Incidents

Name	Pub. date	Actors	Initial access	Impact	Type	Status
Mirai campaign targeting Ivanti products	May 7, 2024	❓ Unknown	1-day vulnerability	Resource hijacking	Campaign	Stub
LLMjacking via Laravel exploitation	May 6, 2024	❓ Unknown	1-day vulnerability	Resource hijacking	Incident	Stub
Utah “Bathroom Bill” open database	May 3, 2024	👀 None	Cloud native misconfig	Data exfiltration	Research	Stub
TargetCompany Abusing MSSQL Servers for Ransomware	May 2, 2024	TargetCompany	Password attackSoftware misconfig	RansomOp	Campaign	Finalized
MITRE breach via Ivanti Connect Secure	April 19, 2024	💡 UNC5221	1-day vulnerability	Data exfiltration	Incident	Stub
Kubernetes Clusters Targeted in OpenMetadata Exploits	April 17, 2024	❓ Unknown	1-day vulnerabilityExposed secret	Resource hijacking	Campaign	Finalized
Delinea breach	April 14, 2024	❓ Unknown	1-day vulnerability	Unknown	Incident	Stub
Sisense breach	April 11, 2024	❓ Unknown	Unknown	Data exfiltration	Incident	Finalized
RUBYCARP: Botnet Exploiting Vulnerabilities for Crypto	April 9, 2024	🎏 RUBYCARP	1-day vulnerabilityPassword attack	Denial of serviceResource hijacking	Campaign	Finalized
Microsoft exposed storage with credentials	April 9, 2024	👀 None	Cloud native misconfig	Resp. disclosure	Research	Stub
Muddled Libra campaigns (2024)	April 9, 2024	🐙 0ktapus			Campaign	Stub
Hugging Face cross-tenant access	April 4, 2024	👀 None	Cloud native misconfigWeb vulnerability	Resp. disclosure	Research	Finalized
Affirmed Networks breach	April 2, 2024	🌩️ Storm-0558	Unknown	Data exfiltration	Incident	Finalized
XZ Utils backdoor incident	March 29, 2024	❓ Unknown	Insider threat	Supply chain attack	Incident	Finalized
Agenda Ransomware Targets ESXi and vCenter Servers	March 26, 2024	📓 Agenda operator	Unknown	RansomOp	Campaign	Finalized
Top.gg repo compromise	March 25, 2024	❓ Unknown	End-user compromise	Supply chain attack	Incident	Stub
UNC5174 ScreenConnect and F5 BIG-IP exploitation	March 22, 2024	💡 UNC5174	1-day vulnerability	Data exfiltration	Campaign	Finalized
Fujitsu exposed bucket	March 21, 2024	👀 None	Cloud native misconfig	Resp. disclosure	Research	Stub
Widespread TeamCity exploitation (March ‘24)	March 19, 2024	❓ Unknown	1-day vulnerability	Resource hijackingRansomOp	Campaign	Stub
ShadowSyndicate aiohttp exploitation	March 15, 2024	🌒 ShadowSyndicate	1-day vulnerability	RansomOp	Campaign	Finalized
Meson Network cryptojacking campaign	March 11, 2024	❓ Unknown	1-day vulnerabilitySoftware misconfig	Resource hijacking	Campaign	Finalized
From writable bucket to credential theft	March 8, 2024	👀 None	Cloud native misconfig	Resp. disclosure	Research	Stub
Magnet Goblin campaign (2024)	March 8, 2024	👺 Magnet Goblin	1-day vulnerability	Unknown	Campaign	Stub
Redis, Hadoop, and Docker exploitation	March 6, 2024	❓ Unknown	Software misconfig1-day vulnerability	Resource hijacking	Campaign	Finalized
z0Miner targeting WebLogic servers	March 6, 2024	0️⃣ z0miner	1-day vulnerability	Resource hijacking	Campaign	Finalized
From social engineering to cryptocurrency theft	March 6, 2024	❓ Unknown	End-user compromise	Data exfiltration	Incident	Stub
From refresh token theft to global admin	February 23, 2024	👀 None	Unknown	Resp. disclosure	Research	Stub
Lucifer Botnet targeting Hadoop	February 22, 2024	😈 Lucifer operator	1-day vulnerabilitySoftware misconfig	Denial of serviceResource hijacking	Campaign	Finalized
US DOI PII exfiltration pentest	February 21, 2024	👀 None	Insider threat	Resp. disclosure	Research	Stub
S3 ransomware scam	February 21, 2024	❓ Unknown	Unknown	Data exfiltrationData destruction	Incident	Stub
Migo cryptominer targeting Redis	February 20, 2024	🏁 Migo operator	Software misconfig	Resource hijacking	Campaign	Finalized
SSH-Snake Confluence targeting campaign	February 20, 2024	❓ Unknown	1-day vulnerability	Resource hijacking	Campaign	Stub
WinStar exposed app database	February 18, 2024	👀 None	Software misconfig	Resp. disclosure	Research	Stub
Sliver deployment via Confluence vulnerability	February 15, 2024	❓ Unknown	1-day vulnerability	Resource hijacking	Campaign	Stub
BMW exposed cloud storage	February 14, 2024	👀 None	Cloud native misconfig	Resp. disclosure	Research	Stub
U.S. Internet exposed email server	February 14, 2024	👀 None	Software misconfig	Resp. disclosure	Research	Stub
CGI Federal incident	February 13, 2024	❓ Unknown	1-day vulnerability	Data exfiltration	Incident	Stub
Zenlayer exposed database	February 13, 2024	👀 None	Software misconfig	Resp. disclosure	Research	Stub
Würk exposed database	February 9, 2024	👀 None	Software misconfig	Resp. disclosure	Research	Stub
Juniper support portal exposure	February 9, 2024	👀 None	Software misconfig	Resp. disclosure	Research	Stub
C3Pool mining via Confluence vulnerability	February 8, 2024	❓ Unknown	1-day vulnerability	Resource hijacking	Campaign	Stub
Viamedis breach	February 8, 2024	❓ Unknown	End-user compromise	Data exfiltration	Incident	Stub
Almerys breach	February 8, 2024	❓ Unknown	Unknown	Data exfiltration	Incident	Stub
Cryptojacking via Azure Batch	February 6, 2024	❓ Unknown	End-user compromise	Resource hijacking	Incident	Stub
Cloudflare incident following Okta breach	February 1, 2024	❓ Unknown	Supply chain vector	Data exfiltration	Incident	Stub
Commando Cat campaign	February 1, 2024	😼 Commando Cat	Software misconfig	Resource hijacking	Campaign	Finalized
Football Australia exposed cloud key in website	February 1, 2024	👀 None	Exposed secretCloud native misconfig	Resp. disclosure	Research	Stub
DangerDev SES abuse incident	January 31, 2024	❓ Unknown	Exposed secret	Resource hijacking	Incident	Stub
New Relic incident (November 2023)	January 31, 2024	❓ Unknown	End-user compromise	Data exfiltration	Incident	Stub
Mimic used by Trigona operators	January 28, 2024	📐 Trigona operator	Software misconfig1-day vulnerabilityPassword attack	RansomOp	Campaign	Finalized
Mercedes-Benz source code exposure	January 26, 2024	👀 None	Exposed secret	Resp. disclosure	Research	Finalized
ECS Fargate cryptojacking	January 19, 2024	❓ Unknown	Exposed secret	Resource hijacking	Campaign	Finalized
S3 data exfiltration	January 19, 2024	❓ Unknown	Exposed secret	Data exfiltration	Incident	Finalized
Microsoft email exfiltration by Nobelium	January 19, 2024	🐻 APT29	Password attack	Data exfiltration	Incident	Finalized
From ActiveMQ to Godzilla webshell	January 18, 2024	❓ Unknown	1-day vulnerability	Resource hijacking	Campaign	Stub
Mimo cryptomining campaign	January 18, 2024	📝 Mimo operator	1-day vulnerability	Resource hijackingRansomOp	Campaign	Stub
9hits Docker campaign	January 18, 2024	❓ Unknown	1-day vulnerability	Resource hijacking	Campaign	Stub
AndroxGh0st usage (2024)	January 16, 2024	❓ Unknown	1-day vulnerabilitySoftware misconfig	Resource hijacking	Campaign	Stub
S3 ransomware following long-term key exposure	January 11, 2024	❓ Unknown	Exposed secret	RansomOpData exfiltration	Incident	Stub
FBot toolkit targets cloud environments	January 11, 2024	❓ Unknown	Password attackWeb vulnerabilityFunctionality abuse	Resource hijacking	Campaign	Finalized
Dreambus campaign (2023)	January 11, 2024	🚌 Dreambus operator	Software misconfig1-day vulnerability	Resource hijacking	Campaign	Stub
Ivanti Connect Secure targeting campaign	January 10, 2024	💡 UNC5221	0-day vulnerability	Unknown	Campaign	Stub
Apache app cryptojacking campaign	January 10, 2024	❓ Unknown	1-day vulnerabilitySoftware misconfig	Resource hijacking	Campaign	Stub
RE#TURGENCE MSSQL Server RansomOp	January 10, 2024	❓ Unknown	Software misconfigPassword attack	RansomOp	Campaign	Finalized
Cyber Toufan Linux destruction	December 28, 2023	🍬 Cyber Toufan	Supply chain vector	Data exfiltrationData destruction	Campaign	Stub
Cloud lateral movement via Citrix cookie	December 15, 2023	❓ Unknown	End-user compromise	Data exfiltration	Incident	Stub
GambleForce SQL injection campaign	December 14, 2023	🎲 GambleForce	Web vulnerability1-day vulnerability	Data exfiltration	Campaign	Stub
APT29 TeamCity campaign	December 13, 2023	🐻 APT29	1-day vulnerability	Data exfiltration	Campaign	Stub
OAuth applications to deploy VMs for cryptomining	December 12, 2023	🌩️ Storm-1283	End-user compromise	Resource hijacking	Campaign	Stub
First Republic Bank incident	December 12, 2023	❓ Unknown	Insider threat	Data destruction	Incident	Stub
Krasue Thailand campaign	December 7, 2023	👻 Krasue operator	Unknown	Data exfiltration	Campaign	Stub
Package hijacking redteam op	December 6, 2023	👀 None	End-user compromise	Resp. disclosure	Research	Stub
GoTitan ActiveMQ campaign	November 28, 2023	💢 GoTitan operator	1-day vulnerability	Unknown	Campaign	Stub
LINE and NAVER Cloud incident	November 27, 2023	❓ Unknown	End-user compromise	Data exfiltration	Incident	Stub
Andariel exploiting Apache ActiveMQ	November 27, 2023	👿 Andariel	1-day vulnerability	Unknown	Campaign	Stub
Apache server Cryptojacking with Cobalt Strike	November 20, 2023	❓ Unknown	1-day vulnerability	Resource hijacking	Campaign	Finalized
Confluence targeting by C3RB3R	November 14, 2023	🧸 C3RB3R operator	1-day vulnerability	RansomOp	Campaign	Stub
OracleIV campaign	November 13, 2023	❓ Unknown	Software misconfig	Resource hijacking	Campaign	Stub
Sumologic incident	November 7, 2023	❓ Unknown	Unknown	Unknown	Incident	Stub
EleKtra-Leak	October 30, 2023	❓ Unknown	Exposed secret	Resource hijacking	Campaign	Stub
Okta support system supply chain attack	October 20, 2023	❓ Unknown	End-user compromise	Supply chain attack	Incident	Stub
Qubitstrike Crypto Mining and Rootkit Campaign	October 18, 2023	❓ Unknown	Software misconfig	Resource hijacking	Campaign	Finalized
Cloud tools imitation campaign	October 10, 2023	❓ Unknown	Supply chain vector	Unknown	Campaign	Stub
SQL Server to cloud lateral movement	October 3, 2023	❓ Unknown	Web vulnerability	Data exfiltration	Campaign	Stub
Darkbeam data exposure	October 2, 2023	👀 None	Software misconfig	None	Research	Stub
Prophet Spider campaign	September 20, 2023	🕷️ Prophet Spider			Campaign	Stub
Microsoft AI data exposure	September 18, 2023	👀 None	Software misconfig	Resp. disclosure	Research	Stub
AmberSquid campaign	September 18, 2023	🦑 AmberSquid	Supply chain vector	Resource hijacking	Campaign	Finalized
Peach Sandstorm Azure targeting	September 14, 2023	🍑 Peach Sandstorm	1-day vulnerability	Data exfiltration	Campaign	Finalized
Rollbar hack	September 13, 2023	❓ Unknown	End-user compromise	Data exfiltration	Incident	Stub
BlackCat Azure Storage Account RansomOp	September 13, 2023	🐈‍⬛ BlackCat	Unknown	RansomOp	Incident	Stub
Evil_MinIO campaign	September 4, 2023	❓ Unknown	1-day vulnerability	Unknown	Campaign	Stub
UNC4841 Barracuda ESG Campaign	August 29, 2023	💡 UNC4841	0-day vulnerability	Data exfiltration	Campaign	Stub
Retool hack	August 29, 2023	❓ Unknown	End-user compromise	Supply chain attack	Incident	Stub
Labrat GitLab campaign	August 17, 2023	🐀 Labrat operator	1-day vulnerability	Resource hijacking	Campaign	Stub
From PHP exploitation to AWS lateral movement	August 15, 2023	❓ Unknown	0-day vulnerability	Unknown	Incident	Stub
Scattered Spider Azure Run abuse	August 15, 2023	🐙 0ktapus	Unknown	Unknown	Campaign	Stub
Use of linPEAS for cloud enumeration	August 15, 2023	❓ Unknown			Incident	Stub
SugarCRM as initial access to AWS envs	August 10, 2023	❓ Unknown	1-day vulnerability		Campaign	Stub
P2PInfect campaign	July 31, 2023	🦠 P2PInfect	Software misconfig1-day vulnerability	Resource hijacking	Campaign	Finalized
Meow Jupyter Notebook campaign	July 31, 2023	😿 Meow	Software misconfig	Data destruction	Campaign	Stub
SkidMap targeting Redis	July 30, 2023	🗺️ SkidMap operator	Software misconfig	Unknown	Campaign	Stub
DepositFiles exposed config file	July 27, 2023	👀 None	Software misconfig	None	Research	Stub
JumpCloud supply chain attack	July 14, 2023	💰 TraderTraitor	End-user compromise	Supply chain attack	Incident	Stub
SilentBob cryptomining campaign	July 13, 2023	🔇 SilentBob 💣 TeamTNT	Software misconfig	Resource hijacking	Campaign	Finalized
Microsoft signing key compromise	July 11, 2023	🌩️ Storm-0558	End-user compromise	Supply chain attackData exfiltration	Incident	Finalized
ScarletEel campaign (July ‘23)	July 11, 2023	🐍 ScarletEel	Web vulnerabilitySoftware misconfig	Resource hijackingData exfiltrationDenial of service	Campaign	Finalized
PyLoose campaign	July 11, 2023	🧵 PyLoose operator	Software misconfig	Resource hijacking	Campaign	Stub
APT31 Rekoobe campaign	July 11, 2023	⚖️ APT31			Campaign	Stub
Storm-0558 phishing campaigns	July 11, 2023	🌩️ Storm-0558	End-user compromise	Unknown	Campaign	Stub
From web app exploitation to Chisel tunneling	June 5, 2023	❓ Unknown	1-day vulnerability	Unknown	Incident	Finalized
From PHP vuln to Sliver execution via cron	June 5, 2023	❓ Unknown	Web vulnerability	Unknown	Incident	Finalized
Cosmic Wolf cloud activity	June 5, 2023	🐢 SeaTurtle	Exposed secret	Unknown	Incident	Finalized
From WSO2 RCE to SSH lateral movement	June 5, 2023	❓ Unknown	1-day vulnerability	Unknown	Incident	Stub
Poisoned image to K8s to cloud	May 25, 2023	❓ Unknown	End-user compromise	None	Incident	Stub
8820 Gang targeting WebLogic	May 16, 2023	8️⃣ 8220 Gang	1-day vulnerability	Resource hijackingData exfiltration	Campaign	Finalized
SIM swapping to serial port abuse	May 16, 2023	🐙 0ktapus	End-user compromise	Unknown	Incident	Stub
Optimeyes data leak	May 9, 2023	👀 None	Software misconfig	Data exfiltration	Research	Stub
Capita data leak	May 5, 2023	👀 None	Cloud native misconfig	None	Research	Finalized
fsevents supply chain attack	April 27, 2023	👀 None	Dangling resource	Supply chain attack	Incident	Finalized
RBAC Buster	April 21, 2023	❓ Unknown	Cloud native misconfig	Resource hijacking		Stub
8220 Gang exploiting Log4Shell	April 21, 2023	8️⃣ 8220 Gang	1-day vulnerability	Resource hijacking	Campaign	Stub
Misconfigured firewall to cryptojacking botnet	April 18, 2023	❓ Unknown	Cloud native misconfigSoftware misconfig	Denial of walletResource hijacking	Incident	Stub
SIM-Swap to Data Leak on Dark Web	April 18, 2023	❓ Unknown	End-user compromise	Data exfiltrationData destruction	Incident	Stub
Trigona targeting MSSQL servers	April 17, 2023	📐 Trigona operator	Software misconfig1-day vulnerability	RansomOp	Campaign	Finalized
MuddyWater cloud destruction operation	April 7, 2023	💧 MuddyWater 🕶️ DarkBit	Unknown	Data destructionRansomOp	Incident	Finalized
3CX and Trading Technologies supply chain attack	March 29, 2023	💿 SmoothOperator	Unknown	Supply chain attack	Incident	Featured
ChinaZ campaigns	March 24, 2023	ChinaZ			Campaign	Stub
UNC3886 campaigns	March 16, 2023	💡 UNC3886			Campaign	Stub
GoBruteforcer campaign	March 10, 2023	🚦 GoBruteforcer operator	Password attack	Resource hijacking	Campaign	Finalized
Stealing the LIGHTSHOW	March 9, 2023	💡 UNC2970			Campaign	Stub
IceFire Aspera Faspex campaign	March 9, 2023	❓ Unknown	1-day vulnerability	RansomOp	Campaign	Stub
ScarletEel campaign (Feb ‘23)	February 28, 2023	🐍 ScarletEel	Web vulnerability	Resource hijackingData exfiltration	Campaign	Finalized
US military email server exposure	February 18, 2023	👀 None	Software misconfig	Resp. disclosure	Research	Stub
ESXiArgs ransomware campaign	February 3, 2023	❓ Unknown	1-day vulnerability	RansomOp	Campaign	Stub
HeadCrab campaign	February 1, 2023	🦀 HeadCrab operator	Software misconfig	Resource hijacking	Campaign	Stub
CircleCI incident	January 4, 2023	💰 TraderTraitor	End-user compromise	Supply chain attack	Incident	Finalized
Jupyter Notebook cred harvesting campaign	December 28, 2022	❓ Unknown	Software misconfigWeb vulnerability	Data exfiltration	Campaign	Finalized
Okta source code theft	December 21, 2022	❓ Unknown	Unknown	Data exfiltration	Incident	Stub
Redigo campaign	December 1, 2022	🍎 Redigo operator	1-day vulnerability	Unknown	Campaign	Stub
LastPass & GoTo incident	November 30, 2022	❓ Unknown	End-user compromise	Data exfiltration	Incident	Stub
WatchDog East-Asian CSP campaign	November 16, 2022	🐶 WatchDog			Campaign	Stub
Reuters leaky ElasticSearch DB	October 26, 2022	👀 None	Software misconfig	Data exfiltration	Research	Stub
Leaked long-lived AWS creds	October 7, 2022	❓ Unknown		None	Incident	Stub
Auth0 source code theft	September 26, 2022	❓ Unknown	Unknown	Data exfiltration	Incident	Stub
Fast Company incident	September 25, 2022	❓ Unknown	Software misconfig	DefacementData exfiltration	Incident	Finalized
Optus incident	September 21, 2022	❓ Unknown	API vulnerability	Data exfiltration	Incident	Finalized
“Kiss-A-Dog” campaign	September 1, 2022	🐶 WatchDog		Resource hijacking	Campaign	Finalized
“Redirection Roulette”	September 1, 2022	❓ Unknown	Unknown	Defacement	Campaign	Finalized
APT29 targeting Microsoft 365	August 22, 2022	🐻 APT29			Campaign	Stub
Microsoft credential exposure on GitHub	August 16, 2022	👀 None	Exposed secret	Resp. disclosure	Research	Stub
Twilio incident	August 8, 2022	🐙 0ktapus	End-user compromise	Supply chain attack	Incident	Finalized
8220 Gang targeting Confluence	July 7, 2022	8️⃣ 8220 Gang	1-day vulnerability	Resource hijacking	Campaign	Stub
DarkRadiation campaign	June 21, 2022	☢️ DarkRadiation operator	Unknown	RansomOp	Campaign	Stub
Spotting an attacker in GCP	June 9, 2022	❓ Unknown			Incident	Stub
UNC2903 campaigns	May 4, 2022	💡 UNC2903			Campaign	Stub
LemonDuck Docker campaign	April 21, 2022	🍋 LemonDuck			Campaign	Stub
GitHub & npm incident	April 15, 2022	❓ Unknown	End-user compromise	Supply chain attackData exfiltration	Incident	Finalized
Denonia campaign	April 6, 2022	❓ Unknown	Unknown	Resource hijacking	Campaign	Finalized
From CLI to console, chasing an attacker in AWS	April 5, 2022	❓ Unknown			Incident	Stub
Muhstick Redis campaign	March 28, 2022	🥢 Muhstik			Campaign	Stub
LAPSUS$ campaigns	March 22, 2022	🫗 LAPSUS$	End-user compromise	Data exfiltrationData destructionRansomOp	Campaign	Finalized
CoinStomp campaign	February 2, 2022	🪙 CoinStomp operator			Campaign	Stub
From S3 bucket to Jenkins credential dump	January 13, 2022	👀 None	Web vulnerabilityCloud native misconfig	Resp. disclosure	Research	Finalized
From code commit to production takeover	January 13, 2022	👀 None	End-user compromise	Resp. disclosure	Research	Finalized
Ivanti supply chain attack via compromised library	December 2, 2021	❓ Unknown	Supply chain vector	Supply chain attack	Incident	Stub
Tsunami targeting Jenkins and Weblogic	October 26, 2021	❓ Unknown	Software misconfig1-day vulnerability	Resource hijacking	Campaign	Stub
Abcbot Huawei Cloud targeting campaign	October 8, 2021	🔤 Abcbot operator	Cloud native misconfig	Resource hijacking	Campaign	Stub
Siloscape campaign	June 7, 2021	⛏️ Siloscape operator	1-day vulnerabilityWeb vulnerability	Unknown	Campaign	Stub
Codecov incident	April 15, 2021	❓ Unknown	Exposed secret	Supply chain attack	Incident	Featured
Gin Docker cryptojacking campaign	February 9, 2021	❓ Unknown	Software misconfig	Resource hijacking	Campaign	Stub
Multiple organizations vulnerable to dependency confusion	February 9, 2021	👀 None	Supply chain vector	None	Research	Stub
TeamTNT campaigns	February 3, 2021	💣 TeamTNT			Campaign	Stub
Dreambus campaign (2021)	January 22, 2021	🚌 Dreambus operator	1-day vulnerabilitySoftware misconfig	Resource hijacking	Campaign	Finalized
Solarigate: Solarwinds supply chain attack	December 13, 2020	🐻 APT29	Unknown	Data exfiltration	Campaign	Finalized
Loggerminer campaign	November 16, 2020	🔤 Abcbot operator		Resource hijacking	Campaign	Stub
Apple cloud key exposure	October 7, 2020	👀 None	Web vulnerability	None	Research	Stub
Cetus campaign	August 27, 2020	❓ Unknown	Software misconfig	Resource hijacking	Campaign	Stub
Doki cryptojacking campaign	July 28, 2020	⛵ Doki operator	Software misconfig	Resource hijacking	Campaign	Stub
Behind the scenes in the Expel SOC: Alert-to-fix in AWS	July 28, 2020	❓ Unknown	Unknown	Resource hijacking	Incident	Stub
Meow database server campaign	July 25, 2020	😿 Meow	Software misconfig	Data destruction	Campaign	Stub
BlueKai exposed database	June 19, 2020	👀 None	Software misconfig	Resp. disclosure	Research	Stub
Exim exploitation by Sandworm	May 28, 2020	🐛 Sandworm	1-day vulnerability		Campaign	Stub
Large-scale cryptomining attack against K8s clusters detected by Azure	April 8, 2020	❓ Unknown		Resource hijacking	Campaign	Stub
Kinsing campaign (2020)	January 16, 2020	👑 Kinsing operator	Software misconfig1-day vulnerability	Resource hijacking	Campaign	Stub
Ubiquiti incident	January 1, 2020	📄 Nickolas Sharp	Insider threat	RansomOp	Incident	Finalized
Graboid campaign	October 16, 2019	❓ Unknown	Software misconfig	Resource hijacking	Campaign	Stub
Imperva incident	October 10, 2019	❓ Unknown	Cloud native misconfig	Data exfiltration	Incident	Finalized
Webmin supply chain attack (2018)	August 15, 2019	❓ Unknown	Unknown	Supply chain attack	Incident	Stub
Capital One incident (March 2019)	July 19, 2019	📄 Paige Thompson	Cloud native misconfig	Data exfiltration	Incident	Featured
ngrok cryptojacking campaign	September 12, 2018	❓ Unknown	1-day vulnerability	Resource hijacking	Campaign	Stub
US DoD NIPRNet access via Atlassian SSRF	April 9, 2018	👀 None	1-day vulnerability	Resp. disclosure	Research	Stub
Operation Aurora	January 12, 2010	🌩️ Storm-0558	Unknown	Data exfiltration	Incident	Stub