1. Executive summary OpenClaw versions prior to 2026.5.18 contain an authorization bypass vulnerability (CVE-2026-53821) in the Gateway WebSocket control plane. The Gateway
1. Executive summary The Iran-linked threat actor "Handala" claims to have compromised California Water Service (Cal Water), exfiltrating approximately 5GB of data including
1. Executive summary The threat actor group "ShinyHunters" claims to have compromised over 100 organizations, including the University of Nottingham, by exploiting CVE-2026-
1. Executive summary Threat actor UNC6240 (attributed publicly to "ShinyHunters") is actively exploiting CVE-2026-35273, a critical remote code execution vulnerability (CVSS 9.
1. Executive summary Threat actors are actively exploiting CVE-2026-5027, a high-severity (CVSS 8.8) path traversal vulnerability in the AI development platform Langflow,
1. Executive summary Threat actors are actively exploiting CVE-2026-10520, a maximum-severity (CVSS 10.0) OS command injection vulnerability in Ivanti Sentry secure mobile
1. Executive summary A native Windows URI handler (search:) contains an unpatched NTLM credential leakage vulnerability functionally identical to the recently patched Snipping Tool flaw (CVE-
1. Executive summary The source code for 'Miasma', a credential-stealing supply chain worm previously targeting Red Hat and Microsoft ecosystems, was deliberately published
1. Executive summary The ShinyHunters extortion group claims to have compromised over 100 organizations by exploiting a "gadget chain" of legacy and zero-day
1. Executive summary Microsoft has released security updates addressing CVE-2026-42897, a high-severity Cross-Site Scripting (XSS) vulnerability in Microsoft Exchange Server that is
1. Executive summary ServiceNow has confirmed a security incident wherein threat actors exploited an unauthenticated access flaw in a specific API endpoint to query data from
Issuer: Adverse Trace Date issued: 2026-06-09 Version: 1.0 1. Executive summary The ransomware group "shinyhunters" has claimed responsibility for a data