Splunk Zero-Day, INC Ransomware, and DragonForce's Teams Exploit

The Daily CVE Update · Jun 19, 2026 · 8m

Splunk Zero-Day, INC Ransomware, and DragonForce’s Teams Exploit

CISA has confirmed active exploitation of CVE-2026-20253, a critical Splunk Enterprise vulnerability allowing unauthenticated file manipulation. Meanwhile, INC ransomware has claimed over 830 victims since 2023, exploiting unpatched Fortinet and Citrix vulnerabilities from that same year. DragonForce operators are routing command-and-control traffic through Microsoft Teams relay infrastructure, making malicious activity indistinguishable from legitimate collaboration traffic. This episode examines three distinct threats that…