Cyber Threat Intelligence

CSSLTD Daily Report - 2026-06-11
60
Critical
21
Alerts
327
Ransomware Groups
11
CISA KEV
CRITICALZERO-DAY / RCE
[17] TheHackerNews
Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
TheHackerNews
[17] HelpNetSecurity
Oracle PeopleSoft servers under attack, Oracle pushes out-of-band security alert
HelpNetSecurityCVE-2026-35273
[15] TheHackerNews
Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now
TheHackerNewsCVE-2026-11645
[12] BleepingComputer
Microsoft patches Exchange Server zero-day exploited in attacks
BleepingComputer
[11] TheHackerNews
LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE
TheHackerNewsCVE-2026-42271
[11] ransomware.live/dragonforce
[RANSOMWARE] dragonforce leaked importservices.co.uk
ransomware.live/dragonforce
[11] ransomware.live/dragonforce
[RANSOMWARE] dragonforce leaked ukimportservices.com
ransomware.live/dragonforce
[11] ransomware.live/coinbasecartel
[RANSOMWARE] coinbasecartel leaked NGC Software
ransomware.live/coinbasecartel
[11] ransomware.live/thegentlemen
[RANSOMWARE] thegentlemen leaked Paltrack
ransomware.live/thegentlemen
[11] ransomware.live/dragonforce
[RANSOMWARE] dragonforce leaked Gruenberg Kelly Della
ransomware.live/dragonforce
CISA Known Exploited VulnerabilitiesLAST 14 DAYS
CVEProductScoreAction
CVE-2026-28318SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerab8Apply mitigations per vendor instruction
CVE-2026-0257Palo Alto Networks PAN-OS Authentication Bypass Vulnerabilit8Apply mitigations per vendor instruction
CVE-2026-11645Google Chromium V8 Out-of-Bounds Read and Write Vulnerabilit5Apply mitigations per vendor instruction
CVE-2026-7473Arista Extensible Operating System Incomplete Comparison wit5Apply mitigations per vendor instruction
CVE-2026-20245Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping 5Apply mitigations per vendor instruction
CVE-2026-42271BerriAI LiteLLM Command Injection Vulnerability - BerriAI Li5Apply mitigations per vendor instruction
CVE-2026-50751Check Point Security Gateway Improper Authentication Vulnera5Apply mitigations per vendor instruction
CVE-2026-45247Mirasvit Full Page Cache Warmer Deserialization of Untrusted5Apply mitigations per vendor instruction
CVE-2022-0492Linux Kernel Improper Authentication Vulnerability - Linux K5Apply mitigations per vendor instruction
CVE-2025-48595Android Framework Integer Overflow Vulnerability - Android F5Apply mitigations per vendor instruction
CVE-2024-21182Oracle WebLogic Server Unspecified Vulnerability - Oracle We5Apply mitigations per vendor instruction
Active Ransomware VictimsDLS MONITORING
lockbit3 (2016)
texline-global.com, fairfieldmemorial.org, inphenix.com, craigwire.com, tuttoperlufficio.eu, abcapital.com.ph, lakelandchamber.com, robesoncoso.org
...and 2008 more
qilin (1921)
Erie Management Group, LLC, Town of Chatham, MASSACHUSETTS, ClearCare Periodontal & Implant Centre, Patterson Health Center, Marc Dorcel, Resource Corporation of America, Applied Technology Resources, Klima-Therm
...and 1913 more
akira (1519)
TSG Enterprises, Manhattan Broadcasting, Pipestone, ATF Aerospace, French Engineering, Nafco, Tax & Accounting Plus, DesignSourceCT
...and 1511 more
play (1265)
One Source Associates, Cortez Resources, Accounting Resource Group, The Rubber Resources, Lambda Energy Resources, The Supply Room Companies & Citron WorkSpaces, Milk Source, Grupo MH
...and 1257 more
clop (1254)
JAGGEDPEAK.COM, APTEAN.COM, OUTSOURCELOGISTICS.COM, JPWEST.COM, WORKFORCESOFTWARE.COM, INTELLINUM.COM, IBIZSOFTINC.COM, WORLEY.COM
...and 1246 more
lockbit2 (1002)
arcelormittal.h..., liceu.barcelon, liceu.barcelona, meritresources, meritresources...., royalporcelain...., datalit.it, oak-brook.org
...and 994 more
ransomhub (842)
www.hexosys.com, www.townofbourne.com, www.obrienavocats.qc.ca, www.confabca.com, headcount.com, bisindustries.com, primesourcestaffing.com, sautech.edu
...and 834 more
incransom (824)
bayviewci.org, WellLife Network Inc., Pennsylvania Office of Attorney General, Darlington EMS, Mecanizados y Montajes Aeronáuticos (mymgroup.es), MTCI, morgancountyga.gov, meridenct.gov
...and 816 more
alphv (731)
James Group, ResultsCX | The result of many unknown breaches?, Petrus Resources Ltd, ANDFLA SRL, The Source, SAED International, TraCS Florida FSU, Vertex Resource Group
...and 723 more
dragonforce (571)
importservices.co.uk, ukimportservices.com, Gruenberg Kelly Della, sphvalue.com, Advanced Rehabilitation Technology, Advanced Rehabilitation Technology (ART), Encompass, Aegis Project Controls
...and 563 more
bianlian (552)
Encompass Technologies, Northern Minerals Limited, Aspire Rural Health System, Saunders and Saunders, Legal Aid Society of Salt Lake, Medical Associates of Brevard, Star Shuttle Inc., Kellerhals Ferguson Kroblin PLLC
...and 544 more
blackbasta (523)
snatt.it, celo.com, memc.com, atlasoil.com, theshootingwarehouse.com, imperialtrading.com, kohlwholesale.com, thirdstreetbrewhouse.com carolinabeveragegroup.com
...and 515 more
medusa (517)
Macildowie Associates, Expert E-commerce GmbH, Philip Laney & Jolly, Prosolit, Resource Corporation of America, Cooperativa Esercenti Farmacia Scrl, LA VOIE EXPRESS, TEAM GROUP
...and 509 more
safepay (490)
bootstransport.ca, briwaycarriers.com, gsglobalresources.com, 47club.jp, wachtmann.eu, camaravalencia.com, ridgefield.org, ingrammicro.com
...and 482 more
thegentlemen (478)
Paltrack, KlearNow.AI, Empty, FESCO Adecco, Internal Medicine, Instituut voor de Nederlandse, DATAMATIC, Arcelik
...and 470 more
8base (455)
S L B TRANSIT INC, Shirasaki, Wasserkraft Volk AG, ASMFC: Atlantic States Marine Fisheries Commission, UNIFER, Sems and Specials Incorporated, Employ Milwaukee, socadis
...and 447 more
lynx (410)
Engine Power Source, www.mcphillamysgold.com, miltonfl.org, www.braemac.com, vanteceurope.com, trailridgeenergy, www.simmonsboardman.com, Bizcom Electronics
...and 402 more
everest (365)
First Priority Group, Pureform Radiology Center, Straight Line Logistics, Tsunami Tsolutions, Atlas Air, Stellium, Accela, Streebo
...and 357 more
conti (351)
Lifetech Resources, Arcese, Manitoulin Transport (Trucking/supply chain company), Critical Content, Alliance Steel, LCRD, The Contact Company, Central Restaurant Products
...and 343 more
dispossessor (344)
inphenix.com, modestogov.com, www.mgrc.com, www.stginternational.com, www.tclchinesetheatres.com, insidesource.com, sinopecthc.com, arcessex.org
...and 336 more
Security NewsTHREAT INTEL
[9] TheHackerNews
Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues
TheHackerNews
[9] TheHackerNews
Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer
TheHackerNews
[8] TheHackerNews
Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
TheHackerNewsCVE-2026-25089
[8] TheHackerNews
Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code
TheHackerNewsCVE-2026-44963
[8] TheHackerNews
⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More
TheHackerNews
[7] TheHackerNews
CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog
TheHackerNewsCVE-2026-28318
[7] TheHackerNews
Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available
TheHackerNewsCVE-2026-20245
[7] SecurityWeek
Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks
SecurityWeekCVE-2026-35273
[7] KrebsOnSecurity
Who Runs the Ransomware Group ‘The Gentlemen?’
KrebsOnSecurity
[7] KrebsOnSecurity
Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
KrebsOnSecurity
Priority CVEs to Patch
CVEMentionsPriority
CVE-2026-202453CRITICAL
CVE-2026-352732HIGH
CVE-2026-116452HIGH
CVE-2026-422712HIGH
CVE-2026-283182HIGH
CVE-2026-50272HIGH
CVE-2026-507512HIGH
CVE-2026-33001MEDIUM
CVE-2026-250891MEDIUM
CVE-2026-449631MEDIUM