Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Apr 20, 2023

0 new incidents, 1 with updates.

Updated

  • ClosedCriticalPatched

    3CX DesktopApp supply-chain attack (trojanized signed builds)

    Signed 3CX DesktopApp builds for Windows and macOS shipped with embedded malicious code. Mandiant traced it to a North Korea-linked actor (UNC4736) who first got in through a trojanized X_TRADER install from Trading Technologies: a supply-chain attack caused by another supply-chain attack.

    3CX DesktopApp (Electron)Closed Apr 20, 2023