Threat Watch– active
All incidents
More on Threat Watch
More N incidents
- agentenact (npm): malicious package 0.2.0 fully compromises machines that install it (no CVE) Critical · Supply chain
- MLflow third-party scorer deserialization RCE — unauthenticated code execution on MLflow servers (CVE-2026-116692) Critical · Supply chain
- Malware in dsh-vm-tester npm package — full machine compromise; rotate secrets (no CVE) Critical · Supply chain
- Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-48356) Critical · Patch now
- EPICS Base: AI agent finds 4 severe bugs incl. critical RCE in industrial control software (CVE-2026-114595) Critical · Patch now
- 2026-10-numprint: PyPI package numprint — malicious install-time RAT executing attacker commands via GitHub Gist C2 Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.