Canvas Data Breach
A data extortion attack on the education technology platform Canvas has disrupted classes and coursework at schools and universities across the US, with hackers threatening to leak data from 275 million students and faculty.
HalluSquatting is an attack where researchers pre-compute fake repository, package, or skill names that AI coding agents predictably invent, register those names first, and load them with malicious instructions.
A data extortion attack on the education technology platform Canvas has disrupted classes and coursework at schools and universities across the US, with hackers threatening to leak data from 275 million students and faculty.
A data breach at Zara exposed personal information of 197,000 customers, including email addresses, geographic locations, and purchase history.
A cyberattack on the Canvas system used by thousands of schools has left students and faculty unable to access course materials, creating chaos as finals approach.
A flaw in the Claude Chrome extension allows any other plugin to hijack victims' AI, potentially extracting files and sending emails on behalf of users.
Hiring more analysts won't solve the SOC's alert problem due to the volume of alerts exceeding human investigation capacity.
Senate Minority Leader Chuck Schumer is seeking a plan from the Department of Homeland Security to coordinate with state and local governments on defending against AI-strengthened hacks.
General Motors has agreed to pay $12.75 million to settle charges it violated millions of consumers' privacy by collecting and selling driving data without consent.
A cyberattack on education software provider Instructure forced multiple universities to reschedule final exams, with hackers from the ShinyHunters group demanding a ransom by May 12.
A former government contractor was found guilty of conspiring to destroy dozens of federal databases after being fired from his job.