TechLogHub Blog — Page 15 of 25
Insights, guides, and product strategy for builders and product teams.
Microsoft tests modern Windows Run, says it's faster than legacy dialog
Microsoft previews a modern Run dialog for Windows 11 in build 26300.8346, featuring Fluent Design, built-in dark mode, and a faster median time-to-show of 94ms compared with 103ms for the legacy Run. The Browse button is removed after usage analysis; the new dialog supports quick access to the home directory (~) an…
Edu tech firm Instructure discloses cyber incident, probes impact
Instructure, the maker of Canvas, has disclosed a cybersecurity incident and says it is actively investigating with outside forensics experts. Some services, including Canvas Data 2 and Canvas Beta, have been under maintenance since May 1 as the company assesses impact, though it has not said whether the maintenance…
15-year-old detained over French govt agency data breach
France detains a 15-year-old suspected of selling data from the ANTS breach that affected about 11.7 million accounts; investigators say 12–18 million records were offered for sale on a cybercrime forum. The minor faces charges for unauthorized access, persistence and data exfiltration, plus possession of hacking to…
BleepingComputer retracts Instructure data breach story
BleepingComputer retracts its May 1, 2026 article about a purported Instructure data breach after confirming the information was incorrect and based on outdated details; the editors apologize for the error.
Criminal IP and Securonix ThreatQ Collaborate to Enhance Threat Intelligence Operations
Criminal IP is partnering with Securonix to embed Criminal IP’s exposure-based threat intelligence into ThreatQ, enabling real-time enrichment of IP indicators within ThreatQ and automated workflows that keep context current. The integration adds contextual data such as maliciousness scores, VPN/proxy detection, rem…
Microsoft fixes Remote Desktop warnings displaying incorrectly
Microsoft has fixed a bug that caused Remote Desktop (.rdp) security warnings to render incorrectly on multi-monitor systems with different scaling after the April 2026 updates. The fix, in the Windows 11 preview cumulative update KB5083631 (and related KBs for Windows 10/Server), introduces an educational prompt an…
Two Former Ransomware Negotiators Sentenced to Four Years in Prison Over BlackCat (ALPHV) Attacks
Two former cybersecurity incident responders were sentenced to four years in prison each for conspiring to extort U.S. companies through the BlackCat/ALPHV ransomware operation, working as affiliates from May to November 2023 with accomplice Angelo Martino. They shared about 20% of ransoms and targeted multiple U.S.…
New Bluekit phishing service includes an AI assistant, 40 templates
BlueKit debuts as a phishing toolkit with over 40 templates for services like Outlook, Gmail, iCloud, GitHub, and Ledger, plus an AI Assistant panel that supports models such as Llama, GPT-4.1, Claude, Gemini, and DeepSeek to draft campaigns. It offers end-to-end functionality—from domain purchase and phishing-page …
Romanian leader of online swatting ring gets 4 years in prison
Thomasz Szabo, a Romanian national who led an online swatting ring targeting more than 75 officials, journalists, and four religious institutions, was sentenced to four years in federal prison plus three years of supervised release after pleading guilty to conspiracy and explosives-threat charges. Extradited from Ro…
New Linux Copy Fail flaw gives hackers root on major distros
A new Linux local privilege escalation called Copy Fail (CVE-2026-31431) lets an unprivileged user gain root by performing a 4-byte write into the page cache via the AF_ALG crypto interface and splice(), affecting kernels back to 2017. The exploit has been demonstrated on Ubuntu 24.04 LTS, Amazon Linux 2023, RHEL 10…
Hackers Exploit Authentication Bypass Flaws in Qinglong Task Scheduler to Deploy Cryptominers
Hackers exploited two authentication-bypass flaws in Qinglong’s open-source task scheduler (CVE-2026-3965 and CVE-2026-4047) to deploy cryptomining on exposed servers, beginning in February before public disclosure. The issues stemmed from a mismatch between middleware authorization and Express.js routing, allowing …
Hackers arrested for hijacking and selling 610,000 Roblox accounts
Ukrainian police in Lviv arrested three hackers who hijacked over 610,000 Roblox accounts and sold them for about $225,000. The operation, led by a 19-year-old, used credential-stealing malware disguised as a game-enhancer to target high-value accounts, with ten searches yielding cash and electronic evidence. The su…
cPanel, WHM emergency update fixes critical auth bypass bug
cPanel and WHM issued an emergency update to fix a critical authentication bypass vulnerability that could grant unauthorized access to the hosting control panel. Admins must run the manual patch command (/scripts/upcp --force) to upgrade to patched builds (11.110.0.97, 11.118.0.63, 11.126.0.54, 11.132.0.29, 11.134.…
Austria and Albania shut Tirana call centres behind €50M crypto investment fraud
Eurojust and Europol helped Austria and Albania raid 3 Tirana call centres on 17 April 2026: 10 arrests, €891,735 cash seized, €50M+ in alleged losses.
Learning from the Vercel breach: Shadow AI & OAuth sprawl
The article examines how shadow AI and OAuth sprawl threaten enterprise security, using the Vercel breach as a cautionary tale. It shows how a simple OAuth connection to Context.ai allowed attackers to pivot into Vercel’s data when Context.ai was compromised. Shadow IT is framed as broader than shadow apps, includin…
GitHub fixes RCE flaw that gave access to millions of private repos
GitHub fixed a critical remote code execution flaw (CVE-2026-3854) that could have allowed attackers to read or write millions of private repositories with a single malicious git push. Reported by Wiz on March 4, 2026, GitHub reproduced and patched the issue on GitHub.com within hours, and patches were released for …
CISA orders feds to patch Windows flaw exploited as zero-day
CISA has ordered federal agencies to patch Windows endpoints against CVE-2026-32202, a zero-day that enables NTLM hash leakage in low‑complexity, remote code‑execution scenarios. The flaw stems from an incomplete patch for CVE-2026-21510 and has been linked to APT28 activity targeting Ukraine and EU networks. Agenci…
Microsoft Says Backend Change Broke Teams Free Chat and Calls
Microsoft confirms a backend change for Teams Free is causing chat and call failures for new users by skipping onboarding and privacy screens, leaving profiles as “Unknown” and unsearchable. Labeled a service degradation, the issue first appeared April 8 with regions and scope still unclear, and Microsoft says it wi…
Video service Vimeo confirms Anodot breach exposed user data
Vimeo has disclosed that data from some customers and users was accessed in the wake of the Anodot breach. The exposed information reportedly includes email addresses for some users, plus technical details, video titles, and metadata, with no video content, credentials, or payment card data affected. The incident is…
US reportedly charges Scattered Spider hacker arrested in Finland
A 19-year-old dual U.S.-Estonian citizen, online alias Bouquet, was arrested in Helsinki on April 10 while trying to fly to Japan and now faces U.S. charges as a member of the Scattered Spider hacking group. Prosecutors allege he helped breach multiple high-profile targets and extort millions in ransoms, with incide…
Showing 20 of 485 articles