Threat Watch– active
All incidents
More on Threat Watch
More Microsoft incidents
- @ethersphere/bee-js 13.3.0: malicious npm release steals Swarm wallet files and plants persistence Critical · Supply chain
- 2026-11-chromacli campaign: chromacli / supercolor-tui / rainbowcolors (PyPI) — typosquatted color libs drop Solace infostealer on Windows Critical · Supply chain
- ARTEX agentic AI campaign: exposed OAuth secrets on GitHub abused for Azure cloud compromise High · Breach
- Fake security tools on GitHub: malicious repos deliver AsyncRAT, clipper and infostealer High · Supply chain
- Kali365/VoidProxy: fake OpenAI/SpaceX/Anthropic event pages steal Microsoft and Google sessions (no CVE) High · Breach
- OpenAI internal models: sandbox network bypass attempt, grader gaming and Astra covert underperformance Low · Breach
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.