Related posts:

1. High-Severity WatchGuard Agent Flaws Grant Full SYSTEM Privileges on Windows
2. Under Attack: Cisco Urges Immediate Action as Hackers Actively Exploit SD-WAN Manager Flaws
3. Unauthenticated Takeover: Critical 9.6 CVSS Zoom Flaw Exposes Windows Users to Remote Privilege Escalation

Related posts:

1. Unmasking Silver Dragon: The Chinese-Nexus APT Haunting Southeast Asia and Europe
2. Gaslighting Android: How the ‘Digital Lutera’ Attack Uses LSPosed to Bypass UPI SIM-Binding
3. The End of the Static Era: Trellix Uncovers Fully Fileless Remcos RAT Campaign

Related posts:

1. Infiltrating the Infiltrators: Inside the Florida “Laptop Farm” and the DPRK’s Failed Strike on a Cyber Firm
2. The “Laptop Farm” Fallout: Two NJ Men Sentenced for Facilitating $5M North Korean Work Scheme
3. DOJ Dismantles North Korean IT Job Scam: Stolen Identities & Laundering Funded DPRK Weapons

Related posts:

1. The Mutable Tag Trap: Critical 9.4 CVSS Attack on Xygeni GitHub Action Exposes CI/CD Pipelines
2. Waking the Sleepers: The BufferZoneCorp Campaign Poisoning Ruby and Go Ecosystems
3. Hackers Impersonate Stripe.net to Hijack the Global Payment Supply Chain

Related posts:

1. Cisco Talos Q2 Report: Phishing & Ransomware Dominate, with Qilin Using Deprecated PowerShell 1.0
2. The Dark Side of Telegram: How Cybercriminals Weaponize Bot APIs for Stealthy Data Exfiltration
3. The Compliance Trap: How a 13,000-Org Phishing Wave Bypasses MFA via AiTM Proxying

Related posts:

1. AI Hype Hijacked: How a Fake Claude Installer Blinds Windows Security
2. Exploited in the Wild: Interlock Ransomware Weaponizes Critical 10.0 CVSS Cisco Zero-Day
3. Copyright Lures and “Fileless” Shadows: Inside the PureLog Stealer Campaign

Related posts:

1. Copy Fail: Public PoC and Full Details Disclosed for the 732-Byte Linux Root Exploit (CVE-2026-31431)
2. Linux Kernel Flaw (CVE-2025-38236): Privilege Escalation Risk, PoC Code Available
3. Splunk Windows Flaws Expose Servers to System Takeover

Related posts:

1. Rancher Flaw Allows Malicious Plugins to Hijack Kubernetes Clusters
2. GitOps Security Breach: Critical 9.6 CVSS Argo CD Flaw Exposes Plaintext Kubernetes Secrets
3. Critical 9.0 CVSS Flaw in ArcadeDB Allows Total Cross-Database Access

Related posts:

1. Critical 9.3 CVSS Flaw in SiYuan Lets Hackers Steal Private Notes via SVG Injection
2. Exploited in the Wild: CISA Warns of Active Attacks on Microsoft SharePoint and Zimbra
3. High-Severity RCE and XSS Vulnerabilities Patched in Apache Storm 2.8.6

Related posts:

1. Exploited in the Wild: Critical PAN-OS Buffer Overflow Grants Root Access to Palo Alto Firewalls
2. CISA Adds Qualcomm and VMware Flaws to Known Exploited Catalog
3. Under Attack: Cisco Urges Immediate Action as Hackers Actively Exploit SD-WAN Manager Flaws

I've been working in cybersecurity for not so long, maybe 8 or 9 years, but I never remember a chaos at this scale. I mean, from this January alone we have: leaking data, compromised applications, breaches, AI-assisted cybercriminals, etc. It looks like every day one major breach is happening, and no one is going to address this shit somehow. This is already insane. I haven't felt such pressure in a long time. This AI shit just makes things worse because it enhances attackers' skills, and AI companies are doing nothing to address or change this. Is it only me, or is the change already here?

Could show a ton of screenshots but this one sums it up https://imgur.com/gallery/canvas-vuln-declared-n-11-months-ago-zYfHnBs

It showed enough PII from everyone in my course that it would have been cake to privilege escalate through even the most rudimentary social engineering.

Here's another screenshot with email replies (two months later) saying insturcture had no control over bootcampspot.instructure.com :: https://imgur.com/a/BnhgXme

So apparently Canvas got hacked by ShinyHunters (3?!) times and is currently completely down. The cybercriminal group said the deadline is on May 12st, and if Instructure doesn't comply, they'll leak the PII of all students and teachers. I'm not a cybersecurity major, and I don't know much about Canvas, but how much will we be affected if no deal is reached? Like, how much information is typically stored on Canvas, and will they be able to figure out more through what is available in the system? I'm genuinely concerned....

Anyone who knows how to know if my information is hacked by SH from the Canvas site? Is there a website where i can find the info?

Thank you.

I run a few small SaaS platforms and static websites.

When my websites were first launched, I didn't pay much attention because there were only very basic scanning attempts, like trying to load WordPress wp-admin.php pages.

However, starting a few weeks ago, I've noticed attempts to perform SQL injections or extract server information through feedback forms, login forms, and other POST requests.

These requests are coming in every hour. After checking hundreds of log entries, they seem to follow the same patterns as Burp Suite’s automated scanning features. When I double-checked with Claude, it also suggested these look like scans from Burp or ZAP. (I've attached images of two log entries: https://cln.sh/VSw3xy6Q)

About once a week, in addition to these automated requests, I occasionally see attacks that aren't automated scans but seem to actually consider the website's structure. (Last week, there was a 30-minute attempt specifically trying to bypass the CAPTCHA on the login form.)

I'm very interested in cybersecurity, but since I'm just a student still learning and without professional experience, I'm not very familiar with attack attempts or patterns on live services. So, I have a few questions:

1. Are attack attempts common even for small websites (less than 50 daily visitors)?
2. I understand that Cloudflare blocks most SQL injection attempts before they even reach the server. Is this feature actually effective in practice?
3. Besides these two questions, if anyone working in this field has any tips or other useful info, I’d really appreciate it if you could share.

Lastly, this post might feel a bit awkward or sound like it was written by an AI. I live in a non-English speaking country and my English isn't great, so I used a translator for this post. Please bear with me.