✨ The Containment Era is here. Secure AI workloads before they breach. →The Containment Era is here. →The Containment Era is here. →Explore ✨
Computer Software/Engineering
Breach intelligence, attack campaigns, and threat reports targeting the Computer Software/Engineering sector.
Explore Other Sectors
Computer Software/Engineering Threat Reports
Critical RCE Vulnerabilities in Microsoft's Semantic Kernel SDK
In May 2026, Microsoft disclosed critical vulnerabilities in its Semantic Kernel SDK, specifically CVE-2026-26030 and CVE-2026-25592. These flaws allowed remote code execution and arbitrary file writes through AI agent frameworks, posing significant security risks. Attackers could exploit these vulnerabilities to execute unauthorized code and manipulate file systems, potentially leading to full system compromise. The vulnerabilities were promptly addressed in subsequent updates, with Microsoft releasing patches to mitigate the risks. Organizations utilizing the Semantic Kernel SDK were urged to update to the latest versions to protect their systems from potential exploitation. This incident underscores the evolving threat landscape in AI and machine learning applications, highlighting the need for continuous vigilance and proactive security measures in the development and deployment of AI agents. As AI technologies become more integrated into critical systems, ensuring their security is paramount to prevent potential breaches and maintain trust in these advanced solutions.
2 months ago
Kill Chain
Understanding the Impact of Recent SSRF Vulnerabilities in MCP Servers
In early 2026, critical vulnerabilities were discovered in MCP servers, notably in Atlassian's mcp-atlassian and Microsoft's MarkItDown. These vulnerabilities, including CVE-2026-27826, allowed unauthenticated attackers to exploit Server-Side Request Forgery (SSRF) flaws, potentially leading to remote code execution and unauthorized access to internal resources. The mcp-atlassian vulnerability stemmed from unvalidated custom HTTP headers, while MarkItDown's flaw involved improper URL validation, enabling access to cloud metadata services. ([pluto.security](https://pluto.security/blog/mcpwnfluence-cve-2026-27825-critical/?utm_source=openai)) These incidents underscore the persistent threat posed by SSRF vulnerabilities in widely used platforms. As organizations increasingly integrate MCP servers into their infrastructure, ensuring robust input validation and implementing strict access controls are imperative to prevent similar exploits and safeguard sensitive data.
2 months ago
Kill Chain
ShinyHunters' 2026 Canvas Data Breach: A Wake-Up Call for Educational Cybersecurity
In early May 2026, the cybercriminal group ShinyHunters executed a significant data breach targeting Instructure's Canvas learning management system. This attack compromised personal information—including names, email addresses, student ID numbers, and user communications—of approximately 275 million users across nearly 9,000 educational institutions worldwide. Notable universities such as MIT, Harvard, Oxford, and UC Berkeley were among those affected. The breach led to widespread disruptions, particularly as students were preparing for final exams. ([apnews.com](https://apnews.com/article/446c240d5aeb1b1a1e3795fb92237563?utm_source=openai)) This incident underscores the escalating threat posed by cybercriminal groups like ShinyHunters, who have a history of targeting educational platforms. The breach highlights the critical need for robust cybersecurity measures within educational institutions to protect sensitive data and maintain operational continuity. ([apnews.com](https://apnews.com/article/a0d7719689263e6b5f90d0e633391b5b?utm_source=openai))
2 months ago
Kill Chain
Critical Vulnerability in Claude Chrome Extension Exposes User Data
In May 2026, a critical vulnerability was discovered in Anthropic's Claude AI Chrome extension, allowing any installed browser plugin to issue commands to the AI without user consent. This flaw enabled unauthorized actions such as accessing and exfiltrating sensitive data from Google Drive and GitHub repositories, effectively bypassing Chrome's extension security model. The vulnerability was reported to Anthropic on April 27, 2026, and a partial fix was released on May 6, 2026. However, researchers noted that the fix did not fully mitigate the issue, leaving some attack vectors open. This incident underscores the growing security challenges associated with integrating AI agents into web browsers, highlighting the need for robust security measures to prevent unauthorized access and data exfiltration.
2 months ago
Kill Chain
Fake Claude AI Website Distributes Beagle Windows Malware
In May 2026, a fraudulent website mimicking the legitimate Claude AI platform offered a malicious download named 'Claude-Pro Relay,' which installed a previously undocumented Windows backdoor called 'Beagle.' The attackers advertised this software as a high-performance relay service for Claude-Code developers. Upon execution, the installer added files to the Startup folder, enabling persistent remote access through the Beagle backdoor, which supports commands like executing system commands, file manipulation, and directory operations. The campaign utilized DLL sideloading techniques involving a signed G Data updater to deploy the malware, with command-and-control communications secured via AES encryption over TCP and UDP protocols. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/fake-claude-ai-website-delivers-new-beagle-windows-malware/amp/?utm_source=openai)) This incident underscores the growing trend of cybercriminals exploiting the popularity of AI platforms to distribute malware. The use of sophisticated techniques such as DLL sideloading and encrypted communications highlights the evolving nature of threats targeting both individual users and organizations. Vigilance in verifying software sources and monitoring for unusual system behavior remains crucial in mitigating such risks.
2 months ago
Kill Chain
Americans Sentenced for Operating 'Laptop Farms' Aiding North Korean IT Workers
In May 2026, U.S. nationals Matthew Isaac Knoot and Erick Ntekereze Prince were each sentenced to 18 months in prison for operating 'laptop farms' that enabled North Korean IT workers to fraudulently secure remote employment at nearly 70 American companies. Knoot managed a laptop farm from his Nashville residence between July 2022 and August 2023, facilitating over $250,000 in payments to North Korean workers. Prince, through his company Taggcar Inc., assisted at least three North Korean IT workers in obtaining remote positions from June 2020 to August 2024, resulting in more than $943,000 in salaries, with the majority routed overseas. The schemes caused significant financial and security repercussions for the victim companies, including over $1.5 million in remediation costs. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/americans-sentenced-for-running-laptop-farms-for-north-korea/?utm_source=openai)) This incident underscores the persistent threat posed by North Korean cyber operations, which exploit remote work opportunities to infiltrate Western companies. The use of 'laptop farms' highlights the evolving tactics employed to circumvent security measures, emphasizing the need for robust identity verification and cybersecurity protocols in remote hiring processes.
2 months ago
Kill Chain
ACSC Alerts on ClickFix Attacks Distributing Vidar Stealer via Compromised WordPress Sites
In May 2026, the Australian Cyber Security Centre (ACSC) identified a malware campaign targeting Australian organizations through compromised WordPress websites. Attackers employed the 'ClickFix' social engineering technique, presenting users with fake Cloudflare verification prompts that instructed them to execute malicious PowerShell commands. This led to the installation of Vidar Stealer, an information-stealing malware capable of exfiltrating credentials, browser data, cryptocurrency wallets, and system information. The campaign exploited user trust in legitimate websites to facilitate malware distribution. This incident underscores the evolving sophistication of social engineering attacks and the persistent threat posed by infostealer malware. Organizations must remain vigilant, as such techniques can bypass traditional security measures by manipulating user behavior. The ACSC's advisory highlights the need for enhanced security awareness and technical controls to mitigate these risks.
2 months ago
Kill Chain
PCPJack Worm: A New Threat to Cloud Infrastructures
In May 2026, a new malware framework named PCPJack was discovered targeting exposed cloud infrastructures, including services like Docker, Kubernetes, Redis, MongoDB, and RayML. The malware infiltrates Linux-based cloud systems via a shell script, establishes persistence, and orchestrates credential theft at scale. Notably, PCPJack actively removes existing infections from the TeamPCP group, a known threat actor responsible for previous high-profile supply-chain breaches. This suggests that PCPJack may have been developed by a former TeamPCP affiliate or member who started their own operation. The emergence of PCPJack highlights the evolving landscape of cyber threats, where malware not only seeks to exploit systems but also competes with other malicious actors for control. This trend underscores the need for organizations to implement robust security measures, including multi-factor authentication, proper service authentication, and adherence to the principle of least privilege, to protect against such sophisticated attacks.
2 months ago
Kill Chain
TCLBanker: The Self-Spreading Banking Trojan Threatening Financial Security
In May 2026, a sophisticated banking trojan named TCLBanker emerged, targeting 59 banking, fintech, and cryptocurrency platforms primarily in Brazil. The malware infiltrates systems through a trojanized MSI installer for Logitech AI Prompt Builder, employing DLL side-loading to evade detection. Once installed, TCLBanker monitors browser activity, activating when users access targeted financial websites. It establishes a WebSocket connection to its command-and-control server, enabling attackers to perform live screen streaming, keylogging, clipboard hijacking, and remote command execution. Additionally, TCLBanker features self-propagating worm modules that exploit WhatsApp and Outlook to spread the malware to the victim's contacts, significantly increasing its reach and impact. The emergence of TCLBanker underscores a concerning evolution in banking malware, combining advanced evasion techniques with self-propagation capabilities. This development highlights the urgent need for enhanced cybersecurity measures, particularly in the financial sector, to counteract increasingly sophisticated threats that can rapidly disseminate through trusted communication channels.
2 months ago
Kill Chain
ShinyHunters' Exploitation of Instructure's Vulnerability Leads to Canvas Login Portal Defacements
In May 2026, the ShinyHunters extortion group exploited a vulnerability in Instructure's systems to deface Canvas login portals for approximately 330 educational institutions. The defacements displayed messages claiming responsibility for a prior breach and threatened to leak stolen data unless a ransom was paid by May 12, 2026. Instructure responded by taking Canvas offline to address the cyberattack. This incident underscores the escalating threat posed by cyber extortion groups targeting educational institutions. The breach highlights the critical need for robust cybersecurity measures and prompt incident response to protect sensitive student and staff data from unauthorized access and potential exploitation.
2 months ago
Kill Chain
PCPJack Credential Stealer Exploits Multiple CVEs to Target Cloud Systems
In May 2026, cybersecurity researchers uncovered PCPJack, a sophisticated credential theft framework targeting exposed cloud infrastructures. The toolset infiltrates services such as Docker, Kubernetes, Redis, MongoDB, and RayML, harvesting credentials from cloud, container, developer, productivity, and financial services. It exfiltrates the stolen data through attacker-controlled infrastructure and propagates in a worm-like fashion by exploiting known vulnerabilities, including CVE-2025-55182, CVE-2025-29927, CVE-2026-1357, CVE-2025-9501, and CVE-2025-48703. Notably, PCPJack removes artifacts linked to the threat actor TeamPCP from compromised environments, suggesting a possible connection or rivalry between the two groups. The campaign's primary objective appears to be generating illicit revenue through credential theft, fraud, spam, extortion, or resale of stolen access. This incident underscores the evolving threat landscape in cloud security, highlighting the increasing sophistication of attacks targeting cloud infrastructures. Organizations must remain vigilant, ensuring timely patching of known vulnerabilities and implementing robust security measures to protect against such credential theft campaigns.
2 months ago
Kill Chain
Instructure Data Breach 2026: Lessons for Educational Institutions
In May 2026, Instructure, the company behind the Canvas learning management system, disclosed a significant data breach. The cybercriminal group ShinyHunters claimed responsibility, alleging the theft of 3.65 terabytes of data affecting approximately 275 million users across nearly 9,000 educational institutions. The compromised data includes names, email addresses, student ID numbers, and user communications. Instructure responded by revoking credentials, patching vulnerabilities, rotating keys, and enhancing monitoring. This incident underscores the critical need for educational institutions to assess and strengthen their third-party vendor security practices to protect sensitive student and staff information.
2 months ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Breach Lock helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports