Frontline Education, a US edtech provider, has started telling school districts that attackers got into its systems through a flaw in third-party software and stole employee data. The stolen records include Social Security numbers.
Frontline sells administration and workforce management software and services to school districts. A reader passed BleepingComputer a breach notification the company had sent to one affected district, and administrators in other districts have since reported receiving similar letters.
A flaw in software Frontline did not build
According to the notification letter, Frontline's security team found the problem in mid-August.
"On August 14, 2026, our security team identified a vulnerability in a third-party software product we use that allowed unauthorized access to a portion of the environment," the letter reads.
Organizations are spending more on AI, yet attacks aimed at AI systems are the threat they feel least prepared for, according to new research from PwC.
The consultancy surveyed 3,934 business and technology leaders across 71 countries between May and July 2026. Among the security and technology executives in that group, half placed attacks on AI systems in their top five preparedness gaps. No other threat on the list ranked higher.
PwC's view is that frontier AI models can now discover previously unknown software flaws and exploit them with little human involvement. This report adds to earlier findings from the same survey on how ready companies are for emerging threats.
GitLab is urging customers who run their own AI Gateway to update now. The company fixed a critical vulnerability that could let an authenticated attacker execute arbitrary commands on the service.
The flaw is tracked as CVE-2026-90970. According to GitLab, an attacker needs only basic privileges and access to the Duo Agent Platform to exploit it on an unpatched instance.
What the AI Gateway does
AI Gateway is the component that connects GitLab users to the AI-native features of GitLab Duo, the company's set of AI-assisted development tools. GitLab runs its own cloud-based AI Gateway, which serves GitLab.com, GitLab Self-Managed and GitLab Dedicated customers.
The city of Vicksburg, Mississippi, has shut down its computer systems following a ransomware attack, Mayor Willis Thompson told residents on Thursday evening.
Thompson announced the incident in a statement published in the local newspaper. He said the city is investigating the attack and described the shutdown as "temporary." Emergency services have not been affected, but residents cannot currently pay their utility bills through the usual channels.
Vicksburg has more than 20,000 residents and lies about 40 minutes west of Jackson, the state capital.
No shut-offs or late fees during the investigation
To ease concerns about the payment disruption, the mayor said no one's services will be disconnected while the investigation continues. The city will also not issue penalties for late payments.
A newly documented macOS backdoor called CloudSyncD is reaching victims through a fake Zoom installer, according to researchers at Jamf. The malware gives attackers persistent, quiet access to infected Macs.
Jamf first came across CloudSyncD in mid-September, while it was still under development. Within a few days the researchers found more samples. These suggested the operators had finished testing and begun using the malware against real targets.
A disk image posing as Zoom
The attack depends on social engineering. Victims are persuaded or tricked into downloading what looks like a Zoom installer for Mac. If they fall for it, they receive a disk image that mounts as a volume named Zoom.
Guy Fawkes News is financed by advertising. You can choose how you want to use this website:
With advertising: we load an advertising script from a third-party ad network. The ad network may set cookies, use your IP address and device information, and may process data outside the EU. We also count your visits for our own visitor statistics (with a random ID stored in your browser).
Ad-free for €0.99 per month: no advertising and no advertising tracking. Cancel at any time.
You can change your decision at any time via "Cookie Settings" at the bottom of every page.
