Threat Watch– active
All incidents
More on Threat Watch
More Microsoft incidents
- Kali365/VoidProxy: fake OpenAI/SpaceX/Anthropic event pages steal Microsoft and Google sessions (no CVE) High · Breach
- Fake-download trojanized Inno installer campaign: Windows users — monetization payloads via cracked-software lures (no CVE) Medium · Supply chain
- Suntory Holdings: group cloud service breach exposes ~100,000 people's names and emails, incl. employees Medium · Breach
- IT help-desk vishing: fake support calls gave attackers Quick Assist access, one led to VYPR ransomware High · Breach
- Philippine migrant-worker databases (POEA, now DMW): 27 SQL Server backups (68.8 GiB) copied out High · Breach
- Skyw4lker: device code phishing campaign targeting U.S. organizations via Microsoft 365 token theft High · Breach
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.