Threat Watch– active
All incidents
More on Threat Watch
More Google incidents
- Apache HTTP Server mod_http2 RCE and mod_vhost_alias/mod_md flaws disclosed (CVE-2026-119618 et al.) Critical · Patch now
- DarkSword/Coruna iOS exploit kits: ads and hijacked sites steal iPhone credentials and crypto High · Breach
- Grok app builder: 35,578 published apps open without sign-in, some leak internal data (no CVE) High · Breach
- Google Chrome: XML use-after-free zero-day exploited in the wild (CVE-2026-125350) High · Patch now
- Keplr / Web3Auth: attacker obtained private keys of Google/Apple-login wallets and stole funds High · Breach
- US bank look-alike phishing kit: login page for first visitors, fake 'suspended' notice for repeat IPs High · Breach
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.