Oracle PeopleSoft CVE-2026-35273: ShinyHunters Zero-Day RCE Under Active Exploit | June 2026
June 11, 2026 Oracle has issued an emergency security alert for CVE-2026-35273, a critical zero-day vulnerability in PeopleSoft Enterprise PeopleTools that enables unauthenticated remote code execution. The ShinyHunters extortion gang is actively…
Meta AI Support Breach Hijacks 20,000 Instagram Accounts
June 8, 2026 Meta has disclosed that attackers exploited a vulnerability in its AI-powered Instagram account recovery system to hijack more than 20,000 user accounts. Consequently, the breach raises serious questions about how AI-assisted support tools…
DentaQuest Data Breach Exposes 2.6M Accounts: ShinyHunters Leak
June 7, 2026 DentaQuest, one of the largest dental benefits administrators in the United States, confirmed a major data breach that exposed the personal and health information of approximately 2.6 million accounts. The incident was carried out by the…
Iranian State-Sponsored Hacking Group Handala Breaches Holocaust Victim Support Centre: 2M Documents Leaked
June 2, 2026 Iranian state-sponsored hacking group Handala breached the Holocaust Victim Support Centre in Israel on May 31, 2026. The group claimed responsibility for the attack and leaked over two million documents totaling more than one terabyte of…
Unpatched Gogs Zero-Day Enables Remote Code Execution on Git Servers
May 29, 2026 An unpatched zero-day vulnerability in the Gogs self-hosted Git service allows authenticated attackers to execute remote code on Internet-facing instances. The flaw, discovered by Rapid7 researcher Jonah Burgess, affects the latest release…
AI Chatbot Cryptojacking Campaign Targets GPU Users via Malicious Software Sites
May 27, 2026 Microsoft has uncovered an active cryptojacking campaign that leverages artificial intelligence chatbot interactions to deliver malicious software to users searching for trusted system utilities. The campaign impersonates legitimate…
7-Eleven Data Breach Exposes 185,000 People: ShinyHunters Extortion Gang Strikes
May 26, 2026 Convenience store giant 7-Eleven has confirmed a data breach that exposed the personal information of 185,300 people after the ShinyHunters extortion gang compromised its systems in early April 2026. Consequently, the cybercriminals leaked a…
Kali365 PhaaS Hijacks Microsoft 365 Accounts via Device Code Phishing
May 25, 2026 The FBI is warning organizations about Kali365, a phishing-as-a-service (PhaaS) platform that hijacks Microsoft 365 accounts by abusing OAuth device code authentication. The service bypasses multi-factor authentication (MFA) and has already…
US Gas Station Tank Gauges Breached by Unknown Threat Actors
May 18, 2026 Unknown threat actors have breached automatic tank gauge (ATG) systems at US gas stations in multiple states. The attackers exploited these systems to manipulate display readings on fuel tanks. However, they did not alter the actual fuel…
Canvas LMS Cyberattack by ShinyHunters: Education Platform Breach Shuts Thousands of Schools
May 9, 2026 The Canvas Learning Management System (LMS) — a platform used by thousands of schools and universities worldwide — was hit by a devastating cyberattack from the ShinyHunters hacking group on May 8, 2026. The Canvas data breach disrupted…