June 2026 Security Briefing Highlights Tchap Compromise and Emerging Threats
Summary
Sysdig’s June 2026 briefing covers the confirmed compromise of France’s Tchap app, Novo Nordisk’s reported unauthorized access and FulcrumSec’s exfiltration claim, plus cloud attacks, AI misuse, GitHub workflow abuse and exploited vulnerabilities.
Key points
- DINUM and ANSSI confirmed Tchap was compromised. Attacker “misere” claimed theft of 13.5 GB of data from more than 73,000 accounts; access was reportedly gained through social engineering against one user.
- Novo Nordisk confirmed unauthorized access to a limited number of internal systems and sensitive information. FulcrumSec claimed it exfiltrated 1.3 TB and demanded $25 million; Novo Nordisk declined to pay.
- Sysdig researchers described an automated actor exploiting marimo CVE-2026-39987, escaping a container, and replaying a Kubernetes service account token to access cluster secrets.
- Sysdig reported attackers jailbreaking LLMs with capture-the-flag framing to generate CVE exploit code, with prompts appearing in model output and related logs.
- An attacker reportedly used a misconfigured, publicly exposed Ollama server to develop an automated offensive hacking tool; its intended use remained unclear.
- Researchers reported the first known exploitation of Langflow CVE-2026-55255 alongside CVE-2026-33017, noting the attacker prioritized the easier-to-use RCE despite its lower CVSS score.
- Other developments included the Cordyceps GitHub workflow abuse pattern, a supply-chain incident involving Klue integrations, and DirtyClone CVE-2026-43503, for which a working root exploit was reported.
Article Details
- Event Type
- June 2026 cybersecurity incidents involving confirmed compromises, claimed data theft and extortion, supply-chain activity, and reported exploitation of vulnerabilities.
- Impact
- DINUM and ANSSI confirmed that Tchap was compromised; the attacker using the alias “misere” claimed to have stolen 13.5 GB of data affecting more than 73,000 accounts. Novo Nordisk confirmed unauthorized access to a limited number of internal systems and sensitive information; FulcrumSec claimed to have exfiltrated 1.3 terabytes and demanded a $25 million ransom. The article also reports access to Kubernetes secrets, a supply-chain incident affecting Klue and some customers, and exploitation of vulnerabilities in marimo and Langflow. It reports a working DirtyClone root exploit as of June 25.
MITRE ATT&CK
T1068 · Exploitation for Privilege EscalationDirtyClone was reported to allow a local unprivileged user to gain root access.T1078 · Valid AccountsAttackers used accessible credentials and a stolen Kubernetes service account token to gain access.T1078.004 · Cloud AccountsThe article reports abuse of publicly exposed cloud credentials and OAuth tokens.T1190 · Exploit Public-Facing ApplicationInitial access in the agentic attack was through a marimo vulnerability; publicly exposed subdomains with accessible credentials were also reported in the Novo Nordisk incident.T1204 · User ExecutionAccess to Tchap was reportedly gained through successful social engineering against a user.T1528 · Steal Application Access TokenThe agentic threat actor replayed a stolen Kubernetes service account token to access and dump cluster secrets.T1566 · PhishingSocial engineering against a single user was reported as the means of gaining access to Tchap.T1611 · Escape to HostThe agentic threat actor broke out of a container into the host.T1613 · Container and Resource DiscoveryThe agentic threat actor enumerated the host and cluster environment.
CVE
CVE-2026-33017Researchers reported the first known exploitation of Langflow CVE-2026-55255, alongside exploitation of CVE-2026-33017, showing attackers prioritize effort over CVSS score.CVE-2026-39987described as ‘two publicly exposed subdomains’ and ‘initial access through a marimo vulnerability (CVE-2026-39987)’.CVE-2026-43503Other June issues included GitHub pull_request_target abuse, a supply chain incident affecting Klue and its customers, and the DirtyClone kernel flaw CVE-2026-43503 with a working root exploit.CVE-2026-55255Researchers reported the first known exploitation of Langflow CVE-2026-55255, alongside exploitation of CVE-2026-33017, showing attackers prioritize effort over CVSS score.
Threat Actors
fulcrumsecDescribed as a cloud extortion group that claimed responsibility for the Novo Nordisk incident, alleging it exfiltrated 1.3 terabytes of data and demanding a $25 million ransom.misereAn attacker using this alias claimed responsibility for compromising Tchap and stealing 13.5 GB of data; the cause and details remained under investigation.
Vendors
Products
KubernetesAn agentic threat actor (ATA) used autonomous actions to gain access, enumerate a host, create privileged containers, escape, and dump Kubernetes secrets.LangflowIt also covers emerging adversary behavior such as agentic threat actors, LLM jailbreaking for exploit creation, LLMjacking, and notable vulnerability abuse across Langflow, GitHub workflows, and DirtyClone.Marimo[T1190 ] Exploit Public-Facing Application – Initial access came through exposed services and a marimo vulnerability, described as ‘two publicly exposed subdomains’ and ‘initial access through a marimo vulnerabilityOllamaLLMjacking evolved from simple stolen compute abuse into development of an autonomous offensive hacking tool on a misconfigured Ollama server.Tchapsecurity briefing highlights a mix of classic failures and newer threats, including the compromise of Tchap, a large data theft from Novo Nordisk, and multiple attacks tied to cloud exposure, stolen credentials,
Industries
CybersecurityIt’s the cybersecurity circle of life: there’s always something new and exciting to talk about, but most incidents are still rooted in familiar foundations.GovernmentTchap, the French government’s official messaging app, was confirmed compromised, with the attacker “misere” claiming theft of 13.5 GB of data.