Splunk

Reported Context (4)

Howdy 👋🏽 - I hope you’re having an excellent week! Lots happening over the past several days with Splunk’s annual conference, nasty vulns in widely used software, and AI frontier labs giving the rest of the world Security Roundup: AI-Assisted Intrusions, Exploited Flaws and Industry Moves
Splunk Enterprise Recorded Future Reported 59 High-Impact Vulnerabilities in June, 56 Actively Exploited
Splunk disclosed a critical unauthenticated remote code execution (RCE) vulnerability in Splunk Enterprise tracked as CVE-2026-20253 on June 10, 2026. The vulnerability has a CVSS score of 9.8 and stems from missing Critical Splunk Enterprise Flaw Enables Unauthenticated Remote Code Execution
Jose Hernandez knows that mindset well. He leads Splunk's Threat Research Team, where he and his team simulate attacks, build detections, and constantly test their ideas against what real attackers are doing. Outside of Splunk Threat Research Lead on Threat Hunting, Detection Engineering and Living-Off-the-Land Risks

CVE (65)

Malware (7)

People (11)

Threat Actors (9)

Vendors (38)

Products (88)

Tools (15)

Industries (5)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.