New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released By Lawrence Abrams May 17, 2026 06:30 PM A cybersecurity researcher has released a proof-of-concept exploit for a…
Canvas login portals hacked in mass ShinyHunters extortion campaign By Lawrence Abrams May 7, 2026 06:36 PM The ShinyHunters extortion gang has breached education technology giant Instructure again, this time exploiting…
…The topics he writes about include malware, vulnerabilities, exploits and security defenses, as well as research and innovation in information security. His work has been published by Bitdefender, Netgear, The Security Ledger…
…More recently, ShinyHunters hacked education technology giant Instructure twice , the second time exploiting a security vulnerability to deface Canvas login portals for approximately 330 colleges and universities and threatening to leak data…
…No opt-in required.” - Discord DAVE was first introduced in September 2024 , developed with assistance and auditing from Trail of Bits, to secure audio and video calls, group chats, voice channels, and…
…The threat actor used invisible Unicode characters to encode a payload that builds a URL to a malicious script. By leveraging Valve's platform, the attacker avoids maintaining a separate C2 infrastructure…
…The authentication check is only performed after that step, bypassing security. “The authentication is not missing, [it’s] just in the wrong place,” explains HiddenLayer . “By the time it fires, the model…
…However, according to Coveware security researchers, "a coding mistake in the ESXi malware causes it to encrypt all the files with the wrong public key, irrevocably corrupting them." While Nitrogen ransomware isn…
…This is now available in preview mode and works as part of automatic attack disruption, a feature designed to contain attacks, limit their impact, and provide security teams with more remediation time…
…Google released Android's May security bulletin , which fixes 10 vulnerabilities. Ivanti released security updates for a high-severity Endpoint Manager Mobile (EPMM) remote code execution vulnerability, which was exploited in zero…