Collaborate Disseminate
Instructure has reached an agreement with the ShinyHunters group to return and destroy stolen Canvas data, protecting millions of student records from a public leak. Continue reading Instructure Reaches Deal with ShinyHunters to Prevent Canvas Data Leak
Instructure has reached an agreement with the ShinyHunters group to return and destroy stolen Canvas data, protecting millions of student records from a public leak. Continue reading Instructure Reaches Deal with ShinyHunters to Prevent Canvas Data Leak
Research reveals that TeamPCP hijacked OIDC tokens to poison hundreds of TanStack, Mistral AI, and UiPath packages with the self-propagating Mini Shai-Hulud worm. Continue reading TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages
Researchers at Ontinue have discovered an undocumented malware campaign targeting developers with fake Claude Code installers to steal browser passwords and cookies. Continue reading Fake Claude Code Installer Targets Developers With Browser Credential Stealer
Pwn2Own Berlin 2026 reportedly reached full capacity for the first time, prompting rejected researchers to publicly disclose zero-day exploits targeting Firefox, NVIDIA, and AI platforms. Continue reading Pwn2Own Berlin 2026 Hits Capacity as Rejected Hackers Release 0-Days
Operation HumanitarianBait uses fake aid documents, GitHub-hosted payloads, and Python spyware to target Russian-speaking victims. Continue reading Operation HumanitarianBait Uses Fake Aid Documents to Deploy Python Spyware
Google researchers say hackers used AI to develop zero-day exploits, Android backdoors, and automated supply chain attacks targeting GitHub and PyPI. Continue reading Google Says Hackers Used AI to Develop a Zero-Day Exploit
Romanian national Gavril Sandu faces up to 30 years in a US prison after extradition over a VOIP vishing and fake debit card fraud scheme. Continue reading Romanian Man Faces Up to 30 Years in US Prison Over Vishing Scams
The Dirty Frag vulnerability affects Linux systems and allows root access escalation, while public PoC exploit code increases attack risks. Continue reading 9-Year-Old Dirty Frag Vulnerability Enables Root Access on Linux Systems
Hackers are abusing Vercel GenAI to create convincing phishing sites that mimic major brands, including Microsoft, Adidas, and Nike, making scams harder to detect. Continue reading Hackers Exploit Vercel GenAI to Mass-Produce Convincing Phishing Sites