Data breach at edtech giant McGraw Hill affects 13.5 million accounts

Published on April 16, 2026

The ShinyHunters extortion group has leaked data from 13.5 million McGraw Hill user accounts, stolen after breaching the company's Salesforce environment earlier this month. [...]

Continue reading on website
Other news

Hidden Passenger? How Taboola Routes Logged-In Banking Sessions to Temu

April 16, 2026
A bank approved a Taboola pixel. That pixel quietly redirected logged-in users to a Temu tracking endpoint. This occurred without the bank’s knowledge, without user consent, and without a single security control registering a violation.Read the full technical breakdown in the Security Intelligence Brief. Download now →The "First-Hop Bias" Blind SpotMost&

Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks

April 16, 2026
A "novel" social engineering campaign has been observed abusing Obsidian, a cross-platform note-taking application, as an initial access vector to distribute a previously undocumented Windows remote access trojan called PHANTOMPULSE in attacks targeting individuals in the financial and cryptocurrency sectors.Dubbed REF6598 by Elastic Security Labs, the activity has been found to leverage