Security researchers have uncovered a gap in the way Anthropic Skill scanning tools inspect third-party AI packages, allowing malicious code hidden inside test files to execute on developer systems even after scanners marked the Skills as safe. The issue centers…
Tag: CySecurity News – Latest Information Security and Hacking Incidents
Data Leak: Instructure, Canvas Allegedly Hacked, ShinyHunters Claim Responsibility
Instructure, a cloud-based LMS Canvas company was hit by a massive data attack. Ransomware gang ShinyHunters claimed responsibility for the attack, saying that it had stolen data related to 280 million students, teachers, and school staff. 100s of GBs data…
9-Year-Old Linux bug Found by Researchers, Could Leak Data
Experts have revealed details of a bug in the Linux kernel that stayed unnoticed for nine years. The flaw is tracked as CVE-2026-46333 (CVSS score: 5.5). Improper bug management The incident is improper privilege management that could have allowed threat…
ShinyHunters Cyberattack Disrupts Canvas Platform Across Universities and Schools
This week, a significant digital breach affected educational institutions throughout the United States, Canada, and Australia. The incident followed claims by the hacking collective ShinyHunters. Their target: Canvas, a commonly adopted online learning system. Despite its widespread use, the…
Google Navigates EU Regulatory Pressure With Search Policy Shift
A growing regulatory backlash against search ranking practices has forced Alphabet’s Google to reevaluate portions of its spam enforcement framework in response to criticism by digital publishers in Europe. Reuters has reviewed a document from the European Commission that…
Virus, Malware, or Spyware? Here’s What They Really Mean
Many people casually refer to every cyber threat as a “virus,” but cybersecurity professionals use a much broader classification system. A security program that only defended against traditional computer viruses would offer very limited protection today because viruses represent…
Poland Water Plant Hacks Expose Growing Cyber Threat to U.S. Infrastructure
Poland has revealed a troubling series of cyberattacks against water treatment plants, underscoring how vulnerable critical infrastructure can become when basic security is neglected. According to reporting on the incident, hackers breached industrial control systems at five facilities and,…
Ransomware Attack Disrupts Grading Platform Used by LBUSD Cal State and LBCC
A cyberattack linked to the ShinyHunters extortion group temporarily disrupted educational operations across a number of educational institutions in the United States, causing concern over the potential exposure of sensitive student and faculty data. These institutions continued to restore…
Pulitzer-Winning Journalists Expose the Human Cost and Hidden Network Behind Digital Arrest Scams
Digital arrest scams in India are rapidly expanding by exploiting fear, trust, and emotional vulnerability. Pulitzer-winning journalists Suparna Sharma and Anand RK recently shed light on this growing menace through their acclaimed Bloomberg illustrated investigation, Trapped. In an interaction…
European Union Agrees to Ban AI Generated Non Consensual Sexualized Deepfakes
A temporary deal emerged Thursday between EU lawmakers and national representatives, targeting AI tools that create explicit fake images without consent. Such technology, when applied to produce child exploitation material, will also fall under the new restrictions. Agreement came…
PCPJack Worm Steals Cloud Credentials While Wiping Out TeamPCP Infections
A new malware framework called PCPJack is drawing attention because it not only steals credentials from exposed cloud systems but also wipes out traces of TeamPCP infections before taking over the environment. The campaign shows how one criminal group…
Token Pilfering: How Token Theft is Plaguing Cybersecurity
AI economy and computing threat The rising AI economy is bringing a new type of cybercrime. Cybercriminals are scamming AI firms by signing up for new accounts to steal tokens via computing power. The problem is getting worse, according to…
WhatsApp Encryption Comes Under Spotlight Following Federal Allegations
Federal Investigation Into WhatsApp Encryption A confidential federal investigation into encryption integrity has morphed into a broader debate addressing the technical transparency of one of the largest messaging platforms in the world. According to a Bloomberg report citing individuals…
Ivanti Patches New EPMM Vulnerability Linked to Active Zero-Day Exploitation
Software provider Ivanti has released security updates for a newly identified vulnerability in its Endpoint Manager Mobile (EPMM) platform after confirming that the flaw has already been used in limited zero-day attacks. The vulnerability, tracked as CVE-2026-6973, has been…
Meta Challenges Ofcom Over Online Safety Act Fees and Penalties
Challenging new rules, Meta – owner of Facebook and Instagram – is taking Ofcom to the High Court amid disputes about charges tied to the Online Safety Act. The legal move stems from disagreements on how costs and fines…
Fake Claude AI Site Spreads New Beagle Windows Backdoor – Here’s How to Stay Safe
Cybercriminals have launched a sophisticated malvertising campaign using a fake Claude‑AI website that installs a new Windows backdoor called “Beagle,” highlighting how attackers are weaponizing the popularity of AI tools against software developers. The deceptive site, reachable through sponsored…
GitHub Token Exposure at Grafana Triggered Codebase Theft Incident
Following the acquisition of a privileged GitHub token tied to Grafana Labs’ development environment, a threat actor quickly escalated the initial credential exposure into a significant source code security incident. It was possible for the attacker to gain access…
Crypto at Risk: Experts Believe Quantum Threat Arriving by 2030
A recent report has warned that cryptographic foundations that secure trillions of dollars in digital currency can be hacked by quantum computers within the next four to seven years, and the blockchain industry is not prepared for damage control. About…
Trojanized DAEMON Tools Used to Deploy Persistent Backdoor Malware
An innocent routine software update mechanism has been weaponized by attackers in order to distribute malware through official distribution channels, enabling a stealthy global supply-chain compromise. AVB Disc Soft authenticated digital certificates were used to sign trojanized builds as…
4 Key Areas in 2026 for Organisation Safety Against Advanced AI Threats
2026 has not been a kind year to cybersecurity, as organizations and industries globally have been hit by ruthless cyberattacks. 2026 and cybersecurity Cybersecurity entered 2026 under stress to deploy AI tech while building foundations for a quantum future. Cybersecurity…