Threat Watch– active
All incidents
More on Threat Watch
More Google incidents
- Chrome XML Use-After-Free zero-day: Google Chrome — emergency update for 8th actively exploited zero-day of 2026 (CVE-2026-125350) High · Patch now
- Keplr / Web3Auth: attacker obtained private keys of Google/Apple-login wallets and stole funds High · Breach
- US bank look-alike phishing kit: login page for first visitors, fake 'suspended' notice for repeat IPs High · Breach
- Kali365/VoidProxy: fake OpenAI/SpaceX/Anthropic event pages steal Microsoft and Google sessions (no CVE) High · Breach
- GhostMap: Android APK ZIP parser — malicious APK triggers SIGBUS crash loop, possible factory reset (no CVE) Medium · Supply chain
- Poisoned Source (APT29): Plerdy analytics hijack serves iOS and Chrome n-day exploit chains (CVE-2026-3910) High · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.