21 days ago
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
What's happening
SignalsMonitor is following this as a security story. BleepingComputer is the outlet attached so far. The first report grouped here was at 25 Sept 2026, 20:57 UTC. The headline in use is “ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability. [...
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by BleepingComputer
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
Reported by 1 outlet
- BleepingComputer