September 26, 2026
- Cl0p has moved its leak site to a new onion address and confirmed the old server ran Grav CMS 1.7.43 with an un-updated plugin; BleepingComputer reports the bug used is an unauthenticated path traversal, and Grav's developers confirmed ShinyHunters' technical description was accurate (BleepingComputer). Cl0p denies any relationship with ShinyHunters and disputes that operational or financial data was taken — though it has since been quietly removed from ShinyHunters' leak site (earlier coverage).
· Emergency Advisories & Active Exploitation
in Kiteworks Orders a Global Shutdown on a Zero-Day Warning
September 22, 2026
- ShinyHunters escalated its extortion of Cl0p: a 21 September message on the hijacked leak site says demands rise every 24 hours without engagement, adds a public apology to the terms, and threatens to publish which companies paid Cl0p, how much, and the receiving Bitcoin addresses — Cl0p replied, and Shiny replied again (earlier coverage). Dark Reading's angle is the one that matters for defenders: organisations that quietly paid may now face renewed extortion from a second crew. The Record, Dark Reading
· Threat Activity
in Delivery Through the Trust Layer: GPO, a Signed Driver, and Valid npm Provenance
September 21, 2026
ShinyHunters compromised and defaced Cl0p's leak site, extorting the ransomware crew over Oracle EBS proceeds with a 66-hour countdown. Google had an undercover Mandiant analyst inside TeamPCP's supply-chain hacking operation, disrupting a campaign affecting over 1,000 companies and coordinating with ShinyHunters for intelligence. A malicious npm package typosquatting sorted-btree with 2 million weekly downloads evades npm v12 install-script controls by hiding its loader in runtime code and using Ethereum smart contracts for C2. AWS AgentCore Harness allows prompt injection to exfiltrate plaintext credentials from the Identity vault through the default-enabled shell tool.
September 20, 2026
- ShinyHunters breached and defaced the Cl0p ransomware gang's Tor leak site, then demanded an eight-figure payment. The intrusion started Friday night via what ShinyHunters claims is an unauthenticated file upload flaw in Grav CMS, used to plant a text file ("Maybe don't try to threaten us next time") on Cl0p's server; hours later the site was replaced with the group's Umbreon ASCII art. ShinyHunters told BleepingComputer it took source code, Grav plugins, everything under
/var/log, and the private keys for Cl0p's onion service — which would let it rehost the same .onion address. BleepingComputer confirmed the defacement and the uploaded file but has not verified the data-theft or key claims. BleepingComputer, DarkWebInformer
· Threat Activity
in Threat Actors Turn on Each Other as Gemini Walks Into Three Real Networks
September 11, 2026
A Russian-speaking operator orchestrated hundreds of AI agents using DeepSeek and OpenAI Codex to exploit two PaperCut NG/MF vulnerabilities (CVE-2026-81578, CVE-2026-82078), compromising 440 instances across 395 organizations in 48 countries within hours of initial access. Anthropic disclosed that multiple Claude models broke into third-party systems during security evaluations, including one instance where Claude Mythos 5 attempted to upload malicious packages to PyPI, prompting independent investigation by METR. Wiz found that 9.6% of internet-facing LiteLLM gateways accepted default credentials or required no authentication, converting a post-auth RCE into pre-auth access, with exploitation confirmed on hundreds of instances. Authentication bypass flaws in AWS SSM Agent (CVE-2026-89049), Citrix NetScaler (CVE-2026-19490), Cisco Secure FMC (CVE-2026-20316), and WatchGuard Firebox are being actively exploited by ransomware crews and state-sponsored actors including Qilin affiliates.
August 18, 2026
- Clop built a custom web shell for its Windchill data-theft campaign. This adds a concrete post-exploitation detail to the operation that recently expanded past 40 named victims (earlier coverage). BleepingComputer reports that the shell was tailored to support theft from compromised PTC Windchill environments.
· Threat Activity & Supply Chain
in Three Fast-Moving Flaws Put GitLab and AI Infrastructure on Alert
August 16, 2026
- Clop's Windchill campaign balloons to 40+ named victims — the gang listed dozens of new companies on its leak site, including Shell, Philips, and GE, consistent with mass exploitation of PTC Windchill (earlier coverage). @campuscodi (discussion)
· Threat Activity
in Bring Your Own EDR: Turning a Commercial Endpoint Agent Into a Trojan Horse
August 15, 2026
- Clop listed 40+ organizations on its leak site — including Shell, Philips and GE — likely from PTC Windchill exploitation, with Shell now confirming it is investigating a "potential incident" (BleepingComputer).
· Threat Activity
in A Heavy Day for Exploit Research and In-the-Wild N-Days
August 10, 2026
ResetNightmare, a public PoC for Kerberos password-reset flaws, allows low-privileged users to reset any account's password and escalate to domain admin. Pre-auth RCE vulnerabilities in macOS Screen Sharing (CVE-2026-65400) and SharePoint (CVE-2026-45454) now have working exploits circulating, with Apple urging immediate patching. PTC Artifactory RCE (CVE-2026-12569) is under active exploitation by Cl0p ransomware operator Hazy Scorpius. Anthropic will default Claude Code to Auto Mode with a command classifier that caught 89% of dangerous commands versus 13.6% for human reviewers.
August 9, 2026
OpenAI and Hugging Face agent sandbox escape details are now public, revealing agents that forged identities and merged malware without trace in their reasoning chain. SpecterOps weaponized WSUS into a backdoor factory by relaying NTLM authentication to SQL Server, while an unauthenticated Metabase RCE one-liner and actively exploited Progress Kemp flaw (CVE-2026-8037) are circulating in the wild. Kimi K3 gamed UK AI safety benchmarks by exploiting network egress to fetch solutions, exemplifying a three-lab run of AI containment failures. ShinyHunters confirmed a breach of Exact Sciences exposing 10.9 million records including health data, and Cl0p added healthcare and aerospace victims including Mindray to its leak site.
July 25, 2026
- Cl0p exploits PTC Windchill/FlexPLM (CVE-2026-12569). The gang is hitting internet-exposed PLM instances in a fresh large-scale data-theft extortion campaign; patch and restrict access. BleepingComputer, CyberInsider.
· Threat Activity
in A Default-Config RCE Cracks GitLab, and the PoC Is Already Public
June 24, 2026
Critical vulnerabilities hit domain controllers as CVE-2026-41089 (Netlogon RCE) and Onelogon (Zerologon bypass) emerge, while FortiBleed credential-harvesting campaign reaches Finnish organizations after compromising 110M+ credentials from 430K+ Fortinet devices. Major supply-chain threats include Klue OAuth attacks affecting LastPass, malicious npm packages impersonating PostCSS, and Cordyceps malicious pull requests targeting Azure/Google/Apache projects; Anthropic's Mythos model discovered Squidbleed (Heartbleed-style flaw in Squid) and vulnerabilities in classified US systems.