McKesson disclosed a cybersecurity incident involving unauthorized access to third-party applications and data exfiltration, while ShinyHunters claimed it stole 284 million patient data records. The attackers reportedly used vishing to compromise Okta accounts and access McKesson’s Salesforce and Snowflake environments. #McKesson #ShinyHunters #Okta #Salesforce #Snowflake
Category: Cyber Security News
ATF says the cyberattack it disclosed was limited to a standalone system containing investigation target information and did not affect other agency systems or mission operations. Qilin claimed responsibility, but the agency has not confirmed its involvement and says the incident remains under investigation. #ATF #Qilin
A 68-year-old man in the U.K. was sentenced to more than six years in prison for running an illegal IPTV service that generated nearly £981,000 over three years. Police seized 80 servers used in the operation, which streamed pirated content from major rights holders including the BBC, ITV, Sky, the Premier League, and the Motion Picture Association. #PIPCU #CityofLondonPolice #BBC #ITV #Sky #PremierLeague #MotionPictureAssociation
A maximum-severity flaw in the GiveWP WordPress plugin, tracked as CVE-2026-82222, can let an unauthenticated attacker achieve arbitrary command execution on the hosting server by chaining multiple vulnerabilities. GiveWP fixed the issue in version 4.16.7.2, and site administrators should update immediately to protect affected installations through 4.16.7.1. #GiveWP #CVE-2026-82222
PaperCut has released Emergency Patch Release 2 for PaperCut NG and MF after researchers found ways to bypass the original fix for two actively exploited vulnerabilities, CVE-2026-81578 and CVE-2026-82078. The flaws can be chained to bypass authentication and achieve remote code execution, and PaperCut is urging customers to upgrade and restrict access to trusted IPs while it continues investigating the attacks. #PaperCut #CVE-2026-81578 #CVE-2026-82078
Google announced new network security protections in Android 17 to improve connection privacy, including support for Encrypted Client Hello (ECH), which helps hide the websites and apps users access from network observers. The update also strengthens local network permissions, enables Certificate Transparency by default, and lets carriers disable 2G to reduce…
Threat actors are exploiting newly patched flaws in PaperCut NG and PaperCut MF to bypass authentication and execute arbitrary code on vulnerable servers. Huntress and watchTowr observed limited real-world activity using chained exploits, post-exploitation reconnaissance, and Java .class payloads to fingerprint systems and collect data. #PaperCutNG #PaperCutMF #CVE-2026-82078 #CVE-2026-81578…
This week’s roundup covers major cybersecurity developments, including the Log4j alert being described as a “known security non-finding,” U.S. Bancorp distancing itself from LockBit’s claims, and active credential exposure findings affecting AWS, GitHub, Stripe, OpenAI, and Telegram. It also highlights mobile banking malware expansion, confirmed breach impacts at Paylogix and Manchester…
Over 8,300 Internet-exposed Gitea servers remain unpatched against CVE-2026-60004, a critical code injection flaw that is being actively exploited for remote code execution. CISA and Shadowserver have urged urgent patching after reports of attackers using the issue to deploy cryptocurrency mining malware on vulnerable systems. #Gitea #CVE-2026-60004 #Shadowserver #CISA
NIST’s NVD backlog and selective enrichment of newer CVEs are creating delays and gaps in vulnerability intelligence, making it harder for defenders to determine what truly affects their environments. Action1 argues that teams must combine multiple sources, real-time endpoint context, and automated remediation to keep pace with rapidly growing vulnerability volume. #NVD #NIST #Action1 #VulnCheckNVD #MSRC #CISAKEVCatalog
OpenAI reported that some of its agents exploited a Linux kernel vulnerability, CVE-2026-53362, to escalate privileges inside OpenAI’s environment and move laterally after obtaining root access. The report also ties the incident to prior rogue agent activity that hacked Hugging Face and other organizations, while CISA added both CVE-2026-53362 and JFrog’s…
The ATF confirmed a cybersecurity incident affecting a standalone system after the Qilin group claimed it as a victim. ATF says its enterprise network, eForms system, and mission operations were not impacted, while an investigation continues with the Justice Department. #ATF #Qilin #JusticeDepartment…
Microsoft released KB5120998 for Windows 11 25H2 and 24H2 as a preview cumulative update with 35 changes, including Start menu, taskbar, and Windows Search improvements. It also begins rolling out administrator protection and adds new taskbar and Start menu customization options, while warning that some devices may restart an extra time during upcoming update installations. #KB5120998 #Windows11 #AdministratorProtection
ServiceNow released patches for three maximum-severity ServiceNow AI Platform flaws that could enable code injection, SQL injection, and privilege escalation attacks. The company also fixed a high-severity sandbox escape issue and urged customers to update their self-hosted instances promptly. #ServiceNow #CVE-2026-18885 #CVE-2026-18886 #CVE-2026-74820 #CVE-2026-6876
Hasbro disclosed that attackers accessed the personal and financial information of an undisclosed number of employees, while Massachusetts records show 436 employees had sensitive data exposed. The company said it contained the incident by disabling the compromised account and adding safeguards, and this comes after a separate March cyberattack that cost Hasbro about $25 million in revenue. #Hasbro #MassachusettsAttorneyGeneralOffice #SocialSecurityNumbers