Michael Clark

Reported Context (7)

Leading security researcher at Sysdig who confirmed that exploitation began less than two weeks before public disclosure. Hackers Exploit Gitea Docker Image Authentication Bypass
Sysdig representative who described the operator’s Langflow exploitation activity. CISA Adds Four Actively Exploited Flaws to KEV Catalog
Sysdig Sr. Director of Threat Research who reported exploitation observations and findings from Sysdig's research. Gitea CVE-2026-20896 Exploited in the Wild, Researchers Warn
Senior director of threat research at Sysdig who described the observed activity as initial investigation and said it had not progressed to exploitation. Gitea Docker Flaw CVE-2026-20896 Probed After Disclosure; Fix Available
Senior director of threat research at Sysdig; discussed the agent's role and the operation's human involvement. Sysdig Reports First Documented Agentic Ransomware Operation

CVE (8)

Malware (7)

People (10)

Threat Actors (7)

MITRE ATT&CK (24)

Vendors (11)

Products (24)

Tools (2)

Industries (3)

Countries (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.