Canadian Tire 2025 data breach impacts 38 million users
2026-03-04T21:45:10Z•6a0b103f3e590add17c0d5838ba3f71788d819bb38f0acd9b505636d7e3f18df
CVE-2026-21902.env-leakAIApex-OneIran-blackoutJuniperLOLBinsNATOPolygonRATRCETrend-Microblockchain-C2botnetdata-breachdata-exposuredefender-evasioniPadiPhoneincident-responseinternet-outagemalwareremote-code-executionsecurity-patchtrojanized-tools
What happened
Feed of Feb 26–28, 2026 security news: multiple large-scale data breaches and exposures (Canadian Tire — ~38M accounts; ManoMano — ~38M accounts via third‑party; 12M IPs exposing .env files). Critical vulnerabilities and patches: Juniper issued an emergency patch for a critical PTX router RCE (CVE-2026-21902, CVSS 9.3) and Trend Micro patched two critical Apex One RCE flaws. Active threats and techniques observed: trojanized gaming utilities delivering a stealthy RAT (PowerShell, LOLBins, Defender evasion) and the Aeternum botnet using Polygon smart contracts for decentralized C2. Other items:
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 6a0b103f3e590add17c0d5838ba3f71788d819bb38f0acd9b505636d7e3f18df
- Enrichment time
- 2026-03-04T21:45:10Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.