Account required
Sign in to view threat intelligence
CTI data is restricted to registered users. Create a free account to browse the dashboard, then upgrade to a paid plan to unlock event details and IOCs.
Cyber Threat Intelligence
Daily snapshot
Daily brief 17 May 2026
Kazu Actor Strikes Healthcare, Government; NGINX Zero-Day Exploited
47 critical data exposures logged, with Kazu targeting health and government sectors globally. NGINX CVE-2026-42945 exploited in the wild. Grafana GitHub token breach disclosed.
Events
0
In current view
Critical exposure
0
Last 24 hours
0
vs previous 24h
Distinct actors
0
In current view
By attack category · 9
Data Exposure
0
Ransomware
0
Access Brokerage
0
DDoS
0
Web Defacement
0
Malware Ops
0
Vulnerability
0
Threat Alert
0
Cyber Operation
0
Top victim countries
No country data in this view.
Subscriber-only
CTI brief — 2026-05-17
The CTI dashboard tracks dark-web disclosures, ransomware claims, data leaks and active threat actors. Full event list, threat-actor profiles and historical archive are available to subscribers.
Events
showing 0
Category
Title
Actor
Country
Date
- Data BreachAlleged data breach of PT Perikanan IndonesiaCatNatXploitIndonesia17 May
- RansomwareRecambios Generales del Automóvil Dosocho S.L. falls victim to M3RX RansomwareM3RXSpain17 May
- Data BreachAlleged data breach of Gites de FranceChimeraZFrance17 May
- RansomwareIngelan falls victim to DragonForce ransomwareDragonForceSpain17 May
- RansomwarePlan.com falls victim to DragonForce ransomwareDragonForceUnited Kingdom17 May
- Data BreachKuwaiti Ministry of Defense0cx00iqKuwait17 May
- RansomwareGrupo 55 Correduría de Seguros falls victim to M3RX RansomwareM3RXSpain17 May
- RansomwareSOFT Inc. falls victim to M3RX RansomwareM3RXUnited States17 May
- Data LeakAlleged data leak of Lampung Employee DocumentshxcvxIndonesia17 May
- RansomwareDon Bosco Technical Institute, Makati falls victim to NOVA RansomwareNovaPhilippines17 May
- RansomwareProduttori Sementi Bologna falls victim to M3RX RansomwareM3RXItaly17 May
- Data LeakAlleged data leak of Canada Beauty SalonMeowlCanada17 May
- DDoSRipperSec targets the website of Hillel Yaffe Medical CenterRipperSecIsrael17 May
- Data BreachSouth Africa – Official National Data and Insights Portal - 154 GBKazuSouth Korea17 May
- Data BreachHealth Time Spain Data breach - 2.2mKazuSpain17 May
- Data BreachHealthDaq ireland - 431 GBKazuIreland17 May
- Data BreachMyVete Breach - 5.5m usersKazuArgentina17 May
- Data BreachCarefficient US 165k personal info and passwordsattacker_companyUnited States17 May
- Data Breach7 million pieces of data from Indian casinostitlelIndia17 May
- Data BreachKRYBIT RaaSKRYBITDark Web17 May
- Data Breachssgmce.ac.in1877 TeamIndia17 May
- Web DefacementDEFACER INDONESIAN TEAM targets the website of aqua-wallaby-793653.hostingersite.comDEFACER INDONESIAN TEAM—17 May
- Data Breachyalelodges.com1877 TeamUnited States17 May
- Data Breach48 WebSites Backdoors , AdminNeffex THe BlackHatDark Web17 May
- Data Breachwhif.ioDeathWatchSouth Korea17 May
- Data Breachinstaforex.comDeathWatchUnited Kingdom17 May
- Access BrokerageAlleged shell access to Dr. Rashel PakistanNeffex THe BlackHatPakistan17 May
- RansomwareAlleged Data Breach of Holy Name of Jesus Catholic ChurchCMD OrganizationUnited States17 May
- Data BreachAlleged Data Breach of DjaboojustscyprusFrance17 May
- Access BrokerageAlleged shell access to Lomas PlazaNeffex THe BlackHatMexico17 May
- Access BrokerageAlleged shell access to Fluxus ComunicacionesNeffex THe BlackHatMexico17 May
- Access BrokerageAlleged shell access to El Rincón de la LechuzaNeffex THe BlackHatMexico17 May
- Web DefacementHax.or targets the website of Pengadilan Agama LasusuaHax.orIndonesia17 May
- Web DefacementHax.or targets the website of Educação Sobre DrogasHax.orBrazil17 May
- Web DefacementHax.or targets the website of Pengadilan Tinggi Tata Usaha NegaraHax.orIndonesia17 May
- Web DefacementHax.or targets the website of Primeira Igreja Batista de Rio BonitoHax.orBrazil17 May
- Access BrokerageAlleged shell access to Rubicón MéxicoNeffex THe BlackHatMexico17 May
- Access BrokerageAlleged shell access to Tubos MonterreyNeffex THe BlackHatMexico17 May
- Threat AlertOpsShadowStrike claims to target IsraelOpsShadowStrikeIsrael17 May
- Data BreachGauteng Provincial Government Breach - 3.8 TBKazuSouth Africa17 May
- Data BreachNatclar (S.G. Natclar S.A.C.) Data breach - 1.8 TBKazuPeru17 May
- Access BrokerageAlleged access to Bank HapoalimThe BlackH4t MD-GhostIsrael17 May
- RansomwareURG Co., Ltd. falls victim to NOVA RansomwareNovaSouth Korea17 May
- Data BreachAlleged Data Breach of Nativa TecDatavortexPeru17 May
- DDoSRipperSec targets the website of SaharRipperSecIsrael17 May
- Data LeakAlleged data leak of Iranian Driving School1877TeamIran17 May
- DDoSZ-BL4CX-H4T.ID targets the website of Directorate General of Intellectual Property (DGIP)Z-BL4CX-H4T.IDIndonesia17 May
- Web DefacementDEFACER INDONESIAN TEAM targets the website of PureAINavDEFACER INDONESIAN TEAM—17 May
- Web DefacementTEGAL CYBER TEAM targets the website of Kedawung SetiaTEGAL CYBER TEAMIndonesia17 May
- Web DefacementTEGAL CYBER TEAM targets the website of SMK Muhammadiyah MajenangTEGAL CYBER TEAMIndonesia17 May
- Access BrokerageAlleged Unauthorized Access to Industrial Vacuum-Pressure Pumping Station HMI in LatviaZ-PENTEST ALLIANCELatvia17 May
- Access BrokerageAlleged unauthorized access to a Thai cable manufacturerALFANETThailand17 May
- Web DefacementChronus leaks targets the website of Secretaría de Administración y Finanzas de la Ciudad de MéxicoChronus leaksMexico17 May
- Data BreachAlleged data breach of SIM-ASN Buol Kabupaten Governmentruiixh4xor_Indonesia17 May
- RansomwareMetaval Australia falls victim to INC Ransom ransomwareINC RANSOMAustralia17 May
- Web DefacementHax.or targets the website of Bully BusterHax.orIndonesia17 May
- Data LeakAlleged data leak of Georgian CitizenshipMeowlGeorgia17 May
- Web DefacementTEGAL CYBER TEAM targets the website of BuyXavierTEGAL CYBER TEAMIndia17 May
- DDoSZ-BL4CX-H4T.ID targets the website of Keuskupan ManadoZ-BL4CX-H4T.IDIndonesia17 May
- Data BreachAlleged data breach of MatferlinemacaroniSpain17 May
- DDoSUnit 313 targets the website of MossadUniT 313Israel17 May
- Web DefacementTEGAL CYBER TEAM targets the website of the tourism confucius institute udayana universityTEGAL CYBER TEAMIndonesia17 May
- DDoSNoName targets the website of BoylesportsNoName057(16)Ireland17 May
- DDoSNoName targets the website of Austrian Federal Ministry of JusticeNoName057(16)Austria17 May
- DDoSNoName targets the website of Lower Austrian state parliamentNoName057(16)Austria17 May
- Threat AlertALFANET claims to target NATO countriesALFANET—17 May
- DDoSNoName targets the website of Energie GrazNoName057(16)Austria17 May
- DDoSNoName targets the website of PROJECT LOGISTICSNoName057(16)Austria17 May
- DDoSNoName targets the website of Center for Secure Information TechnologiesNoName057(16)Austria17 May
- DDoSBD Anonymous targets the website of Association of Engineers, Architects and Graduates in Technological Sciences in IsraelBD AnonymousIsrael17 May
- DDoSNoName targets the website of University of Music and Performing Arts ViennaNoName057(16)Austria17 May
- RansomwarePNSB Insurance Brokers Sdn Bhd falls victim to Qilin ransomwareQilinMalaysia17 May
- RansomwareAJJ Echave Turri falls victim to Qilin ransomwareQilinChile17 May
- DDoSNoName targets the website of RIEDEL CommunicationsNoName057(16)Germany17 May
- DDoSNoName targets the website of Vierklee Wettbüro GesmbHNoName057(16)Austria17 May
- DDoSNoName targets the website of Point of Contact Ukraine WiederaufbauNoName057(16)Austria17 May
- DDoSNoName targets the website of Österreichische Beteiligungs AGNoName057(16)Austria17 May
- DDoSNoName targets the website of Federal Ministry of Women, Science and ResearchNoName057(16)Austria17 May
- DDoSNoName targets the website of People's Party of CarinthiaNoName057(16)Austria17 May
- DDoSNoName targets the website of oesterreich.gv.atNoName057(16)Austria17 May
- DDoSNoName targets the website of The Vienna Institute for International Economic StudiesNoName057(16)Austria17 May
- DDoSNoName targets the website of Austrian Institute of Economic ResearchNoName057(16)Austria17 May
- DDoSNoName targets the website of Fine Arts ViennaNoName057(16)Austria17 May
- DDoSNoName targets the website of Medical University of ViennaNoName057(16)Austria17 May
- Access BrokerageAlleged unauthorized access to Security Service of UkraineALFANETUkraine17 May
- Web DefacementDeepCore Network targets the website of Cikawung Village Government PortalDeepCore NetworkIndonesia17 May
- Web DefacementPhiserXman targets the website of Marsh Junior High SchoolPhiserXmanUnited States17 May
- Threat AlertCyber Islamic Resistance claims to target TEDi Classes for Education and Innovation LimitedCyber Islamic Resistance—17 May
- DDoS313 Team targets the website of Regions Bank313 TeamUnited States17 May
- Data BreachAlleged data breach of Yellow SlatezSeniorIndia17 May
- Data BreachAlleged Customer Data Breach of Okinawa Tourist ServicesexybrokerJapan17 May
- DDoSDark Storm Team targets the website of ANKŌDark Storm TeamAustria17 May
- DDoSZxS3C targets the website of Marsun Public Company LimitedZxS3CThailand17 May
- DDoSDark storm team targets the website of Austrian Government Portal of tender searchDark Storm TeamAustria17 May
- Data BreachJapan Tourist Service - (600k+ Customers Info) - otsinternational.jpsexybrokerJapan17 May
- DDoSDark Storm Team targets the website of KunstHausWienDark Storm TeamAustria17 May
- DDoSDark Storm Team targets the website of House of Music in ViennaDark Storm TeamAustria17 May
- DDoSDark Storm Team targets the website of TSS Telco Sales Services GmbHDark Storm TeamAustria17 May
- Data BreachSPAIN | SMALL INSURANCE COMPANYnotjoukinSpain17 May
- Access BrokerageAlleged unauthorized access to Bangladesh Atomic Energy Commission Industrial SystemsInfrastructure Destruction SquadBangladesh17 May
- Threat AlertYemeni Cyber Security Agency 711 claims to target Ansar Allah leaders and affiliated individualsYemeni Cyber Security Agency 711Yemen17 May
- Data LeakAlleged data leak of Spain PassportKYCMyASSSpain17 May
- Data LeakAlleged data leak of United Arab Emirates ID cardsKYCMyASSUnited Arab Emirates17 May
- Data LeakAlleged data leak of Malaysian ID cardsKYCMyASSMalaysia17 May
- Data BreachAlleged data breach of Zenseana Resort & SpaAnonymous SwitzerlandThailand17 May
- Data BreachAlleged data breach of an unidentified organization in IsraelAnonymous Sana'aIsrael17 May
- DDoS313 Team targets the website of Visible313 TeamUnited States17 May
- Web DefacementJLG NETWORK targets the website of CRECI-PBJLG NETWORKBrazil17 May
- Data BreachAlleged data breach of Land Surveyors Board of Kenyacc5abKenya17 May
- RansomwareParle Agro Pvt Ltd falls victim to LAMASHTU ransomwareLAMASHTUIndia17 May
- Data LeakAlleged leak of Iranian gaming account credentialsorg1877Iran17 May
- Web DefacementNullsec KH targets the website of AajakoMenuNullsec KHNepal17 May
- Access BrokerageAlleged unauthorized access to unidentified surveillance camera in UkraineZ-PENTEST ALLIANCEUkraine17 May
- Data BreachAlleged data sale of Microsoft 365CHSUnited States17 May
- RansomwareClínica Avellaneda Medical Center falls victim to Qilin ransomwareQilinArgentina17 May
- DDoSKeymous Plus targets the website of National Portal of MoroccoKeymous PlusMorocco17 May
- RansomwareRamar Foods falls victim to TERMITE ransomwareTERMITEUnited States17 May
- Data LeakAlleged data leak of VSPhoneAIDEN | AI developer—17 May
- Web DefacementRakyat Digital Crew targets the website of Bully BustersRakyat Digital Crew—17 May
- Access BrokerageAlleged unauthorized access to unidentified surveillance camera in Israel——17 May
- Data BreachAlleged data breach of Norautoshitanus—17 May
- Web DefacementDEFACER INDONESIAN TEAM targets the website of AI345DEFACER INDONESIAN TEAM—17 May
- Malware OpsAlleged sale of an IOS + Android exploitCitizen—17 May
- Access BrokerageAlleged Unauthorized access to an unidentified industrial systemInfrastructure Destruction Squad—17 May
- Data BreachAlleged data sale of TotalEnergiesThe BlackH4t MD-Ghost—17 May
- Data BreachAlleged data breach of Bank PermataJAX7—17 May
- Access BrokerageAlleged sale of web shell access to Washington InstituteBabayo Error System—17 May
- Data BreachAlleged data breach of LSP TematikaKyyzo—17 May
- Data BreachAlleged data leak of SMP Negeri 3 KediriINDRAMAYU CHAOS SYSTEM—17 May
- Access BrokerageAlleged sale of Web shell access to Sympatia ConsultoresBABAYO EROR SYSTEM—17 May
- Access BrokerageAlleged sale of WebShell Access to AdalsolutionBABAYO EROR SYSTEM—17 May
- Access BrokerageAlleged sale of WebShell Access to ADAL CONTRACTORS SACBABAYO EROR SYSTEM—17 May
- Access BrokerageAlleged sale of Web shell access to Globe Rover TravelBABAYO EROR SYSTEM—17 May
- Access BrokerageAlleged sale of Web shell access to SOBRSUREBABAYO EROR SYSTEMAustralia17 May
- Data LeakAlleged data leak of BlackSexFinderanimalUnited States17 May
- Data BreachProWellnessswag—17 May
- Data BreachAlleged data sale of Ministry of Tourism and AntiquitiesReveskyEgypt17 May
- Web DefacementMr. BDKR28 targets the website of Multicolor AdvertisingMr. BDKR28—17 May
- Data BreachAlleged data breach of CoinbaseOxOUnited States17 May
- Access BrokerageAlleged Unauthorized Access to satatv.meDarkMafiaXIndia17 May
No events match your filters.
Page 1 of 1
Active threat actors
click any actor to filter the list aboveNo active actors in this view.