Cybernews researchers discovered that attackers targeted numerous universities worldwide, attempting to compromise their login systems and access students’ and teachers’ personal data. The attack was carried out by exploiting QuickLaunch, an AI-powered tool that helps colleges and universities manage student and staff sign-ins to school systems and access to online services.
Key information:
- At least 42 universities were identified as possible QuickLaunch-related targets, and 40 more were listed as using a different sign-on setup.
- Attack summaries in the Mandarin language point to Chinese hackers.
- The discovered server stored a large dataset linked to QuickLaunch environments, including roughly 32,400 unique user records across 1,079 domains, with names, email addresses, and user IDs.
- The CVE-2024-7097 vulnerability allowed attackers to create unauthorized accounts via the QuickLaunch API, gaining a foothold in the environment.
- In this specific case, the affected educational institutions face risks beyond just account compromise.
For more information, here’s the full report:
https://cybernews.com/security/hackers-universities-login-data-leak
Related
This entry was posted on October 22, 2026 at 8:57 am and is filed under Commentary with tags Cybernews. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Hackers target dozens of universities in a possible QuickLaunch system exploit
Cybernews researchers discovered that attackers targeted numerous universities worldwide, attempting to compromise their login systems and access students’ and teachers’ personal data. The attack was carried out by exploiting QuickLaunch, an AI-powered tool that helps colleges and universities manage student and staff sign-ins to school systems and access to online services.
Key information:
For more information, here’s the full report:
https://cybernews.com/security/hackers-universities-login-data-leak
Share this:
Like this:
Related
This entry was posted on October 22, 2026 at 8:57 am and is filed under Commentary with tags Cybernews. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.