Category: Cyber Security News

Apple published 11 new security advisories and patched dozens of vulnerabilities across iOS, iPadOS, macOS, watchOS, tvOS, and visionOS. The updates include major WebKit fixes, protections against privilege escalation and sandbox escape, and a patch for a flaw reportedly used by the FBI to recover Signal chats from an older iPhone….

West Pharmaceutical Services is restoring operations after a ransomware attack on May 4 forced the shutdown and isolation of affected on-premise infrastructure, disrupting business globally. The company says attackers stole data before encrypting files and that it is working with Palo Alto Networks’ Unit 42, law enforcement, and crisis teams while…

Instructure, the parent company of Canvas, said it reached an agreement with the attackers to return stolen data and destroy remaining copies after a breach that disrupted students and faculty during finals. ShinyHunters claimed responsibility for the attack, which reportedly affected nearly 9,000 schools and 275 million individuals. #Canvas #Instructure #ShinyHunters…

Hundreds of packages across npm, PyPI, and Composer were compromised in the Shai-Hulud supply-chain campaign, which used stolen OIDC tokens to publish malicious versions with valid SLSA Build Level 3 provenance. The attack, attributed to TeamPCP, spread through projects like TanStack, Mistral AI, Bitwarden CLI, SAP, Guardrails AI, UiPath, and OpenSearch to steal developer secrets and persist on infected machines. #ShaiHulud #TeamPCP #TanStack #MistralAI #BitwardenCLI #SAP #GuardrailsAI #UiPath #OpenSearch

The FCC has extended and broadened its waiver, allowing foreign-made consumer router vendors to keep delivering software and firmware updates for already deployed devices in the US through at least January 2029. The move is meant to avoid leaving millions of users on aging, unpatched routers while national security concerns over foreign-made networking equipment continue to shape US policy. #FCC #January2029

AI is now the foundation of cybersecurity companies, changing how they are built, funded, and scaled, while venture capital increasingly favors fewer, larger bets on AI-native startups. At the same time, attackers are using AI to lower barriers to entry and expand threats, pushing defenders toward autonomous, machine-driven security models. #Anthropic #ProjectGlasswing

OpenAI has introduced Daybreak, a cybersecurity initiative that uses frontier AI models and Codex Security to help organizations find, validate, and patch vulnerabilities before attackers can exploit them. The program is tightly controlled and is already being integrated by major companies under OpenAI’s Trusted Access for Cyber initiative to improve secure…

Instructure, the parent of Canvas, says it reached an agreement with the ShinyHunters extortion group after a breach that exposed data from thousands of schools and universities. The company says the stolen data was returned and destroyed, while warning the records could still fuel phishing attacks against staff, students, and parents….

TeamPCP’s Mini Shai-Hulud campaign has compromised npm and PyPI packages from TanStack, UiPath, Mistral AI, OpenSearch, and Guardrails AI with credential-stealing malware and malicious GitHub Actions workflows. The attack uses obfuscated payloads, persistence hooks, and valid SLSA provenance to spread across ecosystems while exfiltrating secrets to attacker-controlled infrastructure. #TeamPCP #MiniShaiHulud #TanStack…

ShinyHunters has claimed responsibility for a prolonged attack on Instructure’s Canvas platform, threatening to leak stolen data after disrupting access for schools nationwide and defacing login pages. The incident exposed sensitive user and enrollment information across thousands of education systems, prompting scrutiny from lawmakers and renewed concerns about third-party vendor risk. #ShinyHunters #Instructure #Canvas

South Staffordshire Water was fined £963,900 by the ICO after the Cl0p group remained inside its network for nearly two years, exposing the personal data of 633,887 customers and employees. The breach began with a malicious email attachment, then escalated through poor monitoring, unpatched systems, and a ZeroLogon vulnerability before being…

California Attorney General Rob Bonta announced a $12.75 million settlement with General Motors over allegations that it violated the California Consumer Privacy Act by collecting and selling drivers’ location and driving data without proper notice or consent. The case centered on data gathered through OnStar and Smart Driver and led to record penalties plus new restrictions on GM’s data retention and sales practices. #GeneralMotors #OnStar #SmartDriver #VeriskAnalytics #LexisNexisRiskSolutions #RobBonta

GhostLock is a proof-of-concept tool that abuses the Windows CreateFileW API and SMB file-sharing behavior to block access to files by opening them in exclusive mode. The technique can be run by standard domain users, causes sharing violations without encrypting or deleting data, and may be used to distract defenders while other intrusions continue. #GhostLock #CreateFileW #SMB

Checkmarx warned that a rogue version of its Jenkins AST plugin was published on the Jenkins Marketplace after TeamPCP compromised its GitHub repositories and used stolen credentials to push malicious code. The company advised users to verify they are running the legitimate plugin version, rotate secrets, and investigate for credential theft, persistence, or lateral movement. #Checkmarx #Jenkins #TeamPCP #Trivy #KICS