Product
Elastic Cloud
- First Reported
- Feb 8, 2026
- Latest Reported
- Mar 6, 2026
Reported Context (2)
- TL; DR Huntress discovered a threat actor was exploiting vulnerabilities (like SolarWinds Web Help Desk) and exfiltrating victim data to a free trial instance of Elastic Cloud SIEM. Huntress Traces Threat Actor’s Use of Elastic Cloud to Exfiltrate and Triage Victim Data
- So the ThreatActor spun out their own Elastic Cloud instance and start shipping system information from compromised endpoints right into it. Huntress Details Active Exploitation of SolarWinds Web Help Desk
CVE (3)
People (4)
MITRE ATT&CK (12)
Vendors (3)
Products (11)
Tools (5)
Industries (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.