> ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
[AUTHOR: Lawrence Abrams]
[DATE: 25/09/2026 20:57]
[LANGUAGE: EN]
The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability. [...]