Category: Cyber Security News

Coca-Cola confirmed that hackers stole data from its Fairlife dairy subsidiary during a ransomware attack that disrupted production and affected some systems. The Anubis ransomware gang claimed responsibility, threatened to leak stolen files, and has now made the data available after its extortion deadline expired. #CocaCola #Fairlife #Anubis

Three plaintiffs allege they lost about $1.8 million in Bitcoin after downloading a fake Sparrow Wallet app from Apple’s App Store and entering their seed phrases. The lawsuit claims Apple failed to stop repeated scams impersonating Sparrow Wallet, even after earlier warnings, and asks the company to improve fraud detection and warn users about crypto app risks. #SparrowWallet #AppleAppStore #JamesRamirez #ChristopherEllis #JalenDelgado

Sen. Ron Wyden urged federal leaders to eliminate legacy internet-facing VPNs and replace them with modern remote-access technology and zero-trust architecture. He said agencies must stop relying on insecure VPN appliances that have been repeatedly targeted in incidents involving Cisco, Fortinet, Ivanti, and Check Point. #Cisco #Fortinet #Ivanti #CheckPoint #ArcaneDoor #FortiBleed

Public exploit details published on July 27 describe CVE-2026-61511, an unauthenticated remote code execution flaw in vBulletin’s template engine that can reach PHP’s eval() and execute commands on unpatched forum servers. Although vBulletin had already patched affected self-hosted branches and released vBulletin 6.2.2 weeks earlier, defenders are still urged to monitor…

A Cl0p ransomware affiliate is exploiting CVE-2026-12569, a critical RCE flaw in PTC Windchill and FlexPLM, using chained vulnerabilities to gain access and deploy JSP webshells. The campaign targets aerospace, automotive, manufacturing, and retail/apparel organizations for data theft and extortion. #Cl0p #PTC #Windchill #FlexPLM #CVE-2026-12569…

GitHub and PyPI have rolled out new measures to reduce supply chain attacks by slowing the spread of poisoned package releases and blocking tampering with older stable versions. GitHub’s Dependabot now waits three days before opening pull requests for new non-security releases, while PyPI restricts new file uploads to releases older…

Shadow AI agents are being created across tools like Salesforce Agentforce, Microsoft Copilot Studio, Cursor, Zapier, and Retool without IT or security visibility. Nudge Security helps discover these agents, assess their risks, and govern them without slowing down employees. #SalesforceAgentforce #MicrosoftCopilotStudio #Cursor #Zapier #Retool #NudgeSecurity

Coca-Cola confirmed that the ransomware attack on its Fairlife subsidiary led to a data breach after the Anubis group claimed to have stolen 1 TB of data and encrypted systems. The company says most production has resumed at its U.S. Fairlife facilities, with retail availability and product safety largely unaffected. #CocaCola…

Nvidia and a broad coalition of companies launched the Open Secure AI Alliance to build and share open source tools, models, and techniques for securing AI systems and agents. The alliance highlights projects such as NOOA, SPIFFE/SPIRE, Lightwell, MDASH, and Grok Build, while urging policymakers to avoid restricting open frontier AI…

MedusaHVNC is a malware-as-a-service RAT that uses a hidden Windows desktop to run a browser and interact with the system without the user seeing it. BlackFog found that it relies on a multi-stage infection chain, encrypted payloads, persistence in the Startup folder, and a hardcoded C2 address to stay stealthy and…

MCBS, an Atlanta-based medical business management company, disclosed a breach that affects more than 1.2 million people after hackers accessed its systems in September 2025 and may have stolen sensitive personal and medical data. The PEAR ransomware group claimed responsibility, saying it exfiltrated over 3 TB of files and also boasted…

GitHub and PyPI have added time-based safeguards to make supply-chain attacks harder, with Dependabot now using a default three-day cooldown and PyPI blocking new files on releases older than 14 days. These changes follow a wave of attacks including chalk, debug, s1ngularity, Shai-Hulud, and GhostAction, and are designed to reduce the impact of compromised publishing workflows. #Dependabot #PyPI #chalk #debug #s1ngularity #ShaiHulud #GhostAction

Steam discussion forums are being abused in ClickFix attacks that lure users with fake fixes for game and Windows problems, but the commands actually install an XMRig cryptominer. The campaign uses fake Steam accounts, a disguised “msf utility PC Opt” script, and persistence through a scheduled task and Microsoft Defender exclusions to keep the miner running. #Steam #ClickFix #XMRig #msfconfigicu

SourTrade is a malvertising campaign that uses cloaked landing pages and per-session file assembly to make victims’ browsers build a Windows executable from components delivered through a legitimate Bun runtime. Confiant says the operation has targeted TradingView, Solana, and Luno users since late 2024 across 12 countries, with the final file…