Foxconn confirmed that some of its North American facilities were impacted by a cyberattack, with the Nitrogen ransomware group claiming responsibility and alleging the exfiltration of over 8 terabytes of sensitive data. This incident, which occurred prior to May 13, 2024, highlights the escalating threat of supply chain targeting by ransomware groups that use double-extortion […]
On May 4, 2026, Pennsylvania-based West Pharmaceutical Services detected a ransomware attack, leading to the immediate shutdown of affected on-premise infrastructure. This incident caused significant global operational disruption, and the company confirmed data exfiltration occurred prior to file encryption. What Happened On May 4, 2026, West Pharmaceutical Services proactively shut down and isolated its affected […]
On May 8, 2026, Ivanti released security updates for its Endpoint Manager Mobile (EPMM) product to address five vulnerabilities, including a high-severity zero-day, CVE-2026-6973, which Ivanti confirms has been actively exploited in targeted attacks. This response addresses ongoing, sophisticated activity aimed at compromising mobile device management (MDM) infrastructure. What Happened Ivanti released a series of […]
ShinyHunters claims to have exfiltrated data from Instructure's Canvas Learning Management System (LMS), impacting an alleged 275 million students and faculty across potentially 9,000 global educational institutions. This coordinated data extortion attack, which reportedly exploited a social engineering vector, significantly disrupted academic operations. The incident highlights the growing sophistication of data extortion against SaaS platforms […]
Google's Threat Intelligence Group (GTIG) reported on May 11, 2026, that a prominent cybercrime group successfully used AI to develop a zero-day exploit for a 2FA bypass. Google claims this marks a significant escalation, as AI shifts from theoretical to active use in offensive cyber operations. The exploit targeted an open-source web-based system administration tool, […]
Linux [CVE-2026-43284] 'Dirty Frag' Zero-Day Grants Root Access, Exploits Expected On May 8, 2026, a critical Linux kernel zero-day, dubbed 'Dirty Frag' (CVE-2026-43284), was publicly disclosed before a patch was widely available. This local privilege escalation (LPE) flaw allows deterministic root access and shares characteristics with 'Dirty Pipe' and 'Copy Fail,' but its broader attack […]
A new Trojan that specifically targets the Microsoft Phone Link application to exfiltrate user passwords was reported on May 5, 2026, by security researchers. This incident signals a shift from the recent focus on ransomware and critical infrastructure disruptions, instead highlighting credential theft through the misuse of trusted, user-facing software. Attackers are exploiting the very […]
A critical local privilege escalation (LPE) vulnerability, dubbed "Dirty Frag," was publicly disclosed on May 8, 2026, allowing local attackers to achieve root privileges on nearly all major Linux distributions since 2017. This zero-day chains two distinct kernel flaws, CVE-2026-43284 and CVE-2026-43500, expanding on previous bug classes like "Dirty Pipe" by offering highly reliable attack […]
ShinyHunters Ransomware Disrupts Canvas LMS for Millions Amid Finals The Canvas learning management system (LMS), operated by Instructure, experienced a significant data breach and service disruption attributed to the ShinyHunters ransomware group, impacting millions of students and faculty during a critical academic period. The attack, which became widely apparent around May 7-8, 2026, caused widespread […]
ShinyHunters ransomware has catastrophically disrupted Instructure's Canvas LMS, with login pages defaced and the threat of a massive 3.65 TB data leak by May 12, 2026, impacting millions of students and faculty during critical finals periods. What Happened On May 7, 2026, students and faculty at numerous institutions worldwide began reporting defaced Canvas login pages, […]