Weekly Threat Roundup

• 🔐 Russian intelligence escalated messaging app attacks, now targeting Signal Backup Recovery Keys to access historical message archives. • 🏭 PTC Windchill (...

🔥 FortiBleed exposes 86,000+ Fortinet credentials as CISA issues urgent hardening guidance for internet-facing devices. 🕸️ Operation Endgame dismantles Evil C...

🎯 Chinese hackers ran decade-long espionage using backdoored Linux authentication 🏫 Oracle zero-day CVE-2026-35273 exploited by ShinyHunters to ransack univer...

🚨 Supply chain attacks dominated with IronWorm and Miasma worms hitting npm/GitHub, while compromising 100+ packages 🎯 Critical infrastructure under siege wit...

🔒 Critical authentication bypass vulnerabilities dominated headlines with Fortinet FortiClient EMS and Palo Alto PAN-OS under active exploitation 🏦 Major brea...

🔥 Supply chain attacks surge as AI accelerates both attack and defense capabilities 🏦 Critical infrastructure faces elevated risks from NGINX RCE and power gr...

🔗 Supply chain attacks hit new heights as TeamPCP weaponizes 400+ npm/PyPI packages with self-propagating Shai-Hulud worm 📱 Zero-day disclosures accelerate wi...

🎓 **Canvas Crisis**: ShinyHunters breached Instructure's Canvas LMS affecting 9,000+ schools and 275M users during finals season 🔥 **Firewall Zero-Day**: Chin...

🚨 Critical cPanel authentication bypass (CVE-2026-41940) under mass exploitation for ransomware deployment 🔗 Supply chain attacks hit SAP packages and PyTorch...

🔥 Supply chain attacks evolved with wormable npm malware targeting developer toolchains 🛡️ Cisco firewalls compromised with persistent backdoors surviving fir...

🔥 Critical infrastructure under fire as water treatment malware surfaces, 13-year-old Apache bug exploits go wild, and North Korean infiltration schemes contin...

🚨 Mexican government breached at scale using Claude AI and ChatGPT to exfiltrate 195M tax records 🎯 Adobe patches critical Reader zero-day exploited since Nov...

🔥 Critical week for supply chain attacks with React2Shell (CVE-2025-55182) exploited to harvest credentials from 766+ Next.js hosts 🎯 North Korean UNC1069 com...

🚨 FBI Director Kash Patel's personal Gmail breached by Iran-linked Handala hackers in major retaliation operation 🏛️ European Commission investigating 350GB d...