Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild

How TeamPCP are leveraging stolen secrets from the recent supply chain attacks to compromise cloud environments...

CVE-2026-32794

creationtimestamp| type| source ---|---|--- 2026-03-30 22:26:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3micpglbkr62m 2026-03-31 00:00:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micunskdpe27...

CVE-2026-33986

creationtimestamp| type| source ---|---|--- 2026-03-30 22:20:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micp3op2br2m 2026-03-30 23:20:23+00:00| published-proof-of-concept| Telegram/dTdXmSClQuUutduSI7B7lq8U0lWyZCa4SY-4SfXv6kqarNA 2026-03-31 00:13:06+00:00| seen|...

CVE-2023-34092

creationtimestamp| type| source ---|---|--- 2026-03-30 21:03:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mickqn34q622...

CVE-2026-5147

creationtimestamp| type| source ---|---|--- 2026-03-30 21:00:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micklfjq5o2i 2026-03-30 21:21:40+00:00| seen| Telegram/3uob0OgNXCPySF5ZgiHiYbQAvLr6RIUarGC854yFCH2MAgQ...

CVE-2026-29954

creationtimestamp| type| source ---|---|--- 2026-03-30 19:34:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micfswovlq2r...

CVE-2026-30077

creationtimestamp| type| source ---|---|--- 2026-03-30 19:21:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micf2eefta2m...

OpenClaw: `browser.request` still allows `POST /reset-profile` through the `operator.write` surface

Fixed in OpenClaw 2026.3.24, the current shipping release. Title browser.request still allows POST /reset-profile through the operator.write surface in OpenClaw v2026.3.22 after GHSA-vmhq-cqm9-6p7q Severity Assessment High CWE: - CWE-863: Incorrect Authorization Proposed CVSS v3.1: - 8.1...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the browser.request function on the operator.write surface. An attacker can disrupt browser operations, terminate active browser sessions, and move the local...

CVE-2026-35653

creationtimestamp| type| source ---|---|--- 2026-03-30 19:05:11+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-xp9r-prpg-373r 2026-04-10 19:30:36+00:00| published-proof-of-concept| Telegram/-hUuw8aTFVWSQYPf3qEKqcT3Zmmt4K4bisrN5sFAqL07rbc 2026-04-10 19:31:00+00:00|...

CVE-2026-35665

creationtimestamp| type| source ---|---|--- 2026-03-30 18:32:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-w6m8-cqvj-pg5v 2026-04-10 18:30:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5xduwea22t...

CVE-2026-34526

creationtimestamp| type| source ---|---|--- 2026-03-30 18:20:28+00:00| published-proof-of-concept| https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-wm7j-m6jm-8797 2026-03-30 18:20:28+00:00| published-proof-of-concept|...

CVE-2026-21627

creationtimestamp| type| source ---|---|--- 2026-03-30 17:49:10+00:00| seen| https://bsky.app/profile/mysites.guru/post/3mic7vp46v526 2026-03-30 19:49:04+00:00| seen| https://bsky.app/profile/mysites.guru/post/3micgmbotup2x 2026-04-13 19:49:04+00:00| seen|...

CVE-2026-34522

creationtimestamp| type| source ---|---|--- 2026-03-30 17:36:08+00:00| published-proof-of-concept| https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-xvww-xhx6-22pf 2026-04-02 19:26:54+00:00| seen| Telegram/Wnflj9AVRNFcbzmT8RV9QbE39gd8mxBym86BZleqlS4uOZ8 2026-04-03 04:01:11+00:00...

FHIR Validator HTTP service has SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft

Summary The FHIR Validator HTTP service exposes an unauthenticated /loadIG endpoint that makes outbound HTTP requests to attacker-controlled URLs. Combined with a startsWith URL prefix matching flaw in the credential provider ManagedWebAccessUtils.getServer, an attacker can steal authentication...

CVE-2026-25645

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0381/ 2026-03-31 14:45:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mieg3xyw3g26...

CVE-2026-3779

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0382/ 2026-03-31 14:45:09+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mieg3rhqh224 2026-04-01 02:24:41+00:00| seen|...

CVE-2026-3774

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0382/ 2026-03-31 14:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mieg3rhqh224...

CVE-2026-3991

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0378/ 2026-03-30 19:18:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micevqbsxx27 2026-03-30 20:50:07+00:00| seen|...

CVE-2026-28526

creationtimestamp| type| source ---|---|--- 2026-03-30 16:58:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic52zm2uf25...