States12 May
- RansomwareLals Group falls victim to INC RANSOM RansomwareINC RANSOMUnited Arab Emirates12 May
- Cyber OperationCyber Attack Hits Direction Générale de la Comptabilité Publique et du Trésor—Senegal12 May
- Cyber OperationCyber Attack Hits HEBERGER Group—Germany12 May
- DDoSDienet targets the website of Israel PostDieNetIsrael12 May
- Data BreachAlleged data breach of Advanced Software Products GroupCMD OrganizationUnited States12 May
- DDoS313 Team targets the website of Goodreads313 TeamUnited States12 May
- RansomwareInternational Customer Care Services Inc. falls victim to Qilin ransomwareQilinCanada12 May
- RansomwareKeller Williams Real Estate – Exton falls victim to Qilin ransomwareQilinUnited States12 May
- Web Defacementchinafans targets the website of Spirit GroupchinafansIsrael12 May
- Access BrokerageAlleged Sale of Unauthorized RDWEB Domain User Access to a Business Services Company in FranceBig-BroFrance12 May
- RansomwarePangolin Editions Ltd falls victim to Qilin RansomwareQilinUnited Kingdom12 May
- Data LeakAlleged Sale of Personal Records DatabaseJudy—12 May
- Data BreachAlleged data breach of UniCreditDiseaseGermany12 May
- Web DefacementXYZ targets the website of Kpembe Nursing & Midwifery Training CollegeXYZGhana12 May
- Access BrokerageAlleged unauthorized access to unidentified surveillance system of a currency exchange in IsraelZ-PENTEST ALLIANCEIsrael12 May
- Web Defacementspl1nt3r targets the website of Faculdade Maltaspl1nt3rBrazil12 May
- Access BrokerageAlleged Unauthorized Access to City of AustinALFANETUnited States12 May
- Data LeakAlleged sale of Indonesian loan dataMikhelIndonesia12 May
- Access BrokerageAlleged Unauthorized Access to Prilux Lda.Z-PENTEST ALLIANCEPortugal12 May
- Data BreachAlleged data breach of SoftbankV0lt4r0x—12 May
- Data LeakAlleged sale of Vietnam gambling dataKevin WilliamsVietnam12 May
- Data LeakAlleged sale of Poland citizen dataKevin WilliamsPoland12 May
- RansomwareDepósito Dental Universitario falls victim to Lamashtu ransomwareLAMASHTUMexico12 May
- RansomwareSertes falls victim to Lamashtu ransomwareLAMASHTUMexico12 May
- Data BreachAlleged data breach of CoinbaseunconcidedUnited States12 May
- RansomwareFirst United Methodist Church Boerne falls victim to INTERLOCK RansomwareINTERLOCKUnited States12 May
- Access BrokerageAlleged Sale of Unauthorized Forti Access to an Electronics Manufacturing Company in MexicoBig-BroMexico12 May
- Data BreachAlleged data breach of Cyber RaiseLazarusUnited States12 May
- Access BrokerageAlleged sale of 581 CC from UKda_VinciUnited Kingdom12 May
- Data BreachAlleged data breach of Bangladesh Agricultural Development Corporation (BADC)vicmeowBangladesh12 May
- Access BrokerageAlleged Sale of E-Commerce Admin AccessesMater—12 May
- RansomwareInstitution of Civil Engineers falls victim to BrainCipher ransomwareBrain CipherUnited Kingdom12 May
- Malware OpsAlleged Sale of FortiOS Symlink Exploitdecider—12 May
- Data BreachAlleged data breach of Morgan StanleyThe BlackH4t MD-GhostUnited Kingdom12 May
- RansomwareGrad Jastrebarsko falls victim to ThreeAM RansomwareThreeAMCroatia12 May
No events match your filters.
Page 1 of 1
Active threat actors
click any actor to filter the list aboveNo active actors in this view.