Daily Recap, McKesson confirmed a breach after ShinyHunters claimed theft of 284 million patient records, while ATF acknowledged a major incident tied to recent Qilin claims; separate reporting also alleged FulcrumSec hacked Manchester Airports and stole 86 GB of data. In other updates, ServiceNow patched three critical code-injection flaws (with Nightmare Eclipse dropping a HardBreacher exploit tied to a Kaspersky product), AWS Console Private Access gained the ability to block sign-ins to personal accounts, and Finland revived its case against Eagle S officers over cable breaks. #McKesson #ShinyHunters #ATF #Qilin #FulcrumSec #ManchesterAirports #ServiceNow #NightmareEclipse #HardBreacher #Kaspersky #AWSConsolePrivateAccess #EagleS
Breaches & Extortion
- McKesson confirmed a data breach as ShinyHunters claimed theft of 284 million patient records, while ATF also acknowledged a major incident amid recent Qilin claims and FulcrumSec said it hacked Manchester Airports and stole 86 GB of data β McKesson Breach, ShinyHunters Claim, ATF Incident, Airport Hack
- Nigerian nationals were extradited to the U.S. over sextortion cases tied to the deaths of two teens, underscoring ongoing cross-border cybercrime enforcement β Sextortion Case
Vulnerabilities & Patches
- ServiceNow patched 3 critical code-injection flaws, Nightmare Eclipse dropped a HardBreacher exploit targeting a Kaspersky product, and a broader roundup highlighted a new SharePoint RCE chain plus other active threats β ServiceNow Patch, HardBreacher Exploit, ThreatsDay Roundup
- Security teams are being urged to prioritize flaws using KEV, EPSS, and CVSS together when the signals disagree β Prioritization Guide
Cloud & Endpoint Security
- AWS Console Private Access can now block sign-ins to personal accounts, while Microsoft told users to ignore misleading βAntivirus is turned offβ errors β AWS Access, Microsoft Alert
AI & Security Tools
- Halo-record introduced tamper-evident audit trails for AI agents using hash-chained logs, while the AI Kill Switch Act was criticized for repeating the mistakes of the Clipper Chip β Halo-record, AI Kill Switch
- OpenClaw 2.0 now stores sessions in SQLite, improving how the open-source tool records and manages session data β OpenClaw 2.0
Infrastructure & Legal
- Finland revived its case against Eagle S officers over cable breaks, keeping the maritime infrastructure investigation active β Eagle S Case