Laravel Lang Supply Chain Attack Spreads Credential-Stealing Malware to Developers
May 23, 2026 A sophisticated supply chain attack has compromised the Laravel Lang localization packages after attackers rewrote GitHub version tags to distribute credential-stealing malware through Composer. Security researchers from StepSecurity, Aikido…
US Gas Station Tank Gauges Breached by Unknown Threat Actors
May 18, 2026 Unknown threat actors have breached automatic tank gauge (ATG) systems at US gas stations in multiple states. The attackers exploited these systems to manipulate display readings on fuel tanks. However, they did not alter the actual fuel…
Iranian Threat Actor Exfiltrates 26,000 Oman Ministry of Justice Records
May 5, 2026 An Iranian-nexus threat actor carried out a targeted data theft attack against the Omani government on April 8 and April 10, 2026. The attackers compromised the Ministry of Justice and Legal Affairs and exfiltrated over 26,000 user records.…
Black Matter DDoS Attack Disrupts South African Web Hosting Provider 1-Grid
May 21, 2026 On May 18, 2026, South African web hosting provider 1-Grid suffered a DDoS attack that disrupted its infrastructure and customer services. The attackers, operating under the alias “Black Matter,” targeted the hosting platform in…
Northern Mariana Islands Government Email Accounts Compromised by Unknown Threat Actor
May 22, 2026 On May 21, 2026, the government of the Northern Mariana Islands — a US commonwealth in the Western Pacific — disclosed that an unknown threat actor compromised government email accounts. The incident was reported by the Office of Information…
Canvas LMS Cyberattack by ShinyHunters: Education Platform Breach Shuts Thousands of Schools
May 9, 2026 The Canvas Learning Management System (LMS) — a platform used by thousands of schools and universities worldwide — was hit by a devastating cyberattack from the ShinyHunters hacking group on May 8, 2026. The Canvas data breach disrupted…
Trellix Source Code Breach: Unauthorized Access Raises Fears of Infrastructure Compromise
May 7, 2026 On May 4, 2026, cybersecurity giant Trellix confirmed that a source code breach had compromised its development repository, exposing intellectual property and raising alarms across the supply chain ecosystem. The attack, which occurred…
Qilin Ransomware Attack on Armstrong George Cohen Will Ophthalmology
May 5, 2026 On May 2, 2026, the notorious Qilin ransomware group executed a sophisticated attack against Armstrong George Cohen Will Ophthalmology, a leading eye care practice in the United States. The healthcare breach resulted in the exposure of…