Clearance Incident Response. Free through May 1, 2027, so you have time to patch.Estimate your Blast Radius in 60 secondsEstimate

aviatrix logoAviatrix
Under Active Attack
Industry Category

Computer/Network Security

Breach intelligence, attack campaigns, and threat reports targeting the Computer/Network Security sector.

1287 threat reports
Page 14 of 108
Explore Other Sectors
AccountingAerospaceAerospace/AviationAgricultureAirlines/AviationAnimationApparel/FashionArchitecture/PlanningArtificial IntelligenceArtificial Intelligence/Machine LearningArts/CraftsAutomotiveAviation/AerospaceBanking/MortgageBiotechnology/GreentechBlockchain/CryptocurrencyBroadcast MediaBroadcasting MediaBroadcasting/MediaBuilding MaterialsBusiness Supplies/EquipmentCapital Markets/Hedge Fund/Private EquityChemicalChemicalsCivic/Social OrganizationCivil EngineeringCloud ComputingCloud Computing/SaaSCloud Native Security Fabric (CNSF)Cloud ServicesCommercial FacilitiesCommercial Real EstateComputer GamesComputer HardwareComputer NetworkingComputer Software/EngineeringComputer/Network SecurityConstructionConsultingConsumer ElectronicsConsumer GoodsConsumer ServicesCosmeticsCosmeticsCritical ManufacturingCryptocurrenciesCryptocurrencyCustomer ServicesCybersecurityDairyDating/Personal ServicesDating/Social PlatformsDefense/SpaceDesignE-LearningEducation ManagementElectrical/Electronic ManufacturingEmergency ServicesEnergyEnergy/Oil/Solar/GreentechEntertainment/Movie ProductionEnvironmental ServicesEvents ServicesExecutive OfficeFacilities ServicesFarmingFashion/ApparelFinancial ServicesFine ArtFisheryFood ProductionFood/BeveragesFortune 500 companiesFranchisingFundraisingGambling/CasinosGamingGaming/CasinosGovernment AdministrationGovernment FacilitiesGovernment RelationsGraphic Design/Web DesignHealth Care / Life SciencesHealthcareHigher Education/AcadamiaHospitalityHospitalsHuman Resources/HRImport/ExportIndividual/Family ServicesIndustrial AutomationInformation ServicesInformation Technology/ITInsuranceInternational AffairsInternational Trade/DevelopmentInternetInvestment Banking/VentureInvestment Management/Hedge Fund/Private EquityJudicialJudiciaryLaw EnforcementLaw Practice/Law FirmsLegal ServicesLegislative OfficeLeisure/TravelLogistics/ProcurementLuxury Goods/JewelryMachineryManagement ConsultingManufacturingMaritimeMarket ResearchMarketing/Advertising/SalesMechanical or Industrial EngineeringMedia ProductionMedical EquipmentMedical PracticeMilitary IndustryMining/MetalsMobileMuseums/InstitutionsMusicNewspapers/JournalismNon-Profit/VolunteeringOil/Energy/Solar/GreentechOnline PublishingOther IndustryOutsourcing/OffshoringPackage/Freight DeliveryParkingPharmaceuticalsPhilanthropyPhotographyPlasticsPolitical OrganizationPrimary/Secondary EducationProfessional ServicesProfessional TrainingPublic Relations/PRPublic SafetyPublishing IndustryRailroad ManufactureReal Estate/MortgageRecreational Facilities/ServicesReligious InstitutionsRenewables/EnvironmentResearch IndustryRestaurantsRetail IndustryRoboticsRural HealthcareSecurity/InvestigationsSemiconductorsShipbuildingSocial Media/InternetSporting GoodsSportsStaffing/RecruitingSupermarketsTechnologyTechnology/ITTelecommunicationsThink TanksToys and GamesTransportationTravel/TourismTrucking/FreightUtilitiesVenture Capital/VCWarehousingWater and Waste ManagementWater and WastewaterWater and Wastewater SystemsWater and Wastewater TreatmentWater TreatmentWater, Waste, Steam, and Air Conditioning ServicesWater/Waste ManagementWater/WastewaterWater/Wastewater ManagementWater/Wastewater/UtilitiesWholesaleWine/SpiritsWirelessWriting/Editing

Computer/Network Security Threat Reports

Showing 157–168 / 1287 reports
Pwn2Own Ireland 2026 Exposes 98 Critical Zero-Days Worth $1.2M
Pwn2Own Ireland 2026 Exposes 98 Critical Zero-Days Worth $1.2M
Computer/Network Security1 month ago

Pwn2Own Ireland 2026 Exposes 98 Critical Zero-Days Worth $1.2M

The Pwn2Own Ireland 2026 hacking contest concluded with security researchers earning $1,262,000 in rewards after successfully exploiting 98 zero-day vulnerabilities across mobile devices, AI infrastructure, and IoT systems. Over three days, 29 research teams targeted seven categories including Samsung Galaxy S26, Google Pixel 10, OpenAI Codex, Oracle Autonomous AI Database, and various smart home and healthcare devices. Ikotas Labs emerged as the winner with $361,000 in earnings and 42.5 Master of Pwn points, highlighted by their $300,000 chain exploit against the Google Pixel 10. This year's contest demonstrates the accelerating pace of vulnerability discovery in modern technology stacks, particularly in AI-powered systems and mobile platforms that are increasingly integrated into enterprise environments. The 98 zero-days discovered represent a significant increase from previous years, highlighting the expanding attack surface as organizations adopt AI infrastructure and interconnected smart devices.

Low impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(high)
Read report
P7 DarkSword: Advanced iOS Exploit Kit Targets Cryptocurrency Wallets
P7 DarkSword: Advanced iOS Exploit Kit Targets Cryptocurrency Wallets
Financial Services1 month ago

P7 DarkSword: Advanced iOS Exploit Kit Targets Cryptocurrency Wallets

In October 2026, cybersecurity researchers disclosed P7 DarkSword, an enhanced variant of the DarkSword iOS exploit kit that targets iPhones running iOS 18.4-18.7. This commercial exploit toolkit chains multiple iOS vulnerabilities to escape browser sandboxes, escalate to kernel privileges, and inject payloads into SpringBoard. P7 DarkSword introduces advanced capabilities including on-device cryptocurrency wallet theft, iCloud Keychain extraction, and bidirectional command-and-control communication. The kit has been deployed by multiple threat actors including Turkish surveillance vendor PARS Defense and Russian group Star Blizzard, with recent campaigns attributed to Chinese-speaking operators targeting victims across Saudi Arabia, Turkey, Malaysia, and Ukraine. This incident represents the growing commoditization of mobile exploit kits following their leak into second-hand markets, enabling financially motivated cybercriminals to conduct sophisticated iOS attacks previously limited to nation-state actors.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(high)
Read report
GhostAction Campaign: How Compromised GitHub Maintainers Exposed Thousands of Repositories
GhostAction Campaign: How Compromised GitHub Maintainers Exposed Thousands of Repositories
Computer Software/Engineering1 month ago

GhostAction Campaign: How Compromised GitHub Maintainers Exposed Thousands of Repositories

The GhostAction campaign, active since September 2025, has escalated dramatically in October 2026 with attackers compromising high-profile GitHub maintainer accounts including Takashi Kitao (pyxel game engine) and Henry Wu (Uber's athenadriver author). Using stolen personal access tokens, threat actors injected malicious GitHub Actions workflows disguised as security audits into over 500 repositories across tens of thousands of projects. These workflows systematically exfiltrate CI/CD secrets, cloud credentials, AI API keys, and historical git data to attacker-controlled infrastructure via unencrypted HTTP connections, representing one of the largest supply chain attacks targeting developer infrastructure. This incident highlights the critical vulnerability of modern software supply chains as organizations increasingly rely on automated CI/CD pipelines and cloud-native development practices. The attack's sophisticated targeting of maintainer accounts and abuse of trusted automation workflows demonstrates how threat actors are evolving to exploit the interconnected nature of open-source ecosystems.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(high)
Read report
Venezuelan Cartel's Cyber Evolution: How Tren de Aragua Weaponized ATM Malware
Venezuelan Cartel's Cyber Evolution: How Tren de Aragua Weaponized ATM Malware
Banking/Mortgage1 month ago

Venezuelan Cartel's Cyber Evolution: How Tren de Aragua Weaponized ATM Malware

In October 2026, US authorities arrested Anibal Alexander Canelon Aguirre, a 50-year-old Venezuelan member of the Tren de Aragua criminal cartel and the first cybercriminal ever placed on the FBI's Ten Most Wanted Fugitives list. Canelon Aguirre, known as "Prometheus" and "The Engineer," was the principal architect of the Ploutus-D malware used in ATM jackpotting schemes that compromised cash machines across Latin and North America. The cartel physically implanted malware into ATMs, allowing remote control to dispense cash to money mules, then laundered over $5.1 million through Venezuelan, Mexican, and Colombian cryptocurrency networks including TRON. This case demonstrates how traditional criminal organizations are increasingly integrating sophisticated cyber capabilities into their operations. The convergence of physical access, custom malware development, and cryptocurrency laundering represents a new evolution in organized crime that bridges cybercrime with terrorist financing and transnational criminal enterprises.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(high)
Read report
The New Threat Vector: How Cybercriminals Target Executive Families to Breach Corporate Networks
The New Threat Vector: How Cybercriminals Target Executive Families to Breach Corporate Networks
Financial Services1 month ago

The New Threat Vector: How Cybercriminals Target Executive Families to Breach Corporate Networks

Cybercriminals are increasingly targeting executives' family members and personal contacts as a pathway to corporate networks, exploiting the weaker security postures of non-technical household members. Research shows that 51% of organizations reported attacks on business leaders in 2025, with 39% of executives having already compromised devices during security onboarding. Attackers leverage AI-enhanced reconnaissance to map family relationships through social media, then execute impersonation attacks, device compromises, and sophisticated phishing campaigns targeting spouses, children, and trusted associates. The consequences extend beyond digital breach to physical surveillance, extortion, and fraudulent financial transfers. This trend represents a critical evolution in social engineering tactics, where the weakest link in an executive's personal ecosystem becomes the entry point for enterprise compromise, demanding immediate expansion of security awareness programs beyond corporate boundaries.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(high)
IImpact(high)
Read report
Three Teams Crack Google Pixel 10 Security at Pwn2Own Ireland 2026
Three Teams Crack Google Pixel 10 Security at Pwn2Own Ireland 2026
Computer/Network Security1 month ago

Three Teams Crack Google Pixel 10 Security at Pwn2Own Ireland 2026

At Pwn2Own Ireland 2026 on October 8, three security research teams successfully demonstrated remote exploits against fully patched Google Pixel 10 devices, earning a combined $562,500 in prizes. Ikotas Labs claimed the top $300,000 prize by chaining multiple vulnerabilities, while Xint and a third team led by Dimitrios Valsamaras also achieved successful remote code execution. The exploits targeted various attack vectors including web browsers and wireless protocols (NFC, Wi-Fi, Bluetooth, baseband), with two of the three exploits utilizing previously known but unpatched vulnerabilities. This incident highlights the persistent vulnerability landscape in mobile devices and the effectiveness of coordinated security research in uncovering critical flaws. The high success rate at Pwn2Own Ireland 2026, with 51 of 63 scheduled attempts succeeding across multiple device categories, underscores the ongoing challenges in securing consumer technology platforms.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(high)
IImpact(high)
Read report
GoBalance Flaw Exposes Critical Weakness in Dark Web Infrastructure Security
GoBalance Flaw Exposes Critical Weakness in Dark Web Infrastructure Security
Computer/Network Security1 month ago

GoBalance Flaw Exposes Critical Weakness in Dark Web Infrastructure Security

A critical vulnerability in GoBalance, a load balancer used by dark web sites, allowed attackers to hijack .onion addresses by recovering private keys from public descriptors. The flaw occurred because GoBalance only used the first 32 bytes of Tor's 64-byte private keys during signing, exposing the secret values. Between October 5-7, 2026, this vulnerability was exploited to take over major dark web forums including Dread, redirecting users to attacker-controlled sites. While server access and user data remained secure, the compromised addresses could be used indefinitely for phishing and credential harvesting attacks. This incident highlights the growing sophistication of attacks targeting anonymity networks and the critical importance of proper cryptographic implementation. As organizations increasingly rely on privacy-preserving technologies and zero-trust architectures, vulnerabilities in foundational security tools pose significant risks to operational continuity and user trust.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(medium)
IImpact(high)
Read report
Anthropic Launches Free AI Vulnerability Scanner to Defend Open Source Ecosystem
Anthropic Launches Free AI Vulnerability Scanner to Defend Open Source Ecosystem
Computer Software/Engineering1 month ago

Anthropic Launches Free AI Vulnerability Scanner to Defend Open Source Ecosystem

In October 2026, Anthropic launched OSS Scanner, a free AI-powered vulnerability detection service for open-source projects. The initiative leverages Claude AI models to conduct automated security audits without human review, aiming to strengthen the open-source ecosystem's security posture. Through their Project Glasswing research, Anthropic has already identified over 29,000 candidate vulnerabilities across critical software projects, with 6,000 reported to maintainers and 584 advisories issued by October 2026. This development highlights the accelerating arms race between AI-powered offensive and defensive capabilities in cybersecurity. As threat actors increasingly leverage AI to discover and exploit vulnerabilities at scale, organizations must adopt similar AI-driven defensive measures to maintain security parity and protect critical infrastructure.

Low impact

Kill Chain

ICInitial Compromise(medium)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(medium)
Read report
MonsterCloud Ransomware Recovery Fraud: When Incident Response Goes Wrong
MonsterCloud Ransomware Recovery Fraud: When Incident Response Goes Wrong
Computer/Network Security1 month ago

MonsterCloud Ransomware Recovery Fraud: When Incident Response Goes Wrong

In September 2024, Zohar Pinhasi, CEO of MonsterCloud, was indicted on federal wire fraud charges for operating a deceptive ransomware recovery scheme from 2018 to 2023. Pinhasi falsely claimed his company possessed proprietary decryption tools to recover ransomware-encrypted data without paying criminals. Instead, he secretly paid ransoms using client funds while charging inflated fees up to twice the actual ransom amount. The scheme affected hundreds of clients across the US and Canada, with MonsterCloud collecting over $19 million in fees while paying approximately $8 million in ransoms. This case highlights the growing sophistication of fraud within the ransomware economy, where bad actors exploit victims' desperation during crisis situations. The incident demonstrates how the lack of transparency and regulation in the ransomware recovery industry creates opportunities for exploitation, making it critical for organizations to verify the legitimacy and methods of incident response providers.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(high)
Read report
Samsung Galaxy S26 Suffers Triple Breach at Pwn2Own Ireland 2026
Samsung Galaxy S26 Suffers Triple Breach at Pwn2Own Ireland 2026
Consumer Electronics1 month ago

Samsung Galaxy S26 Suffers Triple Breach at Pwn2Own Ireland 2026

On October 8, 2026, during the second day of Pwn2Own Ireland 2026, security researchers successfully exploited 45 unique zero-day vulnerabilities across multiple devices, earning $232,500 in cash awards. The Samsung Galaxy S26 flagship smartphone was compromised three separate times by different research teams including KAIST Hacking Lab's Kyeongmin Kim, PetoWorks, and a collaborative team from CENSUS Labs. Additional targets included the Sonos Era 300, Home Assistant Green smart home hub, and Oracle Autonomous AI Database, demonstrating widespread vulnerabilities across consumer electronics and enterprise infrastructure. This incident highlights the continuing security challenges in mobile device firmware and the growing attack surface presented by smart home and AI infrastructure systems. As organizations increasingly rely on interconnected devices and AI-powered systems, these research findings underscore the critical need for proactive vulnerability management and zero-trust security architectures.

Low impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(low)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(high)
Read report
Empire Market Takedown: 40-Year Sentence Marks New Era in Dark Web Enforcement
Empire Market Takedown: 40-Year Sentence Marks New Era in Dark Web Enforcement
Banking/Mortgage1 month ago

Empire Market Takedown: 40-Year Sentence Marks New Era in Dark Web Enforcement

Raheim Hamilton, co-creator of Empire Market, was sentenced to 40 years in prison for operating one of the largest dark web marketplaces from 2017 to 2020. The marketplace facilitated $430 million in illegal transactions, primarily drug sales totaling $375 million, serving 1.68 million users at its peak. Hamilton and co-defendant Thomas Pavey used cryptocurrency, encryption, and Tor networks to help users evade law enforcement detection while laundering proceeds through mixing services. This case highlights the growing sophistication of cybercrime marketplaces and law enforcement's enhanced capabilities to track cryptocurrency transactions and dismantle dark web operations, reflecting the ongoing battle between cybercriminals and authorities in the digital underground economy.

Critical impact

Kill Chain

ICInitial Compromise(medium)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(high)
Read report
Uranium Finance Hack: How $53M Was Stolen Through Smart Contract Exploits
Uranium Finance Hack: How $53M Was Stolen Through Smart Contract Exploits
Financial Services1 month ago

Uranium Finance Hack: How $53M Was Stolen Through Smart Contract Exploits

In April 2021, Jonathan Spalletta exploited smart contract vulnerabilities in Uranium Finance, a decentralized cryptocurrency exchange on Binance's BNB Chain, stealing $53.3 million across two separate attacks. The first breach netted $1.4 million through zero-token withdrawal commands, followed by extortion for a sham bug bounty. Three weeks later, Spalletta exploited a transaction verification flaw that allowed him to drain 90% of the exchange's liquidity pools, forcing immediate shutdown. He laundered the stolen funds through Tornado Cash mixer and spent proceeds on collectibles including Magic cards and rare coins before being convicted in 2026. This case highlights the growing sophistication of DeFi attacks and the critical need for robust smart contract security as decentralized finance platforms become prime targets for cybercriminals seeking to exploit code vulnerabilities for massive financial gain.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(high)
IImpact(high)
Read report
[ INCIDENT RESPONSE // UNDER ATTACK? ]

Stop Active Cloud Data Exfiltration

Aviatrix Rapid Containment helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.

Under Attack

Looking for threats in a different sector?

Browse All Threat Reports