ShinyHunters Compromises Clop Leak Site Through Unpatched Grav CMS Path Traversal

The ShinyHunters threat group successfully breached the server hosting Clop's data leak portal by exploiting an unauthenticated path traversal flaw in…

If your organization runs Grav CMS, apply patches immediately. Review server access logs for path traversal exploitation attempts. Check if you've been a Clop or ShinyHunters target previously and increase breach monitoring vigilance.