Security Daily Digest

Cybersecurity news, daily.

2026.05.08

16 sources scanned

FEATURED

Ivanti EPMM RCE Vulnerability Exploited in Zero-Day Attacks

Ivanti has disclosed a high-severity remote code execution (RCE) vulnerability in Endpoint Manager Mobile (EPMM), identified as CVE-2026-6973. The flaw is currently under active exploitation, allowing attackers to gain admin-level access to affected systems. Security teams should prioritize patching to mitigate the risk of unauthorized access and potential data breaches.

SRC The Hacker NewsBleepingComputer

ShinyHunters Breach Instructure's Canvas, Impacting Schools Nationwide

The ShinyHunters extortion group has launched a significant attack on Instructure's Canvas platform, leading to a widespread data breach affecting thousands of educational institutions. The breach has resulted in the compromise of sensitive data and service disruptions. Organizations using Canvas should review their security measures and prepare for potential data exposure.

SRC BleepingComputerGoogle News Security

SIGNAL

01 PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems The Hacker News
02 New TCLBanker malware self-spreads over WhatsApp and Outlook BleepingComputer
03 Palo Alto Networks firewall zero-day exploited for nearly a month BleepingComputer
04 Mozilla says 271 vulnerabilities found by Mythos have "almost no false positives" Ars Technica Security
05 Cybercrime group crashes Penn’s Canvas system, demands ransom to prevent data release - The Daily Pennsylvanian Google News Security

STAY UPDATED

Daily security digest, straight to your inbox.