Page Header

A blind SQL injection in the APIExperts Square for WooCommerce WordPress plugin was reported ~34 minutes ago; site owners should inventory, isolate, patch or remove the plugin and follow ISO-aligned controls.

Magic Link in WSO2 Identity Server can be driven to consume all memory and cause service unavailability; immediate checks, rate limiting and vendor contact advised.

ShinyHunters claim a ransom after a reported breach of Canvas affecting roughly 275 million students and 9,000 institutions; immediate supplier engagement, forced credential resets and ISO-aligned steps advised.

ShinyHunters claimed responsibility for a Canvas incident affecting almost 9,000 schools, with outages and personally identifying information reported; urgent supplier checks, log preservation and backup testing are immediate priorities.