The Edge of the Cyber World See the latest
McKesson Corporation, the Irving, Texas pharmaceutical distributor that moves roughly a third of the prescription drugs sold in the United States, has confirmed what the extortion group ShinyHunters spent the past week threatening to prove: its cloud systems were breached, and patient data went out the door. The confirmation, posted Friday, August 28, 2026, and…
The major healthcare sector vendor did not identify the attackers, but ShinyHunters, a prolific group increasingly targeting the sector, claimed responsibility. The post McKesson copes with fallout from data theft extortion attack appeared first on CyberScoop.
A threat actor used a variety of infostealers to collect session information and access Claude accounts belonging to an unknown number of users.
Berlin’s state government has crossed a line it spent two weeks trying to avoid. On August 31, 2026, officials confirmed that data was actually stolen from the city-state’s administrative network during the Rhysida ransomware attack, moving the story from “hackers claim” to “government admits.” BleepingComputer reported that forensic investigators pinpointed a confirmed data-exfiltration window between…
Threat actors with ties to the Democratic People’s Republic of Korea (aka DPRK or North Korea) have been observed seeking job opportunities beyond the information technology (IT) sector, with recent investigations identifying suspected workers employed in sales and marketing and the medical profession. The ongoing insider threat is part of what has been described as…
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-81578 PaperCut NG/MF Missing Authentication for Critical Function Vulnerability CVE-2026-82078 PaperCut NG/MF Unsafe Reflection Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal…
Bnei Brak, Israel, 31st August 2026, CyberNewswire The post Lunar Cyber Launches Token Exposure Monitoring as Infostealers Target Developer and AI Credentials first appeared on Tech Startups.
Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX’s artificial intelligence (AI)-powered coding assistant Cursor to break into target networks, according to findings from CloudSEK and Gambit Security. The two independent analyses are based on exposed infrastructure associated with the Russian-speaking cybercrime group, leading to the discovery of its
The threat actor known as Silver Fox has been observed distributing the ValleyRAT backdoor disguised as a signed Chinese adware application, running the malware under a trusted process to slip past users who add such software to their antivirus exclusions. Russian cybersecurity vendor Kaspersky said the attackers built the disguise around QN Wallpaper, a genuine…
The AI giant is logging customers out of their accounts and removing payment data to prevent unauthorized Claude usage. The post Anthropic Warns Claude Users of Infostealer Malware Infections appeared first on SecurityWeek.
