MalwareObserver (@MalwareObserver) header
MalwareObserver (@MalwareObserver) profile picture

MalwareObserver

@MalwareObserver

🔍 The eye on cyber threats. Aggregating malware campaigns, vulnerability disclosures, threat intel, breach reports, and security research. Signal. Not noise.

Joined July 2017
  • Tweets681
  • Following96
  • Followers29
1Media
Photo by MalwareObserver (@MalwareObserver)
🐛 VULNERABILITIES (CVSS 7.5) CVE-2026-84428: — severity important — Red Hat Security Data (JSON) access.redhat.com/hydra/rest… #CVE #ZeroDay #PatchManagement
2
36
🐛 VULNERABILITIES Google Patches 6th Chrome Zero-Day of 2026 — Security Week securityweek.com/google-patc… #ZeroDay #PatchManagement #Vulnerability
Google Patches 6th Chrome Zero-Day of 2026

Google Patches 6th Chrome Zero-Day of 2026

Google’s Chrome 152 security update resolves 12 vulnerabilities, including a high-severity type confusion flaw in the V8 engine.

securityweek.com
26
🐛 VULNERABILITIES VMware Workstation and Fusion Updates Patch Critical Vulnerability — Security Week securityweek.com/vmware-work… #PatchManagement #Vulnerability #CVE

VMware Workstation and Fusion Updates Patch Critical Vulnerability

The flaws could allow attackers with administrative access to a virtual machine to execute code on the host system.

securityweek.com
15
⚔️ ATTACKS Google warns of new Chrome zero-day flaw exploited in attacks — BleepingComputer bleepingcomputer.com/news/se… #InfoSec #CyberAttack #ThreatIntel

Google warns of new Chrome zero-day flaw exploited in attacks

Google has updated the Chrome browser to address an actively exploited high-severity zero-day flaw in the V8 engine and 11 other vulnerabilities.

bleepingcomputer.com
24
🐛 VULNERABILITIES Google patches actively exploited Chrome zero-day (CVE-2026-85046) — Help Net Security helpnetsecurity.com/2026/09/… #Vulnerability #CVE #ZeroDay
Google patches actively exploited Chrome zero-day (CVE-2026-85046) - Help Net Security

Google patches actively exploited Chrome zero-day (CVE-2026-85046) - Help Net Security

Google has patched 12 vulnerabilities affecting its popular Chrome browser, among them CVE-2026-85046, which has been exploited in the wild.

helpnetsecurity.com
42
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-85616](github.com/grokability/snipe…)... github.com/grokability/snipe… #PatchManagement #Vulnerability #CVE
FMCS Bypass on Checkout-Acceptance Report Actions (Cross-Company Delete + Reminder Send)

FMCS Bypass on Checkout-Acceptance Report Actions (Cross-Company Delete + Reminder Send)

When Full Multiple Company Support (FMCS) was enabled, two checkout-acceptance report actions read the legacy scalar `users.company_id` column to decide whether the caller was allowed to touch a sp...

github.com
21
💰 RANSOMWARE Kyber: L3HARRIS - L3Harris is a global aerospace and defense technology innovator that provides mission-critical solutions for government, — Ransomware Victims (CTI) [Onion link: kyblogtz6k3jtxnjjvluee5ec4g3…] #Ransomware...
128
🔓 BREACHES Have i been pwned? - Manchester Airports Group - 8,728,451 breached accounts — Data Leaks (CTI) haveibeenpwned.com/Breach/Ma… #CyberAttack #DataBreach #Privacy
Have I Been Pwned: Manchester Airports Group Data Breach

Have I Been Pwned: Manchester Airports Group Data Breach

In August 2026, Manchester Airports Group (MAG) disclosed a data breach impacting their services. The incident was later claimed by the FulcrumSec hacking group, who subsequently published email...

haveibeenpwned.com
23
🐛 VULNERABILITIES (CVSS 8.1) CVE-2026-84504: — severity important — Red Hat Security Data (JSON) access.redhat.com/hydra/rest… #Vulnerability #CVE #ZeroDay
25
🔓 BREACHES Have i been pwned? - Carhartt - 12,933,413 breached accounts — Data Leaks (CTI) haveibeenpwned.com/Breach/Ca… #DataBreach #Privacy #DataSecurity
Have I Been Pwned: Carhartt Data Breach

Have I Been Pwned: Carhartt Data Breach

In August 2026, clothing retailer Carhartt was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly obtained from the company including 12.9M...

haveibeenpwned.com
15
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-82690](github.com/dxz0069/WAVLINK-W…... github.com/dxz0069/WAVLINK-W… #CVE #ZeroDay #PatchManagement
GitHub - dxz0069/iot-overflow: submit

GitHub - dxz0069/iot-overflow: submit

submit . Contribute to dxz0069/iot-overflow development by creating an account on GitHub.

github.com
40
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-82691](github.com/dxz0069/WAVLINK-W…... github.com/dxz0069/WAVLINK-W… #ZeroDay #PatchManagement #V...
GitHub - dxz0069/iot-overflow: submit

GitHub - dxz0069/iot-overflow: submit

submit . Contribute to dxz0069/iot-overflow development by creating an account on GitHub.

github.com
35
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-82797](github.com/Samsung/rlottie/p…) Uncontrolled Recursion vulnerabilit... github.com/Samsung/rlottie/p… #PatchManagement #Vulnerability #CVE
Cap shape-group nesting depth during parsing (limit to 32) by mmaciola · Pull Request #603 ·...

Cap shape-group nesting depth during parsing (limit to 32) by mmaciola · Pull Request #603 ·...

Reuses the existing kMaxModelTreeDepth limit (previously only enforced post-parse) inside parseGroupObject, skipping deeper "it" content instead of recursing further. Prevents unb...

github.com
31
🦠 MALWARE CTI Now: ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions ift.tt/1LfB... ift.tt/1LfBZiq #Malware #ThreatIntel #CyberCrime
19
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-71029](oracle.com/security-alerts/c…) Vulnerability in the He... oracle.com/security-alerts/c… #Vulnerability #CVE #ZeroDay
34
💰 RANSOMWARE Loki: Credit Freedom & Restoration — Ransomware Victims (CTI) [Onion link: dzkxxcsbrg7bwnlwwer563yuxd5p…] #Ransomware #DataBreach #IncidentResponse
173
🔓 BREACHES Have i been pwned? - RingCentral - 1,596,490 breached accounts — Data Leaks (CTI) haveibeenpwned.com/Breach/Ri… #Privacy #DataSecurity #CyberAttack
Have I Been Pwned: RingCentral Data Breach

Have I Been Pwned: RingCentral Data Breach

In July 2026, the cloud-based business communications platform RingCentral was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they claimed was...

haveibeenpwned.com
31
🔓 BREACHES Have i been pwned? - Oz Hair and Beauty - 1,988,331 breached accounts — Data Leaks (CTI) haveibeenpwned.com/Breach/Oz… #DataSecurity #CyberAttack #DataBreach
Have I Been Pwned: Oz Hair and Beauty Data Breach

Have I Been Pwned: Oz Hair and Beauty Data Breach

In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack. The group subsequently published data allegedly obtained from the company, which included...

haveibeenpwned.com
27
🔓 BREACHES McKesson discloses breach after ShinyHunters claims patient data theft — BleepingComputer bleepingcomputer.com/news/se… #CyberAttack #DataBreach #Privacy
McKesson discloses breach after ShinyHunters claims patient data theft

McKesson discloses breach after ShinyHunters claims patient data theft

Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters...

bleepingcomputer.com
64
🔓 BREACHES Darkfeed News: 🚨 **New Threat Intelligence Alert!** **Israeli National Security Intelligence Archive Leaked on Da... t.me/DarkfeedNews/5252 #DataBreach #Privacy #DataSecurity
DARKFEED

DARKFEED

🚨 New Threat Intelligence Alert! Israeli National Security Intelligence Archive Leaked on Darknet Tag: Data Breach AI Risk Level: 10/10

t.me
19
Load more