Canvas owner reaches ‘agreement’ with hackers to secure stolen data
Canvas owner reaches ‘agreement’ with hackers to secure stolen data
Search
All sources
bleepingcomputer.com
24
theregister.com
18
techcrunch.com
9
wired.com
7
github.blog
7
theverge.com
6
9to5mac.com
4
engadget.com
3
appleinsider.com
3
techradar.com
2
cnet.com
2
guru3d.com
2
Videos
More videosTop stories
Cloud development platform Vercel was hacked
…Vercel confirmed in a post on X that a “security incident” had occurred, and that it impacted a “limited subset” of its customers. Vercel said that a compromised third-party AI tool…
Imagine An Army Of AI Minions Handling Incident Response
…Driving Adoption Aside from trust, removing security friction and deployment constraints is critical for this technology. For AI systems to handle production incidents, they need bulletproof security. NeuBird AI processes telemetry in…
A hotel check-in system left a million passports and driver's licenses open for anyone to see | TechCrunch
…Aside from a recent buzz of AI-discovered vulnerabilities and new cybersecurity capabilities , oftentimes sizable security incidents stem from human error, misconfigurations, or failing to adhere to cybersecurity best practices. In an…
Discussions and forums
What a bunch of idiots... Canvas
https://www.reddit.com/r/canvas/comments/1taj9mk/instructure_just_confirmed_they_paid_the_ransom/ "We received assurances that it will not be further shared on the dark web or elsewhere, and we received proof that any co…
Tell HN: Compliance is not equal to Security
For over a decade, I’ve been doing bug bounty, security audits, and security consulting. And if there’s one thing I’ve seen repeatedly, it’s this:Most startups call a security engineer or hire a security agency only when…
1
1
The compression of the exploit timeline: Why n-day gaps and 90-day embargoes are failing in practice.
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
Threat Intel: ShinyHunters Leaks 9.4GB Database of 7-Eleven Franchisee Systems Post-Extortion Refusal
Overview: On May 24, 2026, the data breach notification service Have I Been Pwned (HIBP) integrated a dataset originating from an April 2026 extortion campaign targeting 7-Eleven. The breach, attributed to the threat act…
Accidentally exposed publicly my entire LAN for 2 weeks
Posting this as a PSA / confession because I almost had a heart attack last night and I figure if I got bit, someone else will too. TL;DR: Replaced pangolin + NPMplus with a double-Caddy + WireGuard setup. Put a "clever"…
Amazon insists AI coding isn't source of outages
…access controls – not AI." In the wake of that February incident, an Amazon spokesperson told The Register that "While security incidents involving misconfigured access controls can occur with any developer tool – AI…
Another OpenAI hack puts ChatGPT Mac users on an update deadline
…The company found no evidence that customer data, production systems, or intellectual property were compromised during the incident. Apple's macOS security protections will block apps signed with the older certificates…
AI agents create new risks requiring continuous monitoring and oversight
…As a result, Meta gave the incident a “Sev 1” rating, the second-highest incident response identifier used internally. This incident came hot on the heels of another example of an AI…
Zara data breach exposed personal information of 197,000 people
…provider. "Inditex has immediately applied its security protocols and has started notifying the relevant authorities of this unauthorized access, that stems from a security incident that affected a former technology provider and…
Signal adds security warnings for social engineering, phishing attacks
Signal adds security warnings for social engineering, phishing attacks By Bill Toulas May 12, 2026 03:40 PM Signal has introduced new in-app confirmations and warning messages as additional safeguards against…
Voice phishing skyrockets as smooth crims talk their way in
…Remember Brickstorm? Mandiant investigated "numerous" incidents in 2025 in which a suspected Chinese government spy crew tracked as UNC6201 broke into edge devices that didn't support endpoint security products, deployed a…