Happy to once again support LE partners in disruption of the AudiA6 service, allegedly responsible for $389 million USD in cryptocurrency money laundering:
justice.gov/usao-edpa/pr...
secretservice.gov/newsroom/rel...
www.europol.europa.eu/media-press/...
While our detection is on the lowish side due to multiple Ivanti Sentry instances not reachable in our scans (blocklisted?), if you have not patched now you are most likely compromised.
Vuln IP data shared in Vulnerable HTTP reporting tagged 'cve-2026-10520' www.shadowserver.org/what-we-do/n...
www.shadowserver.org
DESCRIPTION LAST UPDATED: 2026-06-10 DEFAULT SEVERITY LEVEL: CRITICAL This report identifies hosts that have the Hypertext Transfer Protocol (HTTP) service running on some port that may have a vulnera...
Heads up! New report going out daily: the Initial Access Broker Report shadowserver.org/what-we-do/n... on compromised hosts likely under control of IABs
Data thanks to collaboration with anonymous researchers &
SpyCloud - thank you!
Check your free daily reports from us!
We are observing a large amount of Ivanti Sentry CVE-2026-10520 exploitation attempts based on the public PoC today. We see 19 vulnerable instances in our own scans, with at least 2 backdoored (thanks to Saudi NCA for the tip!). However, all remaining likely compromised too.
The Shadowserver Foundation
Compromised IP data shared in our Compromised Website reporting tagged as 'ivanti-sentry,injected-code,backdoor'. See: www.shadowserver.org/what-we-do/n...
Advisory/patch: hub.ivanti.com/s/article/Se...
Map has a typo in the date, should of course be 2026-06-10
The Shadowserver Foundation
www.shadowserver.org
www.shadowserver.org
The Shadowserver Foundation
The Shadowserver Foundation
The Shadowserver Foundation
www.shadowserver.org
This report is a list of all the websites we (or our collaborative partners) have been able to identify and verify to be compromised.
Shadowserver is excited to share its cybersecurity insights and actionable recommendations in a report aimed at helping ECOWAS stakeholders make West Africa more secure!
Read the report & accompanying fact sheets in English, French & Portuguese at www.shadowserver.org/news/shadows...