Threat Watch– active
All incidents
More on Threat Watch
More Google incidents
- Poisoned Source (APT29): Plerdy analytics hijack serves iOS and Chrome n-day exploit chains (CVE-2026-3910) High · Supply chain
- 3AM ransomware (suspected AI-assisted): UK school estate, ~37 of 50 machines encrypted after AD changes High · Breach
- OverLord stealer: forged commit force-pushed to antd-img-crop GitHub repo steals credentials on build High · Supply chain
- Android: November 2026 patches fix 216 flaws, incl. critical Framework RCE (CVE-2026-58868) Critical · Patch now
- XCPE Botnet: Videostrong Android TV set-top boxes — OEM preinstalled backdoor enrolled 1.3M+ devices in botnet (no CVE) High · Supply chain
- hs-framework (npm): malicious package installs remote tarball from attacker-controlled GCS bucket, executing arbitrary code on install Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.