Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
23 / 23 results
criticalbug_reportVulnerabilityAdobe Commerce/Magento template injection enables remote code execution
Adobe Commerce and Magento Open Source (specific versions not disclosed in available data). Template injection vulnerability affecting web-facing e-commerce platforms.
criticalbug_reportVulnerabilityCritical RCE in Adobe Commerce/Magento allows arbitrary PHP execution
Adobe Commerce and Magento installations. Specific affected versions not disclosed in available information. Vulnerability resides in BlockStrap component.
highpublicGeopoliticalBurger King Japan breach exposes 11M records amid rising Japan cyber wave
The Burger King Japan incident is consistent with a broader pattern of cyber intrusions targeting Japanese commercial infrastructure throughout 2026. According to open-source reporting, at least 119 cybersecurity incidents involving personal informat…
highbug_reportVulnerabilityCyberattack on Danfoss refrigeration controllers disrupts French retail
Danfoss refrigeration controllers deployed at multiple French supermarket chains. Specific product models and firmware versions not disclosed. Attack scope limited to France retail sector.
highperson_alertThreat ActorASOS Data Breach: Social Engineering and Credential Theft Campaign
The threat actor behind this incident identifies themselves as "Xuanye Group." No attribution to known APT groups or established cybercrime syndicates has been made.
highpublicGeopoliticalASOS confirms breach via compromised push notification system
The incident represents a continuation of opportunistic cybercriminal activity targeting cloud infrastructure providers, particularly Snowflake environments, which have been subject to a sustained campaign since mid-2024.
highperson_alertThreat ActorUNK_CondorFiltration Targets Chilean Orgs via Default Password Spray
UNK_CondorFiltration is a threat cluster attributed by Proofpoint, conducting password spray campaigns against Microsoft 365 tenants. The actor's motivation appears to be credential harvesting and data exfiltration from cloud environments, with a spe…
criticalperson_alertThreat ActorAI-Powered Payment Skimmer Campaign Steals 600K+ Credit Cards
A financially motivated threat actor, believed to be Chinese-speaking based on operational indicators, is conducting large-scale automated attacks against online retailers using open-source AI agent frameworks.
highperson_alertThreat ActorDoppelCart: 119,000+ Fake E-Commerce Domains Used for Card Theft
DoppelCart is a large-scale fraud operation attributed to coordinated threat actors conducting payment card theft through fraudulent e-commerce infrastructure.
criticalbug_reportVulnerabilityAdobe Commerce/Magento unauthenticated RCE requires immediate patching
Adobe Commerce and Magento platforms. Specific affected versions not disclosed in available information. Vulnerability allows unauthenticated remote code execution.
criticalbug_reportVulnerabilityAdobe Commerce zero-day CVE-2026-75650 exploited since Sept 4 for backdoors
Adobe Commerce 2.4.4 through 2.4.9 (all 2026-aug and earlier), Adobe Commerce B2B 1.3.3 through 1.5.3 (all 2026-aug and earlier), and Magento Open Source 2.4.6 through 2.4.9 (all 2026-aug and earlier).
criticalbug_reportVulnerabilityMagento/Adobe Commerce zero-day actively exploited since Sept 4
Magento Open Source and Adobe Commerce all current versions including 2.4.6, 2.4.7, 2.4.8, and 2.4.9. Confirmed exploitation on Magento Open Source; Adobe Commerce impact unconfirmed. Unauthenticated remote code execution via GraphQL.
highperson_alertThreat ActorBreeze Comet Targets Brazilian Financial Sector for Payment Fraud
Breeze Comet (formerly UNC5669, overlaps with Plump Spider and SHADOW-AETHER-064) is a financially motivated threat actor operating out of Brazil since September 2023.
highperson_alertThreat ActorShinyHunters Publishes 12.9M Carhartt Customer Records After Breach
ShinyHunters is a financially motivated extortion group known for large-scale data theft and public leak operations. The group operates by exfiltrating sensitive data from compromised organizations, demanding ransom payments, and publishing stolen re…
highbug_reportVulnerabilityZombie Card attack revives expired Visa contactless cards via NFC relay
Visa contactless credit cards using Kernel 3 specification. Attack requires physical card access or sustained NFC proximity, plus relay device between card and terminal. Five major US banks tested; three confirmed vulnerable with varying policies.
criticalbug_reportVulnerabilityAdobe Commerce critical vulnerability under active exploitation
Adobe Commerce (formerly Magento). Specific affected versions not disclosed in advisory. All unpatched instances should be considered at risk.
criticalbug_reportVulnerabilitySAP Commerce Cloud RCE flaw (CVE-2026-58231) exploited 3 days post-patch
SAP Commerce Cloud (formerly Hybris), specifically the core Data Hub Adapter extension. All unpatched instances are vulnerable. Shadowserver tracks 4,200+ internet-exposed instances, primarily in Europe and North America.
criticalbug_reportVulnerabilityAdobe Commerce/Magento flaw CVE-2026-71362 exploited to hijack accounts
Adobe Commerce and Magento Open Source e-commerce platforms, all currently supported release lines. The vulnerability affects customer account session handling and requires no authentication to exploit.
highpublicGeopoliticalLevi Strauss discloses social engineering breach targeting employees
The incident reflects the persistent threat of social engineering attacks against major U.S. corporations, particularly within the retail and apparel sectors.
highperson_alertThreat ActorScattered Spider Linked to U.S. Luxury Retail Breach via Device ID
Scattered Spider (also tracked as Roasted 0ktapus, Octo Tempest, Storm-0875, and UNC3944) is a financially motivated threat actor known for sophisticated social engineering and identity-focused attacks.
highbug_reportVulnerabilityShopify Shop app abused for callback phishing via fake order receipts
Shopify Shop order-tracking app users. Threat actors inject fraudulent purchase receipts into legitimate user order histories, leveraging Shopify's trusted platform to deliver phishing lures.
highbug_reportVulnerabilityToshiba, Muji sites show credential-stealing prompts via polyfill supply chain
Toshiba and Muji public websites, potentially other sites using the compromised third-party polyfill library. Scope of affected sites and specific polyfill service not yet confirmed.
highperson_alertThreat ActorShinyHunters Breaches 7-Eleven, Exfiltrates 183K Records
ShinyHunters is a financially motivated cybercrime group known for large-scale data breaches and extortion operations targeting organizations across multiple sectors.