2026-06-19: CISA adds actively exploited Splunk vulnerability to its KEV catalog days after disclosure

Show Notes - 2026-06-19

Stories Covered

• June 19, 2026
• Today:
• Splunk Enterprise Authentication Bypass (CVE-2026-20253) [Critical Alerts]
• FortiBleed: 74,000 Fortinet Devices Compromised [Critical Alerts]
• F5 NGINX Critical Remote Code Execution Flaws [Critical Alerts]
• INC Ransomware: 830 Victims Since 2023 [Ransomware & Extortion]
• DragonForce Abuses Microsoft Teams Relays to Hide Backdoor Traffic [Ransomware & Extortion]
• The Gentlemen Ransomware: Multiple EDR Killers in Active Development [Ransomware & Extortion]
• Operation Endgame Disrupts SocGholish Infrastructure [Ransomware & Extortion]
• HCRG Care Group Notifies Patients 16 Months After Medusa Ransomware Attack [Ransomware & Extortion]
• HHS Settles with Spencer Gifts Health Plan for $450K After Ransomware Investigation [Ransomware & Extortion]
• Klue Supply Chain Attack Hits Cybersecurity Firms [Business & Infrastructure Threats]
• ShapedPlugin WordPress Supply Chain Attack [Business & Infrastructure Threats]
• AutoJack: AI Agent Framework RCE via Localhost Trust Boundary [Business & Infrastructure Threats]
• Microsoft 365 Backup Gaps Require Third-Party Solutions [Business & Infrastructure Threats]
• Rockwell Automation FactoryTalk Historian Authentication Bypass [Vulnerability Disclosures]
• Industrial Control System Vulnerabilities [Vulnerability Disclosures]
• Medical Device Bluetooth Vulnerabilities [Vulnerability Disclosures]
• Apple Beats Studio Buds Microphone Eavesdropping Flaw [Vulnerability Disclosures]
• Unpatchable iPhone SecureROM Exploit for A12/A13 Chips [Vulnerability Disclosures]
• Microsoft June 2026 Vulnerabilities [Vulnerability Disclosures]
• Windows Server 2016 Security Update Failures Fixed [Windows / AD Security]

CVEs Referenced

CVE-2023-3519, CVE-2023-48788, CVE-2023-52271, CVE-2024-57727, CVE-2025-1055, CVE-2025-13036, CVE-2025-20700, CVE-2025-20701, CVE-2025-20702, CVE-2025-36539, CVE-2025-44019, CVE-2025-5777, CVE-2025-61155, CVE-2026-10275, CVE-2026-12087, CVE-2026-12390, CVE-2026-20253, CVE-2026-32174, CVE-2026-32208, CVE-2026-40624, CVE-2026-42014, CVE-2026-42055, CVE-2026-42530, CVE-2026-42895, CVE-2026-42945, CVE-2026-43966, CVE-2026-44967, CVE-2026-47633, CVE-2026-47646, CVE-2026-4827, CVE-2026-48914, CVE-2026-50034, CVE-2026-52866, CVE-2026-53689, CVE-2026-6865, CVE-2026-8805, CVE-2026-8806, CVE-2026-9669

Indicators of Compromise

IP Addresses: 37.0.2.1

Read the full brief