CTI Workbench
LIVE OPERATIONS
Breaches & Malware Command Center Fiserv Threat Intelligence
Real-Time Breach Incident Matrix, Exploited CVE Correlation & Adversary Attribution
Category Focus:
Breach Incident Matrix (9 Active Records)
Last Sync: Just nowSorted By: latestDate (desc)
| No | Breaches & Malware | Breach Date | IOCs | TTPs | CVEs | Detections | Technology | Industry | Actors | Source & Article |
|---|---|---|---|---|---|---|---|---|---|---|
| 1 |  SourTrade (In-Browser Bun PE Assembly)Social Engineering • Malvertising & In-Browser Splicing | 25 Jul 26 | 186 | 142 | 1 | 8 | Bun Runtime | Financial | SourTrade Cluster | |
| 2 |  LockBit 3.0 Core Banking ExtortionRansomware • Zero-Day Exploit & Compromised VPN | 24 Jul 26 | 412 | 289 | 3 | 19 | Windows Server | Financial | LockBit Supporter Group | |
| 3 |  Entra ID OAuth Consent Abuse & Token TheftSaaS & OAuth • SaaS Application Consent Phishing | 22 Jul 26 | 94 | 68 | 2 | 12 | Azure AD | Financial | Storm-0875 | |
| 4 |  Progress ShareFile RCE & Data ExfiltrationVulnerabilities • Unauthenticated Remote Code Execution | 20 Jul 26 | 310 | 185 | 4 | 15 | Progress ShareFile | Financial | Cl0p Ransomware Gang | |
| 5 |  DPRK Lazarus Group Infiltrates Global Financial & Crypto Clearing Gateway ($1.5B)Financial Theft & Crypto Hijacking • Supply Chain Malicious Package & LinkedIn Phishing | 13 Aug 26 | 310 | 142 | 3 | 38 | Financial SWIFT | Financial | DPRK State Cyber Cluster (Lazarus / RGB) | |
| 6 |  ShinyHunters Claims Theft of 560M Ticketmaster & Santander Cloud RecordsSaaS & OAuth • Un-MFA'd Enterprise Cloud Credential Scraping | 12 Aug 26 | 185 | 76 | 1 | 22 | Snowflake Cloud Data Warehouse | Financial | ShinyHunters | |
| 7 |  CL0P Exploits Enterprise MFT Zero-Days in Mass Banking ExtortionVulnerabilities • Zero-Day SQL Injection & Web Shell Injection | 11 Aug 26 | 520 | 215 | 4 | 42 | MOVEit Transfer MFT | Financial Services | CL0P Ransomware Group (TA505) | |
| 8 |  7 States' Water Systems Hit by Cyberattacks Likely Tied to IranCritical Infrastructure & OT • Public-Facing OT SCADA Exploit & Default Passwords | 01 Aug 26 | 68 | 54 | 2 | 24 | Unitronics PLC | Utilities | CyberAv3ngers / Iranian State Threat Group | |
| 9 |  OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central AsiaCyber-Espionage • Memory Injected Plugins & Shell Launching | 01 Aug 26 | 49 | 62 | 2 | 33 | Windows (Endpoint OS) | Government | OctLurk Cluster |
LIVE OSINT FEED
[--:--:--]RansomHub infrastructure detected actively scanning public repositories for secrets.[--:--:--]New leak: 14k internal developer credentials tied to corporate git repos posted on BreachForums.[--:--:--]OSINT Warning: Known ShinyHunters OAuth app redirect domains resurfacing via dynamic DNS.[--:--:--]Active exploit attempting to abuse Salesforce Experience Cloud Aura endpoints detected on multiple enterprise portals.[--:--:--]AI Security Alert: Abnormal volume of OpenAI API token requests from hijacked cloud GPU instances.[--:--:--]Threat group UNC6780 (Team PCP) observed pushing poisoned NPM package updates.[--:--:--]GitHub Breach Alert: Actor selling access to compromised corporate developer repositories.[--:--:--]RansomHub infrastructure detected actively scanning public repositories for secrets.[--:--:--]New leak: 14k internal developer credentials tied to corporate git repos posted on BreachForums.[--:--:--]OSINT Warning: Known ShinyHunters OAuth app redirect domains resurfacing via dynamic DNS.[--:--:--]Active exploit attempting to abuse Salesforce Experience Cloud Aura endpoints detected on multiple enterprise portals.[--:--:--]AI Security Alert: Abnormal volume of OpenAI API token requests from hijacked cloud GPU instances.[--:--:--]Threat group UNC6780 (Team PCP) observed pushing poisoned NPM package updates.[--:--:--]GitHub Breach Alert: Actor selling access to compromised corporate developer repositories.[--:--:--]RansomHub infrastructure detected actively scanning public repositories for secrets.[--:--:--]New leak: 14k internal developer credentials tied to corporate git repos posted on BreachForums.[--:--:--]OSINT Warning: Known ShinyHunters OAuth app redirect domains resurfacing via dynamic DNS.[--:--:--]Active exploit attempting to abuse Salesforce Experience Cloud Aura endpoints detected on multiple enterprise portals.[--:--:--]AI Security Alert: Abnormal volume of OpenAI API token requests from hijacked cloud GPU instances.[--:--:--]Threat group UNC6780 (Team PCP) observed pushing poisoned NPM package updates.[--:--:--]GitHub Breach Alert: Actor selling access to compromised corporate developer repositories.