-
Security incident 2 Nov 2026· 07:06 UTC
CloudSEK exposes Doorway botnet: compromised routers and cameras built into a proxy fleet
CloudSEK found two open directories with about 41 GB of operational data from the Doorway botnet. The operators scanned for and exploited routers, IP cameras and enterprise Java servers to build an unauthorised proxy fleet.
-
Security incident 1 Nov 2026· 03:13 UTC Original report: 28 Oct 2026
ReliaQuest: attackers use residential proxies near the victim to slip past login checks
ReliaQuest reports that social-engineering attacks on SaaS accounts now route logins and device registrations through residential proxies located near the victim, which weakens location-based alerts.
-
Security incident 30 Oct 2026· 21:19 UTC Original report: 15 Oct 2026
skynox7: 143 hijacked devices turned into Pawns.app residential proxies
GreyNoise research links the skynox7 actor to a proxyjacking campaign that installed Pawns.app on 143 hijacked edge devices in 34 countries.