Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Mar 29, 2023

1 new incident, 0 with updates.

Started

  • ClosedPatched

    3CX DesktopApp supply-chain attack (trojanized signed builds)

    Signed 3CX DesktopApp builds for Windows and macOS shipped with embedded malicious code. Mandiant traced it to a North Korea-linked actor (UNC4736) who first got in through a trojanized X_TRADER install from Trading Technologies: a supply-chain attack caused by another supply-chain attack.

    3CX DesktopApp (Electron)Closed Apr 20, 2023