TechLogHub Blog — Page 8 of 25
Insights, guides, and product strategy for builders and product teams.
Ex-school district employee jailed for hacks on former employer
Former Saydel Community School District IT employee Ezekiel Dean Potter, 34, was sentenced to 21 months in federal prison for a 21-month post-employment cyberattack that disrupted classes, deleted accounts, and cost tens of thousands in remediation; he pleaded guilty in January 2026 and was ordered to pay $59,668.81…
phpBB forum fixes auth bypass bug lurking for a decade
A decade‑old authentication bypass in phpBB has been disclosed, allowing an attacker to log in as any user—including administrators—with a single HTTP request. The flaw affects phpBB versions 3.3.16 and 4.0.0-a2 (and earlier) and was discovered by Aikido on June 2, 2026; phpBB issued a fix on June 6 in version 3.3.1…
Maine disables data breach notification portal after fake disclosures
Maine has temporarily disabled its public data breach notification portal after fraudulent disclosures were posted, including fake notices involving VRChat and Discord. The Maine Attorney General’s Office confirmed the reports were hoaxes, removed them, and is reviewing procedures to prevent future abuse. While comp…
Ukrainian national pleads guilty to role in Conti ransomware operation
A Ukrainian national extradited from Ireland to the United States pleaded guilty to conspiracy to commit wire fraud in connection with the Conti ransomware operation, admitting to joining the group in September 2021 and possessing data stolen from eight U.S. victims and four overseas victims. He helped code a loader…
Over 400 Arch Linux packages compromised to push rootkit, infostealer
More than 400 Arch User Repository (AUR) packages were compromised by a threat actor who spoofed a trusted maintainer to push infected updates. The attackers inserted preinstall scripts that download a malicious npm package, atomic-lockfile, whose Linux ELF payload functions as a credential stealer and includes an o…
Early Warning Signs of Supply-Chain Attacks Live in the Dark Web
Early warning signs of software supply-chain attacks are already appearing in dark-web forums and marketplaces, often not labeled as such but involving GitHub access, private repositories, source code, API keys, OAuth tokens, cloud credentials, and CI/CD data. The article emphasizes that the risk lies in where acces…
Microsoft Fixes Windows Update Failures Linked to WUSA Installer
Microsoft has fixed a WUSA update failure that affected updates released since May 2025 when installed from network shares. The issue impacted Windows 11 24H2/25H2 and Windows Server 2025 on enterprise networks, but not local or single .msu installations. The fix is included in the June 2026 Patch Tuesday cumulative…
Novo Nordisk Discloses Breach of Clinical Trials Data
Novo Nordisk disclosed a data breach affecting patient data from some clinical trials, with attackers gaining access to internal IT systems and copying non-public data including pseudonymized patient IDs, trial participation details, demographics, biomarkers, health data, and lifestyle factors. The company says this…
Maine breach portal abused to publish fake data breach disclosures
A misinformation campaign led to fake data breach disclosures being posted to Maine’s breach portal, including a bogus VRChat notice. VRChat denies submitting the notice and says the cited employee does not exist, with the company seeking removal from the portal. Maine’s Attorney General’s Office confirmed the porta…
Oracle mitigates PeopleSoft zero-day exploited in data theft attacks
Oracle warns of a critical zero-day in PeopleSoft PeopleTools (CVE-2026-35273, CVSS 9.8) that enables unauthenticated remote code execution and is linked to ShinyHunters data-theft attacks, affecting PeopleTools versions 8.61 and 8.62. Emergency mitigations are in place with a patch coming soon. While Oracle hasn’t …
AudiA6 crypto laundering service taken down: €336M allegedly washed for ransomware gangs
On 10 June 2026 police in Georgia arrested two alleged AudiA6 admins. Europol says the mixer laundered €336M+ for ransomware gangs, linked to 15+ probes.
Why AI-driven threats are exposing the limits of MSP security stacks
AI-driven threats are accelerating attack timelines and exposing the weaknesses of fragmented MSP security stacks. To keep pace, MSPs need unified, AI-powered security platforms that tightly integrate detection, automation, and recovery, reducing tool sprawl and speeding response. Kaseya argues that platforms like K…
Microsoft patches Exchange Server zero-day exploited in attacks
Microsoft patched CVE-2026-42897, a high-severity cross-site scripting vulnerability in Exchange Server that attackers could exploit by sending a crafted email to a user; when opened in Outlook Web Access under certain conditions, arbitrary JavaScript could run in the browser. The flaw affects Exchange Server 2016, …
The 5 Best Practices for Secure Identity Verification
Sponsored content highlights five best practices to strengthen identity verification amid rising credential theft (up 160% in 2025): deploy fatigue-resistant MFA with phishing-resistant methods; secure the service desk from social engineering; integrate device trust into authentication decisions; explore passwordles…
China-Linked JDY Botnet Expands Targeting of U.S. Military Networks
Black Lotus Labs warns that the China-linked JDY botnet has expanded its reach in the United States, with a focus on military networks and a growing pool of compromised SOHO and IoT devices (over 1,500, up from about 650 in January 2024). Rather than a traditional DDoS botnet, JDY functions as a distributed scanning…
Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks
Security researchers are tracking a widespread data-theft campaign against Oracle PeopleSoft servers by the ShinyHunters gang, claiming access to about 300 instances across more than 100 organizations, many in the education sector. The attackers are using a mix of old vulnerabilities and zero-days, issuing extortion…
GitHub announces npm security changes to tackle supply-chain attacks
GitHub has unveiled npm v12 with security-focused changes aimed at stopping supply-chain attacks by requiring explicit approval for scripts and non-registry dependencies during npm install. The updates disable automatic execution of preinstall/install/postinstall scripts, block automatic resolution of Git-based depe…
The Miasma worm source code briefly leaked on GitHub
Security researchers warn that Miasma—a credential-stealing attack framework that evolved from Shai-Hulud—was briefly leaked on GitHub via compromised accounts. The self-propagating malware harvests cloud, CI/CD, and secret-store credentials to taint npm, PyPI, and RubyGems packages—as well as GitHub repositories an…
Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days
Microsoft patched three zero-day vulnerabilities on the June 2026 Patch Tuesday: GreenPlasma and MiniPlasma, two privilege-escalation flaws in the Collaborative Translation Framework and Cloud Files Mini Filter Driver that can yield a SYSTEM shell on patched Windows (CVE-2026-45586 and CVE-2020-17103); and YellowKey…
Path traversal flaw in AI dev platform Langflow exploited in attacks
Security researchers warn that CVE-2026-5027, a high-severity path traversal vulnerability in Langflow, is being actively exploited to write arbitrary files on exposed servers via the POST /api/v2/files endpoint. The flaw stems from improper sanitization of the filename in multipart form data, and Langflow’s default…
Showing 20 of 485 articles