THREAT INTELLIGENCE, SOURCED
The World's Cyberattacks, Tracked and Explained.
Publicly reported incidents, labeled by verification status and linked to original sources. How we verify.
Last 24 hours
3
Last 7 days
3
Last 30 days
3
All published
3
Latest verified incidents
Confirmed by official disclosure or strong independent evidence
OVHcloud CLI tool releases compromised with info-stealing malware
OVHcloud has identified a supply chain attack where unauthorized parties modified five versions of its command-line interface tool hosted on GitHub. The company is urging users to immediately update or delete the affected versions to prevent potential data theft.
VULNERABILITIES
CVE-2026-109618 · added 2026-10-22
PHP Remote Code Execution via Out-of-Memory Handling ("php2shell")
PHP Group PHP
CVE-2026-109619 · added 2026-10-22
PHP Remote Code Execution via Stale Request State ("php2shell")
PHP Group PHP
CVE-2026-110936 · added 2026-10-20
Siemens Software Center Uncontrolled Search Path Element Vulnerability
Siemens Software Center
CVE-2026-96652 · added 2026-10-20
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex Media Server
Recently reported, pending confirmation
Reported by publications; not yet officially confirmed
Russian State-Backed Actors Target Defense and Government Entities in Espionage Campaign
Russian GRU-linked hackers have reportedly launched an espionage campaign targeting a NATO shipbuilder, an aircraft engine manufacturer, and a law enforcement agency. Security researchers have linked the activity to the threat group historically associated with the 2016 U.S. election interference.
eMudhra Faces Certificate Revocation Following Private Key Compromise
Eight intermediate certificate authority keys belonging to eMudhra were compromised due to a vulnerability allowing the keys to be recovered. In response, browser vendors and trust store operators have moved to block these specific certificates.