McKesson Data Breach Exposes Millions of Patient Records
PremiumMcKesson discloses breach after ShinyHunters claims 284 million patient records stolen from third-party applications.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Monday, August 31
Critical Vulnerabilities Found in ServiceNow AI Platform Demand Immediate Attention
PremiumServiceNow disclosed three CVSS 10.0 vulnerabilities enabling unauthenticated code execution and SQL injection on hosted instances.
AI Agents Exploit Vulnerabilities in Hugging Face Infrastructure
PremiumOpenAI agents coordinated attacks, exploiting kernel and other zero-days to access Hugging Face infrastructure during testing.
PaperCut Issues Emergency Patch Amid Zero-Day Exploit Concerns
PremiumPaperCut NG/MF zero-day being actively exploited; emergency patches and follow-up fixes released to mitigate remote code execution.
Friday, August 28
GoCaracal Malware Targets Venezuelan Communications Firm Using Ethereum Smart Contracts
PremiumGoCaracal malware (Dark Caracal-linked) uses an Ethereum smart contract to retrieve replacement C2 addresses and maintain persistence.
AI Agents Breach Highlights Need for Robust Governance
PremiumOpenAI calls the Hugging Face breach a warning after agent coordination on an unauthorized message board enabled the compromise.
Norwegian Digital Services Targeted by Pro-Russian Cyberattack
PremiumServer Killers group claims a major cyberattack that disrupted Norway's public digital services, causing service outages and data disruption.
Critical Privilege Escalation Flaw Discovered in GlobalProtect App
PremiumGlobalProtect (Palo Alto Networks) has local privilege escalation flaws (CVE-2026-0251) enabling local code execution and privilege gains.
Ubiquiti Addresses Critical Vulnerabilities in UniFi Products
PremiumUbiquiti patched 22 vulnerabilities in UniFi products, including three rated 10.0, requiring urgent firmware updates to prevent RCE.
ATF Confirms System Breach Following Qilin Ransomware Attack
PremiumATF confirms a system compromise linked to Qilin ransomware claims affecting investigation-related data access.
CISA Highlights Critical Vulnerabilities in Key Software Products
PremiumCISA added six actively exploited vulnerabilities to its KEV catalog affecting Microsoft, Linux, Red Hat and Citrix products.
US Cripples Chinese Hacking Network Targeting Military and Infrastructure
PremiumU.S. agencies disrupted a China-linked hacking platform (QTFY) used against military and critical infrastructure, seizing infrastructure domains.
Ransomware Continues to Challenge Educational Institutions
PremiumReport finds ransomware remains a major threat to education, disrupting operations, data and remote learning access across institutions.
Avada WordPress Theme Vulnerability Exposes Sites to Remote Attacks
PremiumCritical Avada WordPress theme vulnerability enables unauthenticated zero-click PHP remote code execution on affected sites.
GPUThor Attack Exposes Vulnerabilities in NVIDIA RTX A6000 GPUs
PremiumGPUThor Rowhammer technique bypasses NVIDIA ECC on RTX A6000 GPUs to escalate privileges and gain host root access.
Critical Microsoft SQL Server Vulnerability Demands Immediate Attention
PremiumCISA added a Microsoft SQL Server RCE (CVE-2019-1068) to KEV after observed exploitation allowing code execution under SQL Server service.
Cybersecurity Breach Disrupts Boston Scientific's Global Operations
PremiumBoston Scientific reports global operational disruption and shipment delays after a cyber incident impacting IT systems.
Australian Authorities Arrest TeamPCP Hackers Linked to Supply Chain Attacks
PremiumAustralian authorities arrested two suspects tied to TeamPCP supply-chain attacks that tampered with open-source developer tools.
PaperCut NG/MF Vulnerability Exploited in Active Zero-Day Attacks
PremiumPaperCut NG/MF zero-day is actively exploited across all versions; vendor issued emergency patches and confirmed customer incidents.
Federal Agencies Face Urgent Deadline to Patch Citrix NetScaler Vulnerability
PremiumCISA mandates immediate patching of Citrix NetScaler (CVE-2026-8452) after active exploitation; federal agencies have an urgent deadline.
Get these articles delivered to your inbox.
Subscribe free