Security researchers are currently seeing CVE-2022-22718 being exploited in the wild. This CVE was patched by Microsoft as apart of Patch Tuesday updates on February 8, 2022. However, some organizations delay patches or do not keep up with patch management. CISA is warning organizations that attackers are abusing this vulnerability.
Link: https://thehackernews.com/2022/04/hackers-exploiting-recently-reported.html
Fear Is the Dependency Killer. The “Mini Shai-Hulud” attack highlights how modern software supply chain threats are evolving beyond stolen developer credentials into direct compromise
Hackers Steal Students’ Data During Breach at Education Tech Giant Instructure Article Link: https://techcrunch.com/2026/05/05/hackers-steal-students-data-during-breach-at-education- tech-giant-instructure/ DigiCert Revokes Certificates After Support Portal Hack Article Link: https://www.securityweek.com/digicert-revokes-certificates-after-support-portal-hack/
