Related Threat Clusters
-
Critical Grafana Vulnerabilities Enable Remote Code Execution Attacks
Grafana Labs has issued urgent security updates for version 12.4.2 to address two critical vulnerabilities that could allow attackers to achieve full remote code execution (RCE) and execute denial-of-service (DoS)…
3 articles · Updated March 30, 2026 -
Critical RCE Vulnerability in Craft CMS (CVE-2026-31857) Exposed
A Remote Code Execution vulnerability (CVE-2026-31857) has been identified in Craft CMS versions prior to 5.9.9 and 4.17.4. The flaw exists in the BaseElementSelectConditionRule::getElementIds() method, which improperly…
2 articles · Updated April 12, 2026 -
GreyNoise Report Reveals Early Warning Signals for Edge Device Vulnerabilities
GreyNoise Intelligence has released a report indicating that spikes in malicious activity often precede the disclosure of new vulnerabilities in edge devices. The study tracked 147.8 million sessions over 103 days,…
13 articles · Updated April 20, 2026 -
GrafanaGhost Vulnerability Enables Silent Data Exfiltration via AI
A critical vulnerability named GrafanaGhost has been identified in the Grafana observability platform, allowing attackers to exfiltrate sensitive data without user interaction or authentication. Discovered by Noma…
5 articles · Updated April 7, 2026 -
Critical RabbitMQ Vulnerabilities Enable Broker Takeover via OAuth Secrets
Miggo Security discovered two critical vulnerabilities in RabbitMQ, a widely used open-source message broker. The flaws, CVE-2026-57219 and CVE-2026-57221, were present since early 2024 and allow unauthenticated…
6 articles · Updated July 13, 2026 -
Critical Vulnerabilities Found in Traefik and Grafana Require Immediate Patching
Multiple vulnerabilities have been identified in Traefik and Grafana, allowing attackers to spoof identities and escalate privileges. CVE-2026-54763, with a CVSS score of 8.8, affects Traefik's handling of…
2 articles · Updated August 18, 2026 -
Critical Cross-Tenant Vulnerabilities Found in Neocloud Infrastructure
SemiAnalysis has released a security report detailing critical cross-tenant vulnerabilities in Neocloud, discovered during the ClusterMAX 3 testing phase over four months. The report identified multiple instances of…
3 articles · Updated August 30, 2026 -
GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code Extension
On May 20, 2026, GitHub confirmed a significant security breach involving a poisoned Visual Studio Code (VS Code) extension that compromised an employee's device. The attack, attributed to the TeamPCP hacking group,…
149 articles · Updated May 20, 2026 -
Zeroday Cloud Competition Awards $320,000 for 11 Zero-Day Vulnerabilities
The Zeroday Cloud hacking competition in London awarded $320,000 to researchers for demonstrating 11 critical zero-day vulnerabilities in cloud infrastructure components. Hosted by Wiz Research in collaboration with…
2 articles · Updated December 17, 2025 -
Miggo Security Unveils Miggo Pulse for Predictive Threat Mitigation
Miggo Security has launched Miggo Pulse, a new platform designed to enhance cybersecurity by providing predictive exploit intelligence and closing the patch gap before vulnerabilities can be exploited. The platform…
3 articles · Updated April 30, 2026
Recent Intelligence Reports
- Neocloud Security Deep Dive Report: Alarming Infrastructure Configuration Errors, Cross ... — Weex · August 31, 2026
- SemiAnalysis Discovers Critical Security Vulnerabilities in Neocloud Infrastructure — Kucoin · August 30, 2026
- Multiple Vulnerabilities in Traefik and Grafana — Csa.Sg · August 18, 2026
- Full Broker Takeover No Login Required Miggo Discovers Critical Rabbitmq Vulnerabilities Putting Application Data At Risk — www.miggo.io · July 15, 2026
- GitHub breach traced to poisoned VS Code extension — Cryptonews · May 21, 2026
- Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt — Thehackernews · May 17, 2026
- Miggo Security Launches Miggo Pulse: The First End-to — Sg.Finance.Yahoo · April 29, 2026
- Link — edge.prnewswire.com · April 20, 2026