1-15 August 2024 Cyber Attacks Timeline

Last modified: November 13, 2024

Follow me on X

Connect on Linkedin

Connect on Mastodon

EVENTS

EVENTS/DAY

EVENTS

EVENTS/DAY

Motivations August H1 2024

Attack Techniques August H1 2024

In the first timeline of August 2024 I collected 123 events (8.13 events/day) with a threat landscape that was one of those exceptions in which malware did not rank on top of the attack vectors. Targeted attacks (likely a consequence of the complicated period from a geopolitical standpoint) and ransomware dominated the threat landscape with 18.7%, respectively up from 15.1% and 10.1% of the previous timeline. Malware was “only” at rank number three with 15.4% plummeting from 27.7% of the previous fortnight.

Cyber crime led the motivations chart with 54.9% continuing the decreasing trend (it was 66.7%), once again ahead of cyber espionage that instead continues is growing trend with 20.5% up from 16.7%, and cyber warfare fueled by the numerous social media operations unearthed in this period.

Besides these trends, as always the timeline is rich of interesting events, such as mega breaches, and attacks against organizations in the fintech space, so my final suggestion does not change.

Rogue AI Agents

AI agents are escaping sandboxes, misusing credentials and acting without authorization. This live dashboard tracks every reported incident on a

Feel free to share it to support my work and spread the risk awareness across the community. And last but not least, don’t forget to follow @paulsparrows on X (formerly Twitter), or even connect on Linkedin, or Mastodon for the latest updates.

Geo Map August H1 2024

No Data Found

ID	Date Reported	Date Occurred	Date Discovered	Author	Target	Description	Attack	Target Class	Attack Class	Country	Link	Tags
1	01/08/2024	As early as mid-July 2023	During August 2023	APT41	Taiwanese government-affiliated research institute	Researchers from Cisco Talos reveal that a Taiwanese government-affiliated research institute that specializes in computing and associated technologies was breached by the nation-state threat actors APT41 with ties to China, through a variety of backdoors and post-compromise tools like ShadowPad and Cobalt Strike.	Targeted Attack	Public admin and defence, social security	Cyber Espionage	TW		Cisco Talos, China, Taiwan, APT41, ShadowPad, Cobalt Strike
2	01/08/2024	-	-	?	Multiple organizations	Researchers from Trend Micro discover a Facebook malvertising campaign targeting users searching for AI image editing tools and stealing their credentials by tricking them into installing fake apps that mimic legitimate software.	Malware	Multiple Industries	Cyber Crime	>1		Trend Micro, Facebook, AI
3	01/08/2024	Since 25/06/2024	03/07/2024	?	Cryptocurrency users involved with Raydium and Solana.	Researchers from Checkmarx discover a campaign where threat actors uploaded malicious Python packages to the PyPI repository and promoted them through the StackExchange online question and answer platform.	Malware	Fintech	Cyber Crime	>1		Checkmarx discover, Python, PyPI, StackExchange, Raydium, Solana
4	01/08/2024	Since at least 25/06/2024	25/06/2024	REF8747	Unspecified Foreign Ministry of a South American government	Researchers from Elastic discover BITSLOTH, a previously undocumented Windows backdoor that leverages a built-in feature called Background Intelligent Transfer Service (BITS) as a command-and-control (C2) mechanism.	Targeted Attack	Public admin and defence, social security	Cyber Espionage	N/A		REF8747, Elastic, BITSLOTH, Windows, Background Intelligent Transfer Service, BITS
5	01/08/2024	-	-	?	Crypto investors in the U.S.	The Federal Bureau of Investigation (FBI) warns of scammers posing as employees of cryptocurrency exchanges to steal funds from unsuspecting victims.	Scam	Fintech	Cyber Crime	US		Federal Bureau of Investigation, FBI, Crypto
6	01/08/2024	Since the end of June 2024	24/07/2024	?	Banking users in Turkey	Researchers from Intel 471 discover BlankBot, a new Android banking trojan with advanced capabilities such as screen recording, keylogging, and remote control, still under development, and primarily targeting Turkish users.	Malware	Finance and insurance	Cyber Crime	TR		Intel 471, BlankBot, Android
7	01/08/2024	'Recently'	'Recently'	?	Multiple organizations	Researchers from Fortinet warn of an uptick in SnakeKeylogger infections.	Malware	Multiple Industries	Cyber Crime	>1		Fortinet, SnakeKeylogger
8	02/08/2024	-	-	yawixooo	Multiple organizations	Researchers from Aqua Security discover “Panamorfi,” a new DDoS attack, exploiting Discord, Minecraft, and Jupyter Notebooks, using the Minecraft mod “mineping.”	DDoS	Multiple Industries	Cyber Crime	>1		Aqua Security, Panamorfi, Discord, Minecraft, Jupyter Notebooks, mineping
9	02/08/2024	As early as March 2024	During March 2024	APT28 (a.k.a. Fighting Ursa, Fancy Bear and Sofacy)	Diplomats	Researchers from Palo Alto Networks reveal that the Russian threat actor known as Fighting Ursa is targeting diplomats through a used-car sale email scheme that then distributes HeadLace backdoor malware.	Targeted Attack	Public admin and defence, social security	Cyber Crime	>1		APT28, Fighting Ursa, Fancy Bear, Sofacy, Palo Alto Networks, Russia, HeadLace
10	02/08/2024	Since at least mid-2023	Mid-2023	Evasive Panda (a.k.a. StormBamboo, DaggerFly)	Multiple organizations	Researchers from Volexity reveal that the China-linked APT Evasive Panda compromised an Internet service provider (ISP) to exploit software vendor update mechanisms using DNS poisoning. The attacks delivered new variants of the Macma backdoor, as well as post-exploitation malware to exfiltrate sensitive data from compromised networks.	>1 (DNS Poisoning, Malware)	Multiple Industries	Cyber Espionage	>1		Evasive Panda, StormBamboo, DaggerFly, Volexity, Macma
11	02/08/2024	01/08/2024	01/08/2024	WeRedEvils	Multiple organizations in Iran	Israel-based hacktivists from the group WeRedEvils take credit for an ongoing internet outage in Iran.	Unknown	Multiple Industries	Hacktivism	IR		Israel, Iran, WeRedEvils
12	02/08/2024	'Recently'	'Recently'	Hunters International	IT workers worldwide	Researchers from Quorum Cyber reveal that the Hunters International ransomware group is targeting IT workers with a new C# remote access trojan (RAT) called SharpRhino to breach corporate networks.	Ransomware	Professional, scientific and technical	Cyber Crime	>1		Quorum Cyber, Hunters International, Ransomware, C#, SharpRhino
13	02/08/2024	-	-	Multiple threat actors	Undisclosed organization(s) in the U.S.	The US cybersecurity agency CISA publishes an advisory describing CVE-2024-7029, a high-severity vulnerability that appears to have been exploited in the wild to hack cameras made by Avtech Security.	CVE-2024-7029 Vulnerability	Unknown	N/A	US		U.S. Cybersecurity and Infrastructure Security Agency, CISA, CVE-2018-0824, deserialization of untrusted data, Microsoft COM for Windows, Known Exploited Vulnerabilities, KEV, CVE-2018-0824
14	02/08/2024	01/08/2024	01/08/2024	?	Convergence	Decentralized finance protocol Convergence suffers a smart contract exploit that allows a threat actor to mint and sell $210,000 worth of native tokens and steal $2,000 in unclaimed staking rewards,	Vulnerability	Fintech	Cyber Crime	N/A		Convergence
15	04/08/2024	Since 20/07/2024	20/07/2024	Magniber	Home users' devices worldwide	A massive Magniber ransomware campaign encrypts home users' devices worldwide and demands thousand-dollar ransoms.	Ransomware	Individual	Cyber Crime	>1		Magniber, ransomware
16	04/08/2024	03/08/2024	03/08/2024	?	Grand Palais Réunion des musées nationaux (Rmn)	The Grand Palais Réunion des musées nationaux (Rmn) in France warns that it suffered a cyberattack.	Ransomware	Education	Cyber Crime	FR		Grand Palais Réunion des musées nationaux, Rmn, ransomware
17	05/08/2024	-	-	?	Undisclosed organization(s)	Google patches CVE-2024-36971, an Android vulnerability exploited in targeted attacks.	CVE-2024-36971 Vulnerability	Unknown	N/A	N/A		Google, CVE-2024-36971, Android
18	05/08/2024	During January 2024	During January 2024	Kimsuky (APT43) and Andariel (APT45)	South Korean construction trade organization	The South Korea's National Cyber Security Center (NCSC) warns that state-backed threat actors DPRK hijacked flaws in a VPN's software update to deploy malware and breach networks. In the first case they compromised the website of a South Korean construction trade organization to disseminate malware to visitors.	VPN Vulnerability	Professional, scientific and technical	Cyber Espionage	KR		Kimsuky, APT43, Andariel, APT45, South Korea, National Cyber Security Center, NCSC, North Korea, DPRK, VPN
19	05/08/2024	During January 2024	During January 2024	Kimsuky (APT43) and Andariel (APT45)	Construction and machinery companies in South Korea	The South Korea's National Cyber Security Center (NCSC) warns that state-backed threat actors DPRK hijacked flaws in a VPN's software update to deploy malware and breach networks. In the second case they exploited vulnerabilities in domestic security software (VPN and server security) to replace update files with malware, distributing remote control malware named "DoraRAT" to construction and machinery companies.	VPN Vulnerability	Professional, scientific and technical	Cyber Espionage	KR		Kimsuky, APT43, Andariel, APT45, South Korea, National Cyber Security Center, NCSC, North Korea, DPRK, VPN, DoraRAT
20	05/08/2024	-	-	Multiple threat actors	Undisclosed organization(s) in the U.S.	The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds the CVE-2018-0824 deserialization of untrusted data vulnerability in Microsoft COM for Windows, to its Known Exploited Vulnerabilities (KEV) catalog.	CVE-2018-0824 Vulnerability	Unknown	N/A	US		U.S. Cybersecurity and Infrastructure Security Agency, CISA, CVE-2018-0824, deserialization of untrusted data, Microsoft COM for Windows, Known Exploited Vulnerabilities, KEV, CVE-2018-0824
21	05/08/2024	During July 2024	During July 2024	?	Hospitality workers in Canada and Europe	Researchers from Threat Fabric uncover a campaign targeting hospitality workers in Canada and Europe with the banking malware known as Chameleon.	Malware	Accommodation and food service	Cyber Crime	CA EU		Threat Fabric, Chameleon, Android
22	05/08/2024	Since July 2021	During March 2024	?	Individuals in Russia	Researchers from Kaspersky discover a campaign targeting individuals in Russia with a previously unseen Android spyware dubbed LianSpy.	Malware	Individual	Cyber Espionage	RU		Kaspersky, Android, LianSpy
23	05/08/2024	-	-	?	Multiple organizations	Researchers from Sonicwall discover a campaign where threat actors are abusing GitHub to deliver multiple malware strains in disguise of a fake WinRAR installer.	Malware	Multiple Industries	Cyber Crime	>1		Sonicwall, GitHub, WinRAR
24	05/08/2024	Since March 2023	17/05/2024	Zola	Multiple organizations	Researchers at Acronis discover a new Proton ransomware variant dubbed Zola.	Ransomware	Multiple Industries	Cyber Crime	>1		Acronis, Proton, Zola, ransomware
25	05/08/2024	04/08/2024	04/08/2024	?	Dispatch centers in the Highland Lakes and across Central Texas	A reported cyberattack disrupts 9-1-1 service at dispatch centers in the Highland Lakes and across Central Texas for over five hours.	DDoS	Human health and social work	Cyber Crime	US		9-1-1, Highland Lakes, Central Texas
26	05/08/2024	During September 2023	During September 2023	?	Hospital Español Auxilio Mutuo (Hospital Auxilio Mutuo)	Hospital Español Auxilio Mutuo (Hospital Auxilio Mutuo) in Puerto Rico notifies of a network incident affecting 500 patients.	Unknown	Human health and social work	Cyber Crime	US		Hospital Español Auxilio Mutuo, Hospital Auxilio Mutuo, Puerto Rico
27	05/08/2024	-	25/07/2024	RansomHub	Millinocket Regional Hospital	Millinocket Regional Hospital (MRHME) suffers a RansomHub ransomware attack. The threat actors claim to have exfiltrated 10 GB of files.	Ransomware	Human health and social work	Cyber Crime	US		Millinocket Regional Hospital, MRHME, RansomHub, Ransomware
28	05/08/2024	-	16/06/2024	RADAR and DISPOSSESSOR’s (“R&D”)	Delhi Hospital	Delhi Hospital (also known as Richard Parish Hospital) in Louisiana is added to the RADAR and DISPOSSESSOR’s (“R&D”) ransomware leak site.	Ransomware	Human health and social work	Cyber Crime	US		Delhi Hospital, Richard Parish Hospital,RADAR and DISPOSSESSOR, R&D, Ransomware
29	05/08/2024	21/07/2024	31/07/2024	Qilin	Schneider Regional Medical Center	Schneider Regional Medical Center in the Virgin Islands is added to Qilin’s ransomware leak site.	Ransomware	Human health and social work	Cyber Crime	VI		Schneider Regional Medical Center, Qilin, ransomware
30	06/08/2024	-	-	?	Multiple organizations	Researchers at ReasonLabs discover an ongoing and widespread malware campaign that force-installs malicious Google Chrome and Microsoft Edge browser extensions in over 300,000 browsers, modifying the browser's executables to hijack homepages and steal browsing history.	Malware	Multiple Industries	Cyber Crime	>1		ReasonLabs, Google Chrome, Microsoft Edge
31	06/08/2024	Since 2018	-	Multiple threat actors	Multiple organizations	Researchers from Elastic warn that a design flaw in Windows Smart App Control and SmartScreen that enables attackers to launch programs without triggering security warnings has been under exploitation since at least 2018.	Vulnerability	Multiple Industries	N/A	>1		Elastic, Windows Smart App Control, SmartScreen
32	06/08/2024	04/08/2024	04/08/2024	?	Mobile Guardian	A threat actor breaches Mobile Guardian, a digital classroom management platform used worldwide, and remotely wipes data from at least 13,000 student's iPads and Chromebooks.	Unknown	Professional, scientific and technical	Cyber Crime	US		Mobile Guardian
33	06/08/2024	19/07/2024	19/07/2024	?	Undisclosed commodity firm in Singapore	I-GRIP, a global stop-payment mechanism created by INTERPOL successfully recovers over $40 million stolen in a BEC attack on a company in Singapore.	Business Email Compromise	Other service activities	Cyber Crime	SG		I-GRIP, INTERPOL
34	06/08/2024	06/08/2024	06/08/2024	Rhysida	Florida’s Sumter County Sheriff’s Office	Florida’s Sumter County Sheriff’s Office confirms that it experienced a Rhysida ransomware attack.	Ransomware	Public admin and defence, social security	Cyber Crime	US		Florida’s Sumter County Sheriff’s Office, Rhysida, ransomware
35	06/08/2024	01/03/2024	18/03/2024	?	Arisa Health	Arisa Health, an Arkansas-based provider of mental and behavioral health services notifies more than 375,000 individuals of a recent data theft incident potentially compromising their sensitive personal and medical information.	Unknown	Human health and social work	Cyber Crime	US		Arisa Health
36	07/08/2024	Since at least 01/08/2024	01/08/2024	?	Multiple organizations	Threat actors are actively attempting to exploit CVE-2024-4885, a recently fixed Progress WhatsUp Gold remote code execution vulnerability on exposed servers for initial access to corporate networks.	CVE-2024-4885 Vulnerability	Multiple Industries	Cyber Crime	>1		CVE-2024-4885, Progress, WhatsUp Gold
37	07/08/2024	-	-	?	Multiple organizations	Researchers From Menlo Security uncover a sophisticated phishing campaign that exploits the trust users place in well-known websites like Google Drawings and WhatsApp.	Account Takeover	Multiple Industries	Cyber Crime	>1		From Menlo Security, Google Drawings, WhatsApp
38	07/08/2024	In late July 2024	In late July 2024	APT43 a.k.a. Kimsuky	University staff, researchers, and professors	Researchers from Resilience uncover critical details about the North Korean advanced persistent threat (APT) group Kimsuky, which has been targeting universities as part of its global espionage operations, using a custom tool called “SendMail	Targeted Attack	Education	Cyber Espionage	>1		APT43, Kimsuky, Resilience, North Korea, SendMail
39	07/08/2024	-	-	?	Multiple organizations in the crypto space	Researchers from Sonatype discover "solana-py", a new malicious package on the Python Package Index (PyPI) repository that masquerades as "solana", a legitimate library from the Solana blockchain platform, but is actually designed to steal victims' secrets.	Malware	Fintech	Cyber Crime	>1		Sonatype, solana-py, Python Package Index, PyPI, solana
40	07/08/2024	'Recently'	'Recently'	?	Multiple organizations	Researchers from Avast discover a new ClearFake campaign spreading via infected webpage, and distributing a .NET malware strain which uses free code hosting services such as GitHub and Bitbucket, and URL shorteners.	Malware	Multiple Industries	Cyber Crime	>1		Avast, ClearFake, .NET, GitHub, Bitbucket
41	07/08/2024	06/08/2024	06/08/2024	INC	McLaren Health Care	IT and phone systems at McLaren Health Care hospitals are disrupted following an attack linked to the INC Ransom ransomware operation.	Ransomware	Human health and social work	Cyber Crime	US		McLaren Health Care, INC Ransom, ransomware
42	07/08/2024	Since early July 202	During July 2024	?	Multiple organizations in Russia	Researchers from Kaspersky reveal that a new self-spreading worm named 'CMoon,' capable of stealing account credentials and other data, has been distributed in Russia since early July 2024 via a compromised gas supply company website.	Targeted Attack	Multiple Industries	Cyber Crime	RU		Kaspersky, CMoon
43	07/08/2024	Since at least early April 2024	Early April 2024	Multiple threat actors	Undisclosed organization(s)	Researchers at Oligo Security observe multiple threat actors exploiting the "0.0.0.0 Day" vulnerability targeting Google Chrome, Mozilla Firefox, and Apple Safari as part of their attack chains.	Browser vulnerability	Unknown	N/A	N/A		Oligo Security, "0.0.0.0 Day", Google Chrome, Mozilla Firefox, Apple Safari
44	07/08/2024	-	-	Multiple threat actors	Undisclosed organization(s) in the U.S.	The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds the CVE-2024-32113 Apache OFBIz, to its Known Exploited Vulnerabilities (KEV) catalog.	CVE-2024-32113 Vulnerability	Unknown	N/A	US		U.S. Cybersecurity and Infrastructure Security Agency, CISA, CVE-2012-32113, Apache OFBiz, Known Exploited Vulnerabilities, KEV
45	07/08/2024	During November 2023	During November 2023	Harvester	Unnamed media organization in South Asia	Researchers from Symantec reveal that an unnamed media organization in South Asia was targeted in November 20233 using a previously undocumented Go-based backdoor called GoGra.	Targeted Attack	Information and communication	Cyber Espionage	N/A		Symantec, GoGra
46	07/08/2024	-	-	Firefly	Military organization in Southeast Asia	Researchers from Symantec discover a previously unseen data exfiltration tool deployed by Firefly in a cyber attack targeting a military organization in Southeast Asia. The harvested information is uploaded to Google Drive using a hard-coded refresh token.	Targeted Attack	Public admin and defence, social security	Cyber Espionage	N/A		Symantec, FireFly, Google Drive
47	07/08/2024	During April 2024	During April 2024	UNC5330	Undisclosed Organization in Taiwan	Researchers from Symantec discover a new backdoor dubbed Grager that was deployed against three organizations in Taiwan, Hong Kong, and Vietnam in April 2024. It uses the Graph API to communicate with a C&C server hosted on Microsoft OneDrive. The activity has been tentatively linked to a suspected Chinese threat actor tracked as UNC5330.	Targeted Attack	Unknown	Cyber Espionage	TW		Symantec, Grager, Graph API, Microsoft OneDrive, China
48	07/08/2024	During April 2024	During April 2024	UNC5330	Undisclosed Organization in Hong Kong	Researchers from Symantec discover a new backdoor dubbed Grager that was deployed against three organizations in Taiwan, Hong Kong, and Vietnam in April 2024. It uses the Graph API to communicate with a C&C server hosted on Microsoft OneDrive. The activity has been tentatively linked to a suspected Chinese threat actor tracked as UNC5330.	Targeted Attack	Unknown	Cyber Espionage	HK		Symantec, Grager, Graph API, Microsoft OneDrive, China
49	07/08/2024	During April 2024	During April 2024	UNC5330	Undisclosed Organization in Vietnam	Researchers from Symantec discover a new backdoor dubbed Grager that was deployed against three organizations in Taiwan, Hong Kong, and Vietnam in April 2024. It uses the Graph API to communicate with a C&C server hosted on Microsoft OneDrive. The activity has been tentatively linked to a suspected Chinese threat actor tracked as UNC5330.	Targeted Attack	Unknown	Cyber Espionage	VN		Symantec, Grager, Graph API, Microsoft OneDrive, China
50	07/08/2024	-	-	?	IT services companies in the U.S. and Europe	Researchers from Symantec discover a backdoor called Onedrivetools that has been used against IT services companies in the U.S. and Europe. It uses the Graph API to interact with a C&C server hosted on OneDrive to execute received commands and save the output to OneDrive.	Targeted Attack	Professional, scientific and technical	N/A	EU US		Symantec, Onedrivetools, Graph API, OneDrive.
51	07/08/2024	-	-	Rhysida	Bayhealth Hospital	The Rhysida Ransomware group claims to have breached Bayhealth Hospital in Delaware and offers alleged stolen data for 25 BTC.	Ransomware	Human health and social work	Cyber Crime	US		Rhysida, Ransomware, Bayhealth Hospital
52	07/08/2024	06/08/2024	06/08/2024	?	Port of Tyne	The Port of Tyne confirma its site was down for some time, following a distributed denial of service (DDOS) attack.	DDoS	Transportation and storage	N/A	GB		Port of Tyne
53	07/08/2024	07/08/2024	07/08/2024	?	Nexera	The decentralized finance (DeFi) protocol Nexera falls victim to a significant exploit, resulting in the theft of approximately $1.8 million worth of digital assets.	Vulnerability	Fintech	Cyber Crime	N/A		Nexera
54	07/08/2024	-	-	?	Spanish and Portuguese Android banking users	Researchers at Symantec discover a new banking trojan malware campaign, exploiting the secureserver.net domain to target Spanish and Portuguese-speaking regions.	Malware	Finance and insurance	Cyber Crime	BR PT		Symantec, secureserver.net, Android
55	08/08/2024	08/08/2024	08/08/2024	?	Russia's Kursk Region	Russia's Kursk region is hit by a “massive” distributed denial-of-service (DDoS) attack amid Ukraine’s surprise cross-border incursion.	DDoS	Multiple Industries	Hacktivism	RU		Kursk, Russia, Ukraine
56	08/08/2024	Earlier in 2024	Earlier in 2024	APT29 a.k.a. Midnight Blizzard, BlueBravo	British Home Office	Threat actors from APT29 working for Russia’s foreign intelligence service accessed corporate emails and data on individuals from the British government, after they breached Microsoft in January 2024.	Account Takeover	Public admin and defence, social security	Cyber Espionage	GB		APT29, Midnight Blizzard, BlueBravo, British Home Office, Microsoft
57	08/08/2024	-	-	Multiple threat actors	Undisclosed organization(s) in the U.S.	The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recommends disabling the legacy Cisco Smart Install (SMI) feature after seeing it abused in recent attacks.	Misconfiguration	Unknown	N/A	US		U.S. Cybersecurity and Infrastructure Security Agency, CISA, Cisco Smart Install, SMI
58	08/08/2024	'Recently'	'Recently'	?	Multiple organizations	Researchers from Cyble identify a sophisticated phishing website masquerading as an official Google Safety Centre page to deceive users into downloading two distinct malware strains, Latrodectus and ACR Stealer, in disguise of a file that purports to be Google Authenticator.	Malware	Multiple Industries	Cyber Crime	>1		Cyble, Google Safety Centre, Latrodectus, ACR Stealer, Google Authenticator
59	08/08/2024	SInce July 2024	SInce July 2024	?	Android banking users in multiple countries, including Bangladesh, Indonesia, Mexico, South Africa, and Ethiopia	Researchers from Cyble observe a noticeable surge in the detection of a new variant of the Android Gigabud malware.	Malware	Finance and insurance	Cyber Crime	BD ET ID MX ZA		Cyble, Android, Gigabud
60	08/08/2024	Since June 2024	Since June 2024	DeathGrip	Multiple organizations	Researchers from Sentinel One discover a new Ransomware-as-a-Service (RaaS) operation called DeathGrip.	Ransomware	Multiple Industries	Cyber Crime	>1		Sentinel One, Ransomware, Ransomware-as-a-Service, RaaS, DeathGrip
61	08/08/2024	Since at least 01/07/2024	01/07/2024	Actor240524	Azerbaijani and Israeli diplomats	Researchers from NSFOCUS discover a new campaign targeting Azerbaijani and Israeli diplomats with two new trojans dubbed ABCloader and ABCsync.	Targeted Attack	Public admin and defence, social security	Cyber Espionage	AZ IL		NSFOCUS, ABCloader, ABCsync
62	08/08/2024	-	31/08/2024	netnsher	ADT	American building security giant ADT confirms it suffered a data breach after threat actors leaked allegedly stolen customer data on a popular hacking forum.	Unknown	Manufacturing	Cyber Crime	US		netnsher, ADT
63	08/08/2024	07/08/2024	07/08/2024	BlackSuit	City of Killeen	The city of Killeen, Texas reveals to be recovering from a BlackSuit ransomware attack.	Ransomware	Public admin and defence, social security	Cyber Crime	US		City of Killeen, BlackSuit, Ransomware
64	09/08/2024	'Recently'	'Recently'	Earth Baku (spinoff group associated with APT41)	Multiple organizations Italy, Germany, UAE, and Qatar	Researchers from Trend Micro reveal that Earth Baku (a threat actor associated with APT41) has expanded its activities beyond the Indo-Pacific region to Europe, the Middle East, and Africa, targeting countries like Italy, Germany, UAE, and Qatar.	Targeted Attack	Multiple Industries	Cyber Espionage	AE DE IT QA		Trend Micro, Earth Baku, APT41
65	09/08/2024	During June 2024	During June 2024	Mint Sandstorm	High-ranking official of a presidential campaign in the U.S.	Researchers at Microsoft reveal that Mint Sandstorm, a group run by the Islamic Revolutionary Guard Corps (IRGC) intelligence unit, sent a spear-phishing email to a high-ranking official of a presidential campaign from a compromised email account of a former senior advisor.	Targeted Attack	Individual	Cyber Espionage	US		Mint Sandstorm, Iran, Islamic Revolutionary Guard Corps, IRGC, Microsoft
66	09/08/2024	13/06/2024	13/06/2024	Mint Sandstorm	Former presidential candidate in the U.S.	Researchers at Microsoft reveal that Mint Sandstorm also unsuccessfully attempted to log in to an account belonging to a former presidential candidate.	Targeted Attack	Individual	Cyber Espionage	US		Mint Sandstorm, Iran, Islamic Revolutionary Guard Corps, IRGC, Microsoft
67	09/08/2024	During May 2024	During May 2024	Peach Sandstorm (a.k.a. APT33)	County-level government in the U.S.	Researchers at Microsoft reveal that Peach Sandstorm (a.k.a. APT33), another group with assessed links to the IRGC, compromised a user account with minimal access permissions at a county-level government in a swing state.	Password-Spray	Public admin and defence, social security	Cyber Espionage	US		Microsoft, Peach Sandstorm, APT33, IRGC
68	09/08/2024	Since October 2023	During Q2 2024	Storm-2035 (threat actor associated with Iran)	Audience in the U.S.	Researchers at Microsoft reveal that an Iranian network, Storm-2035, comprising four websites masquerading as news outlets is actively engaging US voter groups on opposing ends of the political spectrum with polarizing messaging on issues such as the US presidential candidates, LGBTQ rights, and the Israel-Hamas conflict.	Coordinated Inauthentic Behavior	Individual	Cyber Warfare	US		Storm-2035, Iran, Russia, US Presidential Elections
69	09/08/2024	During late June 2024	During late June 2024	Storm-151	Audience in the U.S.	Researchers at Microsoft reveal that a Russian network, Storm-151, is trying to manipulate the US presidential elections with with fake scandals.	Coordinated Inauthentic Behavior	Individual	Cyber Warfare	US		Microsoft, Storm-151, US Presidential Elections
70	09/08/2024	During January and February 2024	During January and February 2024	Rybar a.k.a. Storm-1841	Audience in the U.S.	Researchers at Microsoft reveal that a Russian network, Storm-1841 created accounts on Telegram and X using the name “TEXASvsUSA.” TEXASvsUSA posting regularly feature inflammatory news updates, invoke racial dog whistles, and call for mobilization and violence.	Coordinated Inauthentic Behavior	Individual	Cyber Warfare	US		Microsoft Russia, Storm-1841, Telegram, X, TEXASvsUSA, TEXASvsUSA, Rybar, US presidential elections
71	09/08/2024	From late April to late May	From late April to late May	Taizi Flood a.k.a. Spamouflage	Audience in the U.S.	Researchers at Microsoft reveal that the Chinese network Spamouflage leveraged hundreds of accounts to stoke outrage around pro-Palestinian protests at US universities.	Coordinated Inauthentic Behavior	Individual	Cyber Warfare	US		Microsoft, China, Taizi Flood, Spamouflage, US presidential elections, Palestine
72	09/08/2024	-	-	Storm-1852	Audience in the U.S.	Researchers at Microsoft reveal that the Chinese threat actor Storm-1852, has begun pivoting to short-form video content on political topics to garner audience engagement.	Coordinated Inauthentic Behavior	Individual	Cyber Warfare	US		Microsoft, China, Storm-1852, US presidential elections
73	09/08/2024	09/08/2024	09/08/2024	?	Unicoin	Unicoin, a prominent cryptocurrency company notifies the SEC that a threat actor broke into its systems and locked all of the company’s employees out before taking several actions that are still being investigated.	Account Takeover	Fintech	Cyber Crime	US		Unicoin, SEC
74	09/08/2024	23/09/2023	04/02/2024	?	CSC ServiceWorks	CSC ServiceWorks, a leading provider of commercial laundry services and air vending solutions, discloses a data breach after the personal information of over 35,000 individuals was exposed in a 2023 cyberattack.	Unknown	Manufacturing	Cyber Crime	US		CSC ServiceWorks
75	09/08/2024	-	-	Rhysida	Community Care Alliance	Community Care Alliance is listed in the Rhysida ransomware leak site.	Ransomware	Human health and social work	Cyber Crime	US		Community Care Alliance, Rhysida, ransomware
76	10/08/2024	10/08/2024	10/08/2024	?	Orion SA	Luxembourg-based chemicals and manufacturing giant Orion SA notifies US regulators that it will lose out on around $60 million after it was targeted by a criminal wire fraud scheme.	Business Email Compromise	Manufacturing	Cyber Crime	LU		Orion SA
77	10/08/2024	-	12/07/2024	Hunters International	Betances Health Center	The ransomware group Hunters International adds Betances Health Center in New York to their leak site.	Ransomware	Human health and social work	Cyber Crime	US		Hunters International, Betances Health Center, ransomware, New York
78	10/08/2024	14/06/2024	18/06/2024	Everest Team	Gramercy Surgery Center	The threat actor(s) known as Everest Team add Gramercy Surgery Center (“Gramercy”) to its leak site, and claims to have acquired more than 460 GB of files.	Ransomware	Human health and social work	Cyber Crime	US		Everest Team, ransomware, Gramercy Surgery Center, Gramercy
79	10/08/2024	21/02/2024	21/02/2024	?	Surgery Center of Mid Florida	Surgery Center of Mid Florida ("SCOMF") discloses to have suffered a ransomware attack.	Ransomware	Human health and social work	Cyber Crime	US		Surgery Center of Mid Florida, SCOMF, ransomware
80	11/08/2024	During August 2024	During August 2024	?	Users on X	In a new campaign on X, scammers start creating posts pretending to contain sensational information about the Ukrainian forces invading Kursk or warnings about an earthquake in Japan.	Scam	Individual	Cyber Crime	>1		X, Ukraine, Kursk
81	11/08/2024	-	-	Fenice	National Public Data	A threat actor known as "Fenice" leaks almost 2.7 billion records of personal information for people in the United States.	Unknown	Other service activities	Cyber Crime	US		National Public Data, Fenice
82	12/08/2024	Since at least 12/08/2024	12/08/2024	UAC-0198	Central and local government bodies in Ukraine	The Ukraine's Computer Emergency Response Team (CERT-UA) discovers a mass distribution of emails carrying the ANONVNC malware posing as the country's Security Service (SSU).	Targeted Attack	Public admin and defence, social security	Cyber Espionage	UA		Ukraine's Computer Emergency Response Team, CERT-UA, ANONVNC, Security Service, SSU
83	12/08/2024	-	Earlier during Summer 2024	Threat actors from Iran	Former President Donald Trump’s campaign	The FBI is investigating the alleged hack of former President Donald Trump’s campaign, days after the campaign blamed Iran for a breach.	Targeted Attack	Public admin and defence, social security	Cyber Espionage	US		FBI, President Donald Trump, Iran
84	12/08/2024	-	Earlier during Summer 2024	Threat actors from Iran	Biden-Harris campaign	The FBI is also investigating the alleged hack of the Biden-Harris campaign by threat actors from Iran	Targeted Attack	Public admin and defence, social security	Cyber Espionage	US		FBI, Biden-Harris, Iran
85	12/08/2024	Since at least 20/06/2024	20/06/2024	Black Basta	Multiple organizations	Researchers from Rapid7 unveil an ongoing social engineering campaign with alleged links to the Black Basta ransomware group linked to "multiple intrusion attempts" with the goal of conducting credential theft and deploying a malware dropper called SystemBC.	Malware	Multiple Industries	Cyber Crime	>1		Rapid7, Black Basta, ransomware, SystemBC
86	12/08/2024	-	-	Threat actors from North Korea	Undisclosed South Korean defense contractor	A South Korean defense contractor which produces operational and maintenance manuals for military equipment, including the two spy planes "Baekdu" and "Geumgang", was allegedly hacked by threat actors from North Korea.	Targeted Attack	Manufacturing	Cyber Espionage	KR		South Korea, North Korea, Baekdu, Geumgang
87	12/08/2024	08/08/2024	08/08/2024	?	Evolution Mining	Evolution Mining informs that it has been targeted by a ransomware attack, which impacted its IT systems.	Ransomware	Mining and quarrying	Cyber Crime	AU		Evolution Mining, ransomware
88	12/08/2024	22/02/2024	01/08/2024	3AM	Kootenai Health	Kootenai Health discloses a data breach impacting over 464,000 patients after their personal information was stolen and leaked by the 3AM ransomware operation.	Ransomware	Human health and social work	Cyber Crime	US		Kootenai Health, 3AM, ransomware
89	12/08/2024	12/08/2024	12/08/2024	Threat actors from Russia	Audience in Ukraine	The Ukrainian security service (SBU) warns of a new Kremlin disinformation campaign related to Ukraine’s recent incursion into Russian territory.	Coordinated Inauthentic Behavior	Individual	Cyber Warfare	UA		Ukrainian Security Service, SBU, Russia
90	12/08/2024	09/08/2024	09/08/2024	?	Schlatter Group	Schlatter Group, a Swiss manufacturing company, suffers a ransomware attack.	Ransomware	Manufacturing	Cyber Crime	CH		Schlatter Group, ransomware
91	12/08/2024	02/07/2024	06/06/2024	?	Alabama Cardiology Group	Alabama Cardiology Group notifies nearly 281,000 current and past patients, physicians and employees that threat actors stole their sensitive information.	Unknown	Human health and social work	Cyber Crime	US		Alabama Cardiology Group
92	13/08/2024	-	-	Multiple threat actors	Undisclosed organization(s)	Attackers are actively exploiting as many as six of the 90 vulnerabilities that Microsoft discloses in its security update for August.	CVE-2024-38189, CVE-2024-38178, CVE-2024-38106, CVE-2024-38107, CVE-2024-38193, CVE-2024-38213 vulnerabilities	Unknown	N/A	N/A		Microsoft, CVE-2024-38189, CVE-2024-38178, CVE-2024-38106, CVE-2024-38107, CVE-2024-38193, CVE-2024-38213
93	13/08/2024	'Recently'	'Recently'	CryptoCore	Users in the Crypto space	Researchers at Avast reveal the details of the CryptoCore group, an operation actively exploiting sophisticated cryptocurrency scams to drain users’ wallets.	Scam	Fintech	Cyber Crime	>1		Avast, CryptoCore
94	13/08/2024	-	-	UNC4536	Multiple organizations	Researchers from Mandiant uncover a surge in malware infections stemming from malvertising campaigns distributing a loader called FakeBat (a.k.a. NUMOZYLOD, EugenLoader, PaykLoader).	Malware	Multiple Industries	Cyber Crime	>1		UNC4536, Mandiant, FakeBat, NUMOZYLOD, EugenLoader, PaykLoader
95	13/08/2024	11/08/2024	11/08/2024	?	AutoCanada	AutoCanada suffers a cyberattack that impacts the automobile dealership group's internal IT systems, which may lead to disruptions.	Unknown	Wholesale and retail	Cyber Crime	CA		AutoCanada
96	13/08/2024	Since mid-July 2024.	During mid-July 2024.	Mad Liberator	Multiple organizations	Researchers from Sophos discover a new data extortion group tracked as Mad Liberator, targeting AnyDesk users and runs a fake Microsoft Windows update screen to distract while exfiltrating data from the target device.	Ransomware	Multiple Industries	Cyber Crime	>1		Sophos, Mad Liberator, ransomware, AnyDesk
97	13/08/2024	-	-	Beregini	POLADA	Threat actors "from a hostile state” are believed to be behind the leak of over 50,000 confidential files from Poland’s anti-doping agency POLADA.	Unknown	Other service activities	Hacktivism	PL		Beregini, POLADA
98	13/08/2024	13/08/2024	13/08/2024	?	X	Elon Musk’s interview with US Presidential candidate Donald Trump on the X social media platform is impacted by technical glitches and what is a cyberattack.	DDoS	Information and communication	N/A	US		Elon Musk, Donald Trump, X
99	13/08/2024	09/01/2024	09/01/2024	LockBit	East Valley Institute of Technology	East Valley Institute of Technology ("EVIT") an Arizona-based technical school notifies nearly 209,000 current and former students, parents, guardians and faculty that their personal, health and financial information was potentially compromised in LockBit ransomware attack earlier this year.	Ransomware	Human health and social work	Cyber Crime	US		East Valley Institute of Technology, EVIT, LockBit, ransomware
100	13/08/2024	Since late July to early August 2024	Since late July to early August 2024	Lazarus	Crypto investors	Researchers at Group-IB discover a Windows version of the BeaverTail malware, attributed to the North Korean Lazarus.	Malware	Fintech	Cyber Crime	>1		Group-IB, BeaverTail, North Korea, Lazarus
101	14/08/2024	-	-	?	Multiple organizations	Researchers at Aqua Security discover a new variant of the Gafgyt (a.k.a. BASHLITE, Lizkebab, and Torlus) botnet that's targeting machines with weak SSH passwords to ultimately mine cryptocurrency on compromised instances using their GPU computational power.	Misconfiguration	Multiple Industries	Cyber Crime	>1		Aqua Security, Gafgyt, BASHLITE, Lizkebab, Torlus, SSH
102	14/08/2024	Since at least early August 2024	Since at least early August 2024	?	Multiple organizations	Researchers at Barracuda Networks uncover a new sophisticated phishing attack featuring a stealthy infostealer malware that exfiltrates a wide range of sensitive data.	Malware	Multiple Industries	Cyber Crime	>1		Barracuda Networks
103	14/08/2024	14/08/2024	14/08/2024	?	Central Bank of Iran (CBI) and several other banks in the country	Iran International reports that a massive cyber attack disrupted operations of the Central Bank of Iran (CBI) and several other banks in the country.	DDoS	Finance and insurance	N/A	IR		Iran International, Central Bank of Iran, CBI
104	14/08/2024	Since 2022	Since 2022	COLDRIVER (a.k.a. Star Blizzard, Callisto) and Coldwastrel	Prominent Russian opposition figures in exile, media organization funders and staff at US and European NGOs.	Researchers at Citizen Lab discover River of Phish, a sophisticated spearphishing campaign carried out by the Russian threat actors from COLDRIVER and Coldwastrel targeting Western and Russian civil society entities for two years.	Targeted Attack	Other service activities	Hacktivism	EU US		COLDRIVER, Star Blizzard, Callisto, Coldwastrel, Russia, Citizen Lab, River of Phish
105	14/08/2024	Over the past six months	Over the past six months	APT42	Users in Europe, including France, Poland, Romania, Germany, Spain, Hungary, Italy, Greece, the Netherlands, and Sweden	Researchers at Mandiant discover a campaign by the Iranian threat actor APT42 targeting former senior Israeli military officials, diplomats, academics, political entities, and more.	Targeted Attack	Individual	Cyber Espionage	GB IL IR US >1		Mandiant, APT42, Iran
106	14/08/2024	During May 2022	During May 2022	RansomHub	Undisclosed organization	Researchers from Sophos reveal the details of a failed attack by the RansomHub ransomware group, using a tool called EDRKillShifter to disable antivirus products.	Ransomware	Unknown	Cyber Crime	N/A		Sophos, RansomHub, Ransomware, EDRKillShifter
107	14/08/2024	'Recently'	'Recently'	?	Multiple organizations	Researchers at Sucuri uncover a credit card skimmer leveraging a web socket connection to steal credit card details from an infected PrestaShop website.	Malicious Script Injection	Wholesale and retail	Cyber Crime	>1		Sucuri, PrestaShop
108	14/08/2024	Since at least late July 2024	In late July 2024	APT31 and APT 27	Russian government organizations and IT companies	Researchers from Kaspersky discover EastWind, a series of ongoing targeted cyberattacks on dozens of computers at Russian government organizations and IT companies.	Targeted Attack	Multiple Industries	Cyber Espionage	RU		Kaspersky, APT27, APT31, CloudSorcerer, EastWind
109	14/08/2024	29/07/2024	29/07/2024	?	Locata	A cyber attack on software company Locata spreads across councils across Greater Manchester, leaving thousands of residents vulnerable to a phishing scam.	Unknown	Professional, scientific and technical	Cyber Crime	GB		Locata, Greater Manchester
110	15/08/2024	-	-	Threat actors from Russia	Audience in Georgia, Armenia, and Azerbaijan	Meta removes 76 Facebook accounts, 30 Pages, and 11 accounts on Instagram for violating the policy against coordinated inauthentic behavior. The network originated in Russia and targeted Georgia, Armenia, and Azerbaijan.	Coordinated Inauthentic Behavior	Individual	Cyber Warfare	AR GE AZ		Meta, Facebook, Instagram, Russia
111	15/08/2024	-	-	Threat actors from Russia	English- and French-speaking audiences globally	Meta removes 20 Facebook accounts, 14 Pages, and nine accounts on Instagram for violating the policy against coordinated inauthentic behavior. The network originated in Russia and targeted primarily English- and French-speaking audiences globally.	Coordinated Inauthentic Behavior	Individual	Cyber Warfare	>1		Meta, Facebook, Instagram, Russia
112	15/08/2024	-	-	Threat actors from Russia	Audience in Ukraine, Moldova and Ukrainians living in Europe, and to a lesser extent France and Germany.	Meta removes 43 Facebook accounts and 85 Pages for violating the policy against coordinated inauthentic behavior. This network originated in Russia and targeted primarily Ukraine, Moldova and Ukrainians living in Europe, and to a lesser extent France and Germany.	Coordinated Inauthentic Behavior	Individual	Cyber Warfare	DE FR MD UA		Meta, Facebook
113	15/08/2024	-	-	Threat actors from Vietnam	Audience in Lebanon, the US, UK, and France, and to a lesser extent Saudi Arabia and Qatar	Meta removes 112 Facebook accounts, 65 Pages, and 49 accounts on Instagram for violating the policy against coordinated inauthentic behavior. The network originated in Vietnam and targeted primarily Lebanon, the US, UK, and France, and to a lesser extent Saudi Arabia and Qatar.	Coordinated Inauthentic Behavior	Individual	Cyber Warfare	FR GB LB QA SA US		Meta, Facebook, Instagram
114	15/08/2024	-	-	?	Audience in the U.S.	Meta removes 96 Facebook accounts, 16 Pages, 12 Group, and three accounts on Instagram for violating the policy against coordinated inauthentic behavior. The network originated in the United States and targeted domestic audiences in the country.	Coordinated Inauthentic Behavior	Individual	N/A	US		Meta, Facebook, Instagram
115	15/08/2024	Since May 2024	Since May 2024	Doppelgänger (threat actors from Russia)	Audience worldwide	Meta reports observing “notable shifts” in Doppelgänger's operational tactics on its platform in response to “aggressive enforcement, removing over 5,000 accounts and pages.	Coordinated Inauthentic Behavior	Individual	Cyber Warfare	>1		Meta, Doppelgänger
116	15/08/2024	'Recently'	'Recently'	?	Chinese-speaking users	Researchers from Fortinet warn of an ongoing ValleyRAT malware campaign targeting Chinese-speaking users.	Malware	Individual	Cyber Crime	CN		Fortinet, ValleyRAT
117	15/08/2024	21/07/2024	21/07/2024	?	FleepBot	Several popular Ukrainian news channels on Telegram are hacked over the weekend to spread “provocative messages,” after the Russia-owned service called FleepBot, used to schedule posts, automate responses and manage content is compromised.	Unknown	Professional, scientific and technical	Cyber Warfare	UA		Ukraine, Telegram, FleepBot
118	15/08/2024	-	-	?	Multiple organizations	Researchers from Malwarebytes discover a new campaign impersonating Google’s entire product line and redirecting victims to a fake Google home page.	Malware	Multiple Industries	Cyber Crime	>1		Malwarebytes, Google
119	15/08/2024	-	-	Multiple threat actors	Undisclosed organization(s) in the U.S.	The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns that threat actors are exploiting CVE-2024-28986, a recently patched critical vulnerability in SolarWinds' Web Help Desk solution for customer support.	CVE-2024-28986 Vulnerability	Unknown	N/A	US		U.S. Cybersecurity and Infrastructure Security Agency, CISA, CVE-2024-28986, SolarWinds' Web Help Desk
120	15/08/2024	Since June 2024	Since June 2024	Threat actors from Russia	Multiple organizations	Researcher from Kaspersky uncover 'Tusk', a sophisticated information stealer campaign carried out from Russian threat actors, which impersonates legitimate brands to distribute malware like DanaBot and StealC.	Malware	Multiple Industries	Cyber Crime	>1		Kaspersky, Tusk
121	15/08/2024	-	-	?	Multiple organizations	Researchers from Palo Alto Networks discover a large-scale extortion campaign compromising various organizations by taking advantage of publicly accessible environment variable files (.env) that contain credentials associated with cloud and social media applications.	Misconfiguration	Multiple Industries	Cyber Crime	>1		Palo Alto Networks
122	15/08/2024	14/08/2024	14/08/2024	?	City of Flint	Phones and computers used by government workers in Flint, Michigan are facing outages due to a ransomware attack.	Ransomware	Public admin and defence, social security	Cyber Crime	US		City of Flint, ransomware
123	15/08/2024	16/07/2024	12/10/2023	?	Carespring Healthcare Management	Ohio nursing home Carespring Healthcare Management notifies approximately 77,000 individuals that their personal and medical information was compromised in a data breach that dates back to October 2023.	Unknown	Human health and social work	Cyber Crime	US		Carespring Healthcare Management
124	15/08/2024	-	-	iSoon	European institutions and states	The massive February leak of internal documents from Chinese hacking contractor iSoon reveals apparent hacking against European institutions and states.	Targeted Attack	Multiple Industries	Cyber Espionage	EU		ISoon
125	15/08/2024	18/12/2023	11/12/2023	?	Specialty Networks	Specialty Networks, a vendor that provides information systems and transcription services to radiology practices is alerting 411,037 people of a hack discovered last December involving the theft of sensitive data.	Unknown	Professional, scientific and technical	Cyber Crime	US		Specialty Networks
ID	Date Reported	Date Occurred	Date Discovered	Author	Target	Description	Attack	Target Class	Attack Class	Country	Link	Tags

Creating the timelines is a very time-consuming task.

Any little helps!

CVEs Targeting Remote Access Technologies

In this first quarter of 2024, threat actors have been particularly busy in exploiting vulnerabilities (0-days but also old unpatched flaws) targeting traditional remote access technologies.

Mega Breaches in 2026
Here’s a collection of the main mega breaches (that is data breaches with more than one million records compromised and possibly leaked) during 2026. The information is derived from the cyber attacks timelines that I published, normally, on a bi-weekly basis.
October 2026 Cyber Attacks Timeline
A live view of the month's vetted cyber incidents, updated as new events are confirmed. Explore the timeline, filter by attack type, and see motivations, techniques, initial access methods, targeted sectors and target countries on an interactive map.
Rogue AI Agents
AI agents are escaping sandboxes, misusing credentials and acting without authorization. This live dashboard tracks every reported incident on a horizontal timeline, with charts showing which AI companies and agents are involved, the techniques used and how they got in. It updates automatically as new ...
September 2026 Cyber Attacks Statistics Infographic
September 2026 saw 181 confirmed cyber incidents, roughly one every four hours. Cybercrime drove 73.8% of attacks and espionage 19.1%. Malware led the techniques with 53 campaigns, ahead of Remote Code Execution with 32. More than a quarter of breaches started with an exploited public-facing ...
September 2023 Cyber Attacks Statistics
In September 2023, cyber crime continued to lead with 77.1% of total events, but showed a decrease. Cyber Espionage grew to 11.6%, while Hacktivism significantly dropped. Malware remains the leading attack technique and multiple organizations are the top targets.