Threat Watch– active
All incidents
More on Threat Watch
More Google incidents
- OverLord stealer: forged commit force-pushed to antd-img-crop GitHub repo steals credentials on build High · Supply chain
- XCPE Botnet: Videostrong Android TV set-top boxes — OEM preinstalled backdoor enrolled 1.3M+ devices in botnet (no CVE) High · Supply chain
- hs-framework (npm): malicious package installs remote tarball from attacker-controlled GCS bucket, executing arbitrary code on install Critical · Supply chain
- SMS of Death: zero-click WAP Push SMS crashes Android telephony, blocking emergency calls (CVE-2026-58882) Critical · Patch now
- GitHub Actions injection campaign targets 61 public repos (incl. Trivy, MLflow) via hidden HTML comments High · Supply chain
- Skyw4lker: device code phishing campaign targeting U.S. organizations via Microsoft 365 token theft High · Breach
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.