HighMalwareMonitoringBackfillMedia reported· updated Nov 12
CVERC warned it captured Android trojans in China posing as education and training apps, which after installation trick users into granting background-run and accessibility permissions .
729 results
CVERC warned it captured Android trojans in China posing as education and training apps, which after installation trick users into granting background-run and accessibility permissions .
On 2026-07-01, CISA added CVE-2026-45659 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Cybernews, Nissan North America was targeted in an attack campaign against Oracle PeopleSoft, with its US division systems breached between May 27 and June 9, 2026, and it has begun notifying employees .
On 2026-06-25, CISA added CVE-2026-20230 (Cisco Unified Communications Manager) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-06-25, CISA added CVE-2026-12569 (PTC Windchill and FlexPLM) to its Known Exploited Vulnerabilities (KEV) catalog .
Texas Parks and Wildlife Department said Texas Cyber Command detected an incident on May 13 at its hunting and fishing license system vendor, and an unauthorized actor may have obtained driver license information, passport numbers, emails, phone numbers and addresses of more than 3 million license customers .
According to DSIH, Pulsy, the Grand Est regional e-health operator, was attacked on June 18, 2026, leading to exfiltration of about 5 million rows of patient administrative data including names, sex, birth dates and the national health identifier INS .
According to TechCrunch, market intelligence platform Klue confirmed hackers broke into its systems on June 12 and stole data from some customers, with affected customers including Gong, Jamf, HackerOne, LastPass, Recorded Future, Snyk and Tanium .
According to Pakistan Today, citing Capital Development Authority (CDA) officials and its spokesperson, the agency's property, conservancy, and water billing system suffered a cyberattack that disrupted online payment services .
According to CyberInsider, data was downloaded without authorization from cardiac monitoring firm iRhythm's third-party-hosted business applications between June 3 and 8, 2026; its June 15 SEC filing says access came through social engineering and an attacker demanded payment on June 9 .
According to a client notice from AXIA Asset Management, an external IT service provider of V-Bank was hit by a cyberattack on June 10, 2026, leading to unauthorized access to V-Bank data .
On 2026-06-15, CISA added CVE-2026-20262 (Cisco Catalyst SD-WAN Manager) to its Known Exploited Vulnerabilities (KEV) catalog .
Novo Nordisk said it identified unauthorized access to a limited number of internal IT systems and found certain non-public data, including personal data, was copied externally; some systems were taken offline while core operations continued .
On 2026-06-12, CISA added CVE-2026-35273 (Oracle PeopleSoft Enterprise PeopleTools) to its Known Exploited Vulnerabilities (KEV) catalog .
According to Yonhap News TV, Day One Company, operator of Fastcampus and other online education brands, said a GitHub master account key was stolen and used for a first intrusion into its services on May 9, 2026 .
On 2026-06-11, CISA added CVE-2026-10520 (Ivanti Sentry) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-06-09, CISA added CVE-2026-20245 (Cisco Catalyst SD-WAN Manager) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to Argaam, citing a filing by Budget Saudi to the Saudi Exchange, unauthorized access occurred affecting a subset of customer data on its mobile application .
ST Unitas, operator of the Gongdangi exam-prep brands, announced on June 8, 2026 that some members' personal data leaked through unauthorized access to its operating system .
On 2026-06-08, CISA added CVE-2026-50751 (Check Point Security Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .