Threat Watch– active
All incidents
More on Threat Watch
More OpenAI incidents
- Codex, Claude Code: planted AGENTS.md in Downloads makes agents install malicious npm package function-color High · Supply chain
- Node2Shell / HTTP2Shell: Brotli decoder flaw lets attackers run code in Node.js, Bun, Python and other HTTP software (CVE-2026-111497) Critical · Patch now
- OpenCode distillation attack breach — OpenCode Console users with linked AI providers had credentials exposed; attacker can run inference on victim accounts (no CVE) High · Breach
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.