Advertisement
Security Brief: Data Breaches, ShinyHunters Activity, and App Flaws
Analyzes recent security events: Nvidia cloud gaming data breach, FBI warning on ShinyHunters hacking Canvas, and critical flaws in Audi mobile applications.
US House Committee Probes Instructure Following Canvas Cyberattacks
The House Committee on Homeland Security seeks testimony from Instructure after the ShinyHunters group targeted the Canvas LMS, compromising student data.
ShinyHunters Extorts Instructure: 3.65TB Canvas LMS Data Breach Analysis
Instructure reaches an agreement with ShinyHunters after a massive 3.65TB data breach affecting Canvas LMS users across thousands of educational institutions.
ShinyHunters Claims Second Attack Against Instructure: PII at Risk
The threat actor ShinyHunters has launched a second attack against Instructure, putting the PII of hundreds of millions of EdTech users at immediate risk.
ShinyHunters Defaces Canvas Login Portals in Extortion Campaign
ShinyHunters breached Instructure, defacing Canvas login portals for numerous educational institutions, potentially impacting user credentials and initiating extortion.
Instructure Data Breach: ShinyHunters Exposes Education Sector Vendor Risk
Analysis of the Instructure data breach by ShinyHunters, impacting educational institutions using Canvas LMS and highlighting critical third-party vendor dependencies.
Advertisement
Instructure Data Breach: ShinyHunters Claims Theft of Employee Data
Educational technology giant Instructure confirms an internal data breach after the ShinyHunters threat group claims to have stolen sensitive corporate data.
Medtronic Data Breach: ShinyHunters Claims 9 Million Records Stolen
Medtronic confirms a security breach after the ShinyHunters threat group claims to have exfiltrated 9 million records containing personal information.
ADT Confirms Data Breach Amid ShinyHunters Extortion Threat
ADT confirms a data breach following a ShinyHunters extortion attempt. Customer data is at risk; security professionals must advise enhanced vigilance.
Vercel Data Breach: ShinyHunters Claim Theft of Next.js Creator Data
Vercel confirms a security incident following claims by ShinyHunters to sell stolen data for $2 million. Analyze the impact on Next.js and supply chains.
McGraw Hill Data Breach: 13.5 Million Accounts Leaked by ShinyHunters
Threat actor ShinyHunters leaks 13.5 million McGraw Hill user records following a Salesforce environment breach. Includes password hashes and PII.
Rockstar Games Analytics Data Leaked via ShinyHunters Extortion
Rockstar Games analytics data has been leaked by the ShinyHunters group following a breach at third-party provider Anodot. Analysis of the supply chain risk.
TeamPCP Supply Chain Campaign: Cisco Source Code Stolen, UNC6780 Activity
Analysis of the TeamPCP supply chain campaign, including the theft of Cisco source code and over 1,000 compromised SaaS environments tracked by Google GTIG as UNC6780.
Wynn Resorts Breach: 21,000 Employees Impacted by ShinyHunters
Casino operator Wynn Resorts confirms a data breach affecting 21,000 employees following an extortion attempt by the ShinyHunters threat group.
TeamPCP Supply Chain Attacks Escalate Amidst Hacker Infighting
Runtime Rebel details how TeamPCP's supply chain attacks are leading to breaches, with ShinyHunters and Lapsus$ adding to the chaos.
ShinyHunters Breach: European Commission Cloud Data Theft
ShinyHunters claimed responsibility for a cyber intrusion and 350GB data theft from European Commission cloud systems. Understand the TTPs and mitigation.
European Commission Confirms Europa.eu Data Breach by ShinyHunters
The European Commission confirms a data breach of the Europa.eu platform after the ShinyHunters group claimed the theft of 1.2 GB of internal database records.
MITRE ATT&CK Governance and Predator Spyware iOS Evasion Tactics
Analysis of the new MITRE ATT&CK Advisory Council, Predator spyware bypassing iOS indicators, and Russian cyber-kinetic operation coordination.
Wynn Resorts Confirms Employee Data Breach Linked to ShinyHunters
Wynn Resorts confirms a data breach affecting employee information after the ShinyHunters group removed stolen records from a dark web leak site.
Wynn Resorts Data Breach: ShinyHunters Exfiltrates Employee PII
Wynn Resorts confirms a data breach impacting employee PII, attributed to the ShinyHunters extortion gang. Analysis covers TTPs and mitigation strategies.
ShinyHunters Claims Breach of Odido Telecom Affecting Millions
The ShinyHunters extortion group claims to have exfiltrated millions of customer records from Dutch telecommunications provider Odido via a third-party breach.