Hacktober
Running for 00d 00h 00m 00s
They called it Black October, the worst 48 hours in cybersecurity history. It never stopped. Every breach and ransom claim, live.
pulling live feeds
Claimed in the last 24 hours.
Victims posted on ransomware leak sites, newest first. Source: ransomware.live.
Loading claims
Crypto is bleeding too.
$0
Stolen from crypto protocols this month. Source: DeFiLlama.
- Loading crypto hacks
The wire.
Headlines from security newsrooms, merged and refreshed every minute.
- Loading headlines
The holes they came through.
Vulnerabilities attackers are already using, and the ones published today.
Exploited in the wild CISA KEV
- Loading
Published today CVEfeed
- Loading
The 48 hours that named it.
Any one of these would headline a normal year. They landed in two days. Compiled by @AISafetyMemes.
Year-level
- PHP2ShellA hole in the software behind about 70% of websites. Governments took sites offline.
- eMudhraMaster keys that prove websites are real were cracked. One of them was the number 4.
- CaliforniaData on every public school student since 2023 stolen, disability status included.
- RailwayCustomers' secret keys stolen from a hosting platform used by millions of developers.
- Zeabur321,810 accounts breached. The company is shutting down.
- LiteLLMAn AI tool downloaded 3.4 million times a day was poisoned with a password stealer.
- GitLabA 10 out of 10 severity hole in every version since 2014.
- CairnCriminals used an AI hacking tool to break into 100+ companies.
- Ahold DelhaizeThe owner of Food Lion and Stop & Shop knocked offline.
- OnamaeMalware planted on up to 26,739 customer servers in Japan.
Month-level
- SignalA bug could leave your mic and camera on after you hang up.
- NGINX3 critical holes in software running about a third of websites.
- HTTP/3One connection can crash 7 of 10 web server types tested.
- PlexHome media servers being broken into.
- SafePayFBI warns the gang has hit 600+ critical infrastructure organizations.
- Palo AltoRansomware crews getting in through company firewalls.
- BullhornA platform used by 10,000+ companies knocked offline.
- Medi-Cal970,000 patients' data stolen.
- WordPressA plugin maker's keys stolen and used to plant backdoors.
- AOMEIBackup software's update server handed out a backdoor.
- Meta MuseMeta's AI agent exposed users' personal and business secrets.
- Tor333 relays hijacked to steal logins.
- TiDB CloudA database company's cloud breached.
Also serious
- State Bank of IndiaIndia's biggest bank confirms a breach.
- OVHcloudA password stealer slipped into an official tool.
- SiemensA software hole used to spread malware.
- North KoreaState hackers open a new campaign on South Korea.
$HACKTOBER
Named for the month the internet caught fire. No roadmap, no promises, just the month on chain.