Cyber Threat Intelligence

ShinyHunters claims 9,000 schools impacted by Canvas breach; Polish water plants hit by ICS attacks; 74 critical data exposures include US DoD, Taiwan Military, and financial firms.

32 critical data exposure events today, led by telecom and government leaks in France, Canada, and Israel. Cisco and PAN-OS zero-day patches urgent. Cloud worm PCPJack steals credentials at scale.

Palo Alto PAN-OS zero-day exploited in the wild; Daemon Tools supply-chain attack; MuddyWater false-flag ransomware; 54 critical data exposures including US, Brazil, France, and Indonesia.

Today's brief covers a critical Linux kernel LPE, an Apache HTTP/2 RCE, and a DAEMON Tools supply chain attack. Over 50 data exposure events hit Israel, Mexico, and Ecuador, with Cinzz and NoName057(1

55 critical data exposures reported including U.S. Navy, Robinhood, and Rheinmetall. Active exploitation of Linux 'Copy Fail' bug begins. Phishing campaign hits 80+ orgs using RMM tools.

Massive data leak campaign by FreeCity hits 10+ organizations across Malaysia, Vietnam, UK, Spain. CISA warns of active exploitation of Linux privilege escalation bug CVE-2026-31431. Israeli, Indonesi

212 events, 53 critical. Forum claims target Microsoft, Orange, Aviso Wealth; Trellix confirms source-code breach; CVE-2026-31431 Linux root active.

180 events tracked; 70 critical exposures. Indonesia, US, Brazil targeted. Mr. Hanz Xploit active. Government, telecom, finance sectors hit.

47 forum data-breach posts hit US targets; Google patches CVSS-10 Gemini CLI RCE; Linux 'Copy Fail' kernel flaw enables root.

62 critical data exposure events today, with TheFallen targeting US insurance and finance. Indonesia, Morocco, and US lead victim countries. Supply chain attacks on npm and SAP packages reported.

184 events tracked; Polymarket API breach, Wells Fargo data sale, GitHub CVE-2026-3854 RCE, VECT 2.0 wiper, and LofyGang stealer resurface. Indonesia, France, US heavily targeted.