🕵️ RESEARCH & DEEP DIVES
- CRPx0 ransomware operation offers ClickFix-based RaaS
CRPx0 is operating a ransomware-as-a-service platform that uses ClickFix for delivery.
- CRPx0 targets organizations with ransomware, data theft, and cryptocurrency theft.
- The operation encrypts files with the .CRPx0 extension and steals documents, credentials, wallet seed phrases, and clipboard cryptocurrency payments.
- Its RaaS platform offers affiliates Windows EXE, DLL, and VBS ClickFix stagers.
- ClickFix lures victims into executing disguised commands through fake verification pages or documents. 📄 Source: ransom-isac.org · 📎 Coverage: kelacyber.com · 👁 via @GossiTheDog@cyberplace.social
🔓 CVEs & KEV
-
CVE-2026-15369 — CVSS 9.8 — Custom User Registration Fields for WooCommerce through 2.2.3 - Unauthenticated Pr...
-
CVE-2026-81636 — CVSS 8.7 — Query-complexity limit bypass via first/last pagination arguments in AshGraph...
-
CVE-2026-80223 — CVSS 7.1 — Cross-tenant subscription disclosure in AshGraphql authorizes notifications i...
-
CVE-2026-78693 — CVSS 6.9 — Incomplete redaction re-attaches the original error path in AshGraphql, leaki...
-
CVE-2026-81633 — CVSS 6.9 — Unhandled KeyError in AshGraphql relay node resolution crashes queries via an...