← Back to Feed
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
September 25, 2026 · BleepingComputer · Severity: CRITICAL
The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability.
Key Takeaways
- According to BleepingComputer, this cybersecurity development warrants attention from teams monitoring the evolving threat landscape.
- Given the CRITICAL severity rating, organizations should prioritize remediation in their vulnerability management workflow.
- Security teams should review their exposure to this development and implement appropriate defensive controls.