Canvas login portals hacked in mass ShinyHunters extortion campaign

Multiple high-impact threats and active campaigns reported: ShinyHunters defaced hundreds of Canvas login portals at Instructure in an extortion campaign; critical zero-days and exploited RCEs were disclosed (Palo Alto PAN-OS under active exploitation, Ivanti EPMM zero-day) alongside a critical vm2 sandbox escape allowing host code execution; malware campaigns and worms observed include TCLBanker (self-spreading via trojanized MSI, WhatsApp and Outlook propagation), PCPJack (credential theft and removal of rival access), Vidar stealer distributed via ClickFix social engineering, and a new Beag