Related Threat Clusters
-
Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign
A critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS is being actively exploited in a large-scale cyberattack affecting over 700 websites, including those of Harvard University, Oxford University, Auburn…
17 articles · Updated May 25, 2026 -
Anthropic's Claude Mythos Preview Sparks Cybersecurity Revolution
Anthropic has announced the launch of Project Glasswing, utilizing its unreleased AI model, Claude Mythos Preview, to identify and exploit thousands of critical software vulnerabilities across major operating systems…
1399 articles · Updated April 7, 2026 -
Silver Fox Targets Japanese Firms with Spearphishing During Tax Season
The Silver Fox cyber threat group is conducting a targeted spearphishing campaign against Japanese businesses, particularly manufacturers, during the annual tax filing and corporate restructuring season. The attackers…
8 articles · Updated March 26, 2026 -
ShinyHunters Target SSO Accounts in Voice Phishing Attacks
The ShinyHunters extortion gang has claimed responsibility for a series of voice phishing attacks targeting single sign-on (SSO) accounts at major platforms including Okta, Microsoft, and Google. In these attacks,…
191 articles · Updated January 25, 2026 -
Code Formatters Expose Sensitive Credentials from Major Organizations
Thousands of credentials, authentication keys, and configuration data from banks, government, and tech organizations were found in publicly accessible JSON snippets submitted to the JSONFormatter and CodeBeautify tools.…
4 articles · Updated November 25, 2025 -
Fintech West and Howden Partner to Enhance Cyber Resilience
Fintech West has partnered with Howden Salisbury to improve cyber resilience following a collaborative event in December 2025. This partnership aims to connect fintech and insurance sectors to address cyber risks and…
2 articles · Updated May 1, 2026 -
Code Formatting Tools Expose Sensitive Credentials
Researchers from watchTowr discovered that over 80,000 sensitive credentials, including authentication keys and API tokens, were exposed through JSON snippets submitted to the JSONFormatter and CodeBeautify tools. This…
4 articles · Updated November 25, 2025
Recent Intelligence Reports
- Some organisations in India get access to Mythos AI and Anthropic expands Project Glasswing — Indiatoday.In · June 3, 2026
- Critical Ghost CMS Vulnerability Exploited to Hack 700+ Websites — Thecyberexpress · May 26, 2026
- FinTech West and Howden form strategic alliance — Finextra · April 29, 2026
- A cunning predator: How Silver Fox preys on Japanese firms this tax season — Welivesecurity · March 27, 2026
- ShinyHunters claims ongoing Salesforce Aura data theft attacks — Bleepingcomputer · March 9, 2026
- Code-formatters expose thousands of secrets from banks, govt, tech orgs — Bleepingcomputer · November 25, 2025