Infinite Campus breached and more - Mar 29, 2026

Featured

Infinite Campus warned of a student data breach following an extortion attempt by ShinyHunters

The vulnerability can be used by attackers to gain unauthorized access to ScreenConnect

This Week’s Updates

Breaches

Mazda disclosed a breach exposing employee and business partner personal data

Dutch Ministry of Finance confirmed a cyberattack exposed employee data

HackerOne is notifying employees of a data breach stemming from a hack of its benefits administrator Navia

Ajax Amsterdam confirmed a breach exposing fan email addresses and personal data of a small number of stadium-banned individuals

Dutch National Police disclosed a limited breach caused by a phishing attack targeting employees

Vulnerabilities

PTC warned of a critical RCE vulnerability in Windchill and FlexPLM, urging immediate patching

Citrix released patches for new NetScaler flaws similar to the previously exploited CitrixBleed vulnerabilities

TP-Link patched a critical auth bypass in Archer NX routers allowing attackers to upload malicious firmware

Critical Magento RCE (PolyShell) actively exploited in 56% of vulnerable stores; Adobe beta patch available but no production release yet