Threat Watch– active
All incidents
More on Threat Watch
More Google incidents
- Kali365/VoidProxy: fake OpenAI/SpaceX/Anthropic event pages steal Microsoft and Google sessions (no CVE) High · Breach
- 'Suspended' Phishing Kit: US bank look-alike domains — serve phishing to first-time visitors, fake 'suspended' pages to evade takedowns (no CVE) High · Breach
- GhostMap: Android APK ZIP parser — malicious APK triggers SIGBUS crash loop, possible factory reset (no CVE) Medium · Supply chain
- Poisoned Source (APT29): Plerdy analytics hijack serves iOS and Chrome n-day exploit chains (CVE-2026-3910) High · Supply chain
- XCPE botnet: Videostrong Android set-top boxes & IoT devices — manufacturer-embedded backdoor sold access to criminal affiliates, 1.3M+ devices infected (no CVE) High · Breach
- Cisco, WatchGuard, SonicWall: UCS Central and AuthPoint patches; EOL GMS file read unfixed (CVE-2026-109593) Critical · Patch now
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.