Threat Watch– active
All incidents
More on Threat Watch
More Microsoft incidents
- fetchium PyPI malware: covert Windows loader with MSI dropper and Run-key persistence Critical · Supply chain
- ARTEX: open-source AI pentest agent used to turn leaked secrets into cloud access (no CVE) High · Breach
- Microsoft 365: device code phishing via fake Teams scheduler gave attacker a session at one construction firm High · Breach
- Luna Moth: vishing victims hand over Microsoft Graph tokens to exfiltrate law-firm files High · Breach
- GSocket: threat actors keep persistent relay-based C2 on Linux web servers after RCE patching High · Breach
- eMudhra/emSign CA key compromise — 8 more intermediate CAs revoked after buggy Python key-transfer script High · Breach
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.