Search — “STATIC KITTEN”

CrowdStrike reports median time from public PoC to in-the-wild exploitation was under one day in H1 2026 (fastest 35 minutes). Case studies: mass exploitation of cPanel/WHM auth bypass CVE-2026-41940 (zero-day since at least April 3, 2026); UMBRAL BISON using a modified CopyFail (CVE-2026-31431) exploit to escalate www-data to root at a Ukrainian government entity and attempt to deploy a Mythic Poseidon agent (terminated by Falcon); STATIC KITTEN hosting a modified CVE-2024-55591 FortiOS exploit with 13 payloads creating backdoor admin/VPN users. Hunt for root password changes/WHM root logins, www-data to root escalation via Python, and rogue FortiOS admins like FortiWiFi, FortiSetup, darlen, offices.