Cordyceps is a vulnerability tracked by ThreatCluster, appearing in 3 threat clusters built from 6 intelligence report mentions.
Cordyceps is a vulnerability tracked across 3 threat clusters and 6 intelligence report mentions on ThreatCluster. First observed June 23, 2026; most recent activity June 23, 2026.
A newly identified supply chain vulnerability named 'Cordyceps' affects CI/CD workflows across major platforms, allowing unauthenticated attackers to exploit Git-based repositories. Novee's research flagged 654…
Zafran Labs identified four vulnerabilities in Dify, an open-source AI platform used by over one million applications, including critical flaws allowing cross-tenant data leakage. Two vulnerabilities, CVE-2026-41947 and…
Microsoft's DART team discovered two distinct threat actors operating simultaneously within the same victim network, complicating incident response efforts. The investigation began with ransomware activity linked to…
Cordyceps is a vulnerability tracked by ThreatCluster, appearing in 3 threat clusters built from 6 intelligence report mentions.
The most recent intelligence report mentioning Cordyceps on ThreatCluster is dated June 23, 2026.
Across ThreatCluster reporting, Cordyceps most frequently co-occurs with Dropping Elephant, Data Breach, Malware, Ransomware, Supply Chain Attack, among 12 tracked related entities.
The most significant recent cluster is “Cordyceps Vulnerability Exposes Thousands of Code Repositories to Attacks” (13 articles · Updated June 23, 2026). Cordyceps appears across 3 threat clusters in total, listed above with sources.
Cordyceps appears in 6 intelligence report mentions across 3 deduplicated threat clusters, aggregated from 17,000+ monitored sources.