Marketing/Advertising/Sales
191 threat reports.
- 13.4 Million Users Exposed: How 319 Chrome Extensions Quietly Hijacked Every Search Query
- Eight Critical Adobe Campaign Classic Flaws Put Enterprise Marketing Infrastructure at Risk
- AdFection: When Every Ad Impression Becomes a Potential Zero-Click Spyware Attack
- AdFection: How Targeted Ads Became a Zero-Click Pipeline for Candiru Spyware
- Rank Math PRO Hijacked: How a Trusted WordPress Plugin Update Channel Became a Self-Restoring Backdoor
- Fake Claude & ChatGPT Campaigns Are Targeting Your Developers Right Now
- CVE-2026-21589: Atlassian Data Center Under Siege as Exploits Hit Within Hours
- AdFection Campaign: How Mercenary Spyware Exploited Digital Advertising to Target Media and Government
- Microsoft's Xandr Hit with Record €8.6M Fine for Grindr Data Privacy Violation
- Microsoft's Xandr Hit with Record $9.6M Fine for Grindr Data Privacy Breach
- Critical Bricksforge WordPress Vulnerability Enables Unauthenticated Remote Code Execution
- ASOS Breach Exposes Critical Gaps in Customer-Facing SaaS Security
- Adception Attack: When Trusted Platforms Become Malware Delivery Vectors
- Fake Brand Partnerships Target YouTube Creators in Sophisticated Google Account Takeover Scam
- Fake AI Sites Steal Ad Accounts: The 2026 ChatGPT Phishing Campaign That Bypassed MFA
- Sophisticated Phishing Campaign Targets AI Advertising Professionals Through Fake ChatGPT and Gemini Portals
- Microsoft's X Account Hijacked for Cryptocurrency Fraud: A Wake-Up Call for Social Media Security
- WordPress Under Siege: How the SC Backdoor's Self-Healing Architecture Redefines Web Malware
- Critical Elementor CSRF Flaw Exposes 2 Million WordPress Sites to Admin Takeover
- Elementor WordPress Plugin CSRF Vulnerability Exposes 2 Million Sites to Admin Account Takeover
- Salesbleed Attack: How AI Agents Became the New Phishing Vector
- WordPress CVE-2026-87902: Critical RCE Vulnerability Exploited Within Hours
- WordPress Under Siege: CVE-2026-87902 Exploitation Analysis
- WordPress Comment2Shell: When Anonymous Comments Become Server Backdoors
- WordPress CVE-2026-87902: Critical Unauthenticated RCE Vulnerability Demands Immediate Action
- WordPress Click2Shell: How a CSRF Flaw Became a Critical RCE Threat
- WordPress Click2Shell Vulnerability: How a Simple Link Click Leads to Server Compromise
- Gyazo Breach Exposes 23.6 Million Users: Server Vulnerability Leads to Massive Data Theft
- Brevo Supply-Chain Attack Exposes CDN Security Gaps Through ClickFix Campaign
- Gyazo Breach Exposes Critical Gaps in Upload Security and Data Protection
- Critical WordPress Plugin Flaw Enables Mass Web Shell Deployment Campaign
- WordPress Under Fire: CVE-2026-27540 Plugin Flaw Enables Mass Webshell Attacks
- Supply Chain Attack Compromises Admin Menu Editor Pro Plugin, Backdoors 1,500+ WordPress Sites
- How a Malicious Twitch Extension Stole 30,000 Users' OAuth Tokens
- JeetBot Extension Compromises 31,000 Twitch Users in Massive OAuth Token Theft
- Google Play Early Access Exploited: How Thousands of Deceptive Apps Bypassed Security
- Grindr's £26 Million Settlement Exposes Critical Gaps in Dating App Data Privacy
- BengalSEO Campaign Weaponizes Search Results for MayaBot Distribution
- JSCeal Malware: Advanced Session Hijacking Bypasses Google Authentication
- Mass WordPress Plugin Exploitation: 440,000 Attacks Target Critical RCE Flaws
- ASCII Smuggling Crosses Over: How AI Attack Techniques Are Transforming Phishing
- Critical Elementor Pro Vulnerability Enables WordPress Site Takeovers
- Russian Cybercriminal Charged in Massive Freelancer Phishing Campaign
- Critical WordPress Plugin Vulnerability Exposes 5 Million Sites to Complete Takeover
- Meta Ads Campaign Delivers StreamRat Android Banking Trojan to 570K+ Users
- Major Chrome Extension Malware Campaign Steals Crypto from 80,000+ Users
- Five Critical WordPress Plugin Flaws Enable Complete Site Takeover
- Critical Zero-Click RCE in Avada WordPress Theme Exposes 1 Million+ Websites
- First Android Car Malware Campaign Targets Vehicle Head Units Through Update Compromise
- Critical Elementor Pro Vulnerability Exposes 10M+ WordPress Sites to Remote Code Execution
- Critical Elementor Pro Vulnerability Exposes WordPress Sites to Unauthenticated Remote Code Execution
- StopAndProtect 2026: A Wake-Up Call for Cybersecurity
- Critical Vulnerability in Forminator WordPress Plugin (CVE-2026-15748) Puts Sites at Risk
- CTM360's 'RecruitTrap' Campaign Unveils Sophisticated Phishing Tactics
- BdThemes Supply Chain Attack: A New Vector in WordPress Plugin Compromises
- BdThemes Plugins Supply-Chain Hack Compromises Over 350,000 WordPress Sites
- DOUBLECUP's Stealthy Malware Delivery via ClickFix and Steganography
- Unveiling the DOUBLECUP ClickFix Malware Attack of August 2026
- Adform JavaScript Supply Chain Attack Diverts Cryptocurrency Transactions
- Critical Authorization Flaw in Adobe Campaign Classic: CVE-2026-48449
- Adform's 2026 Supply-Chain Breach: A Wake-Up Call for Ad Tech Security
- Malware-Infested Android TV Boxes Exploit Users' Broadband for Ad Fraud
- H96 TV Streaming Devices Exploited for Ad Fraud in 2026
- SourTrade Malvertising Campaign: A New Era of Browser-Based Threats
- Vatican's 'Click to Pray' App Data Breach: A Wake-Up Call for API Security
- European Banks' Data Exposure Through Tracking Pixels
- Critical wp2shell WordPress Flaws Exploited to Install Webshells
- WP2Shell: Unauthenticated RCE Threatens Millions of WordPress Sites
- WordPress wp2shell Vulnerabilities: Immediate Action Required
- WordPress 'wp2shell' Vulnerability: Immediate Action Required
- Urgent: Patch Critical 'wp2shell' Vulnerabilities in WordPress Core
- wp2shell: Critical WordPress Core Vulnerability Exposes Sites to Unauthenticated RCE
- Critical Remote Code Execution Vulnerability in iCagenda Joomla Extension (CVE-2026-48939)
- Global CMS Exploitation Campaign: Protect Your Website Now
- Major Brands Impersonated in Phishing Scam Targeting Marketing Professionals
- Major Brands Impersonated in Phishing Campaign Targeting Google Accounts
- Adobe Issues Urgent Patches for Critical ColdFusion and Campaign Classic Vulnerabilities
- Microsoft Eliminates 119 Malicious Edge Extensions Concealing Malware
- Critical Vulnerability in Popular Chrome Extension Puts Millions at Risk
- LastPass Data Breach via Klue Supply Chain Attack in 2026
- ShapedPlugin WordPress Pro Plugins Compromised in Supply Chain Attack
- OXLOADER Exploits Google Ads to Distribute CastleStealer Malware
- Critical Vulnerability in Gravity SMTP Plugin Exposes API Keys
- Klue OAuth Breach 2026: Lessons in Third-Party Integration Security
- Critical Vulnerability in Gravity SMTP Plugin: CVE-2026-4020 Exploited
- Salesforce Disables Klue App Integration Following OAuth Token Abuse Incident
- ShapedPlugin Supply Chain Attack: A Wake-Up Call for WordPress Security
- Klue OAuth Breach 2026: A Wake-Up Call for Third-Party Integration Security
- Salesforce Data Breach via Klue App Compromise
- OptinMonster WordPress Plugin Hacked in CDN Supply-Chain Attack
- Massive WordPress Plugin Supply Chain Attack Exposes Over 1.2 Million Sites
- Unveiling the Threat: 152 Malicious Chrome Extensions Compromise User Security
- Meta AI Support Exploit Leads to Massive Instagram Account Hijack
- Critical Vulnerability in Everest Forms Pro Exploited to Hijack WordPress Sites
- Hackers Exploit Critical Everest Forms Pro Plugin Flaw
- Operation FlutterBridge: Unveiling the FlutterShell Backdoor Targeting macOS Users
- Google DoubleClick Abused in Malspam Campaign Delivering DesckVB RAT
- Meta AI Exploited in High-Profile Instagram Account Hijackings
- Critical Kirki Plugin Vulnerability (CVE-2026-8206) Exploited in WordPress Sites
- Exploiting AI: The 2026 Instagram Account Takeover Incident
- Zapier Vulnerabilities Exposed: Potential Account Takeover Risks
- Ghost CMS Vulnerability Leads to Massive ClickFix Attack Campaign
- Critical ExifTool Vulnerability on macOS: CVE-2026-3102 Analysis
- Unveiling Trapdoor: The 2026 Android Ad Fraud Scheme
- Critical Vulnerability in Funnel Builder Plugin Leads to Credit Card Theft
- Critical Authentication Bypass Vulnerability in Burst Statistics WordPress Plugin (CVE-2026-8181)
- Cybercriminals Exploit Google Ads and Claude.ai to Target Mac Users
- Massive Phishing Campaign Exploits Google AppSheet to Hack 30,000 Facebook Accounts
- Massive WordPress Plugin Backdoor Exposes Thousands of Sites in 2026
- Unveiling the 2026 Fake CAPTCHA IRSF Scam
- Critical Vulnerability in Breeze Cache WordPress Plugin (CVE-2026-3844)
- Google's 2025 Gemini AI Initiative: A New Era in Combating Malvertising
- Massive WordPress Plugin Supply Chain Attack Compromises Thousands of Websites
- Microsoft and Salesforce Address Critical AI Security Flaws
- Massive Data Breach: 108 Malicious Chrome Extensions Compromise 20,000 Users
- Mirax Android RAT: A New Era of Mobile Malware Threats
- Unveiling Webloc: The Ad-Based Geolocation Surveillance Tool Used by Law Enforcement
- Smart Slider 3 Pro Supply Chain Attack: A 2026 Case Study
- Supply Chain Attack on Smart Slider 3 Pro Compromises Websites in 2026
- Critical Security Flaw in Ninja Forms Plugin Puts WordPress Sites at Risk
- ComfyUI Cryptomining Botnet Attack 2026
- LinkedIn's 2026 Browser Extension Scanning: A Privacy Wake-Up Call
- Critical Vulnerability in Smart Slider 3 Plugin Affects 500K WordPress Sites
- TikTok Business Accounts Compromised in 2026 AiTM Phishing Attack
- Phishing Campaign Targets TikTok Business Accounts in 2026
- AppsFlyer Web SDK Hijacked: A 2026 Supply Chain Attack Analysis
- Critical SQL Injection Vulnerability in Elementor Ally Plugin Puts Over 250,000 WordPress Sites at Risk
- LLM-Assisted Deanonymization: A New Era of Online Privacy Challenges
- 1Campaign: The Cloaking Service Fueling Malicious Google Ads
- Optimizely's 2026 Data Breach: A Case Study in Vishing Attacks
- Keenadu Malware: A 2026 Android Supply Chain Attack
- Microsoft Uncovers AI Recommendation Poisoning Threat
- Flickr's 2026 Data Breach: A Wake-Up Call for Third-Party Security
- Substack's 2025 Data Breach: A Wake-Up Call for Security Monitoring
- Iron Mountain's 2026 Data Breach: A Closer Look
- Instagram's 2026 Private Profile Photo Leak: A Privacy Wake-Up Call
- Malicious Chrome Extensions Compromise User Security by Hijacking Affiliate Links and Stealing ChatGPT Tokens
- AI-Powered Android Malware Unleashes New Click-Fraud Wave via Xiaomi App Store
- North Korean PurpleBravo Fakes Job Interviews to Breach Global Firms: 2026 Incident Analysis
- Critical 2026 WordPress ACF Extended Vulnerability Exposes 50,000 Sites to Admin Takeover
- Researchers Hijack StealC Malware Operators: 2026's XSS-Driven Counterattack
- Modular DS WordPress Plugin Flaw Grants Attackers Admin Access in Widespread 2026 Breach
- Browser-in-Browser Phishing Surge: Facebook Credential Thefts Expose New Risks in 2024
- n8n npm Supply Chain Attack: OAuth Tokens Stolen via Malicious Community Nodes
- Instagram 2026: Data Scraping Leak Exposes 17 Million Accounts
- DoJ Takes Down Fraud Domain Powering $14.6M Account Takeover Scheme
- Nomani Scam Exposes AI Deepfake Threats to Social Media in 2025
- AI Advertising Firm Doublespeed Breached: Over 1,000 Smartphones Compromised in 2025 Attack
- GhostPoster Malware Infects 17 Firefox Extensions: Supply Chain Risks Hit 50,000+ Users
- Sneeit WordPress Plugin Hit by Critical RCE: 2025 Exploitation Wave
- Critical King Addons Elementor Plugin Flaw Exploited in WordPress Sites (CVE-2025-8489)
- 2025 WordPress King Addons Breach: Unauthenticated Admin Access & Website Takeover
- Fake Calendly Invites Target Top Brands to Hijack Business Ad Accounts
- JackFix Campaign Exploits Fake Windows Updates to Spread Infostealers in 2025
- Salesloft Drift SaaS Breach: How Excessive Trust Unlocked CRM Data
- Hundreds of Salesforce Customers Impacted: Gainsight Supply Chain Attack by ShinyHunters
- 2024 Salesloft-Drift Supply Chain Breach: AWS Credential Exposure and Cloud Security Lessons
- WordPress Sites Under Siege: Critical Post SMTP Plugin Flaw Exposes 400,000+ Websites
- WordPress Post SMTP Plugin Exploited in Mass Admin Account Hijacks (2024)
- Dentsu Subsidiary Employee Data Stolen in 2024 Breach: What Enterprises Must Know
- YouTube Ghost Network: 2025 Infostealer Botnets Target Users at Scale
- Dentsu Merkle 2024 Data Breach: What Went Wrong and How to Respond
- WordPress Mass Exploitation 2024: The Risks of Outdated Plugin Vulnerabilities
- YouTube Malware Network: Over 3,000 Malicious Videos Unleashed in 2025 Campaign
- Spear-Phishers Impersonate Tesla & Red Bull Recruiters in Targeted Job Scam (2024)
- ICTBroadcast RCE Vulnerability: Hackers Gain Remote Shell Access via Cookie Exploit in 2025
- Adobe AEM 2025 Breach: CISA Flags Critical Application Flaw Under Active Attack
- 131 Chrome Extensions Hijack WhatsApp Web: The 2025 Brazilian Spam Campaign
- TikTok-Delivered Infostealer: ClickFix Campaign Compromises Credentials
- MANGO Data Breach 2024: Third-Party Vendor Incident Exposes Customer Data
- Hackers Exploit Auth Bypass in Service Finder WordPress Theme (CVE-2025-5947)
- Salesloft Drift Supply Chain Breach: How Okta and Zscaler Responded in 2023
- Adobe Analytics 2025 Bug Exposes Cross-Tenant Tracking Data
- Harrods Suffers Major Supply Chain Breach: 430,000 Customer Records Exposed in 2025
- Salesforce Agentforce 2024: ForcedLeak AI Prompt Injection Breach Exposes CRM Data
- Salesforce AI Prompt Injection Bug Exposes CRM Data in 2025 Breach
- Vane Viper Powers 1 Trillion DNS Queries in 2025 Malvertising Mega-Breach
- Operation Rewrite: Chinese SEO Poisoning Surges in 2024, Compromising Trusted Web Servers
- Fake Madgicx Plus & SocialMetrics Browser Extensions Hijack Meta Business Accounts in 2025
- HiddenGh0st, Winos & kkRAT Malware: How SEO & Cloud Hosting Fueled a 2025 Chinese-Focused Attack
- SlopAds: How 224 Android Apps Fueled a $Billion Ad Fraud Scam in 2025
- FBI Alert: UNC6040 & UNC6395 Target Salesforce Customers with Cloud Attacks (2024)
- 'Vane Viper': PropellerAds Tied to 2025’s Largest Malvertising & Cybercrime Network
- Salesloft GitHub Compromise: How a 2025 Supply-Chain Attack Rippled Across 22 Companies
- Salesloft Drift OAuth Breach Compromises Salesforce: 2025 Supply Chain Attack Analysis
- Salesloft's GitHub Compromise Sparks 2024 Supply Chain Breach
- Gambler Panel: The Rise of Affiliate-Driven Scam Gambling Operations in 2025
- Inside the 2025 Salesloft Supply Chain Breach: Token Theft at Scale
- Inside the Salesloft Drift Supply Chain Breach: How OAuth Token Theft Exposed SaaS Leaders
- GhostRedirector: Chinese SEO Poisoning Attack Hits Global IIS Web Servers (2024)
- GhostPoster: Malicious Firefox Add-ons Drive 2025 Supply-Chain Breach
191 threat reports