12 results
Vanderbilt University said on Nov 9 it is responding to an active cybersecurity incident that may impact university devices, systems and cloud-based services, and that its IT team is investigating and working to contain it .
Security firm Todyl says that since Nov 1 an attacker has been using stolen, still-valid credentials to sign in to MSPs' Microsoft 365 and Azure environments as their own applications, targeting about 45 app registrations at roughly 18 organizations with more than 33 authenticating successfully .
CISA, the FBI, the NSA and international partners warned that Integrity Technology Group, a China-based cybersecurity company with ties to the Chinese government, is enabling threat actors to target multiple critical infrastructure sectors worldwide .
ST Unitas, operator of the Gongdangi exam-prep brands, announced on June 8, 2026 that some members' personal data leaked through unauthorized access to its operating system .
Instructure said the attacker used a Free-for-Teacher account to submit a support ticket with malicious code that triggered an XSS flaw, obtained an authorization token and gained elevated access in Canvas, taking usernames, email addresses, course names, enrollment information and messages .
According to BleepingComputer, ShinyHunters leaked data from 13.
According to BleepingComputer, South Korean education group Kyowon confirmed a ransomware attack in which data was exfiltrated and is investigating with authorities whether customer information was included .
According to Security NEXT, Ryokkyukai, the alumni association of Otaru University of Commerce, announced that one of its computers suffered an external intrusion, potentially exposing member personal data .
According to Security NEXT, on the evening of December 17, 2024, a prefectural high school in Saitama Prefecture uploaded a seminar video intended only for students but mistakenly set its visibility permissions to public .
According to Security NEXT, Ako City in Hyogo Prefecture was notified by its outsourced IT contractor on December 18, 2024, confirming that data on a Board of Education server had been encrypted by ransomware .
According to Security NEXT, a municipal junior high school teacher in Kariya City lost a personal USB flash drive at a commercial facility while returning home on October 4, 2024 .
Nordic IT services provider Tietoevry announced that one of its data centers in Sweden was hit by a ransomware attack during the night of January 19–20, 2024 .