#compromises


Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent

Sep 28, 2026 // 14:50

Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that’s targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent […]

TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

Sep 24, 2026 // 23:39

Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to […]

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Sep 22, 2026 // 23:58

Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) “at every step of the […]

Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto

Sep 22, 2026 // 00:12

The North Korean threat actors behind the Contagious Interview campaign have compromised at least 30,000 devices located in more than 100 countries and siphoned funds […]

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

Jun 1, 2026 // 22:14

A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to steal credentials and secrets from developer machines and deliver a […]

New Shai-Hulud malware wave compromises 600 npm packages

May 19, 2026 // 17:37

Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign. […]

Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages

May 12, 2026 // 11:52

TeamPCP,  the threat actor behind the recent supply chain attack spree, has been linked to the compromise of the npm and PyPI packages from TanStack, […]

TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack

May 12, 2026 // 00:07

Checkmarx has confirmed that a modified version of the Jenkins AST plugin was published to the Jenkins Marketplace. “If you are using Checkmarx Jenkins AST […]

DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware

May 6, 2026 // 00:48

A newly identified supply chain attack targeting DAEMON Tools software has compromised its installers to serve a malicious payload, according to findings from Kaspersky. “These […]

EU Commission hack compromises data privacy for 30 agencies.

Apr 3, 2026 // 09:57

The EU’s cybersecurity team, CERT-EU, has identified TeamPCP as the group responsible for hacking the European Commission’s cloud. They stated that this attack compromised the […]