Grafana Cloud — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• PCPJack Malware Targets TeamPCP Victims for Credential Theft

  The newly discovered PCPJack malware framework is actively targeting cloud environments to steal credentials while removing remnants of the TeamPCP cybercrime group. This worm exploits exposed services such as Docker,…

  11 articles · Updated May 7, 2026
• Critical Grafana SCIM Vulnerability Allows Privilege Escalation

  Grafana Labs has issued critical patches for a severe vulnerability, CVE-2025-41115, affecting Grafana Enterprise versions 12.0.0 to 12.2.1. The flaw in the SCIM provisioning feature could enable attackers to escalate…

  6 articles · Updated November 24, 2025
• Critical Grafana SCIM Vulnerability Allows Privilege Escalation

  Grafana Labs has issued critical patches for a severe vulnerability (CVE-2025-41115) in its SCIM provisioning feature, which could enable attackers to escalate privileges or impersonate users. The flaw affects Grafana…

  6 articles · Updated November 21, 2025

Recent Intelligence Reports

• Cloud Credential Worm 'PCPJack' Targets TeamPCP Victims — Technadu · May 8, 2026
• Grafana Flags Maximum — Thecyberexpress · November 24, 2025
• Critical Grafana Flaw Lets Attackers Escalate Privileges — Gbhackers · November 21, 2025

Related Entities