The Edge of the Cyber World See the latest
Manchester Airports Group (MAG) has confirmed that hackers demanded a ransom after breaking into systems tied to Manchester, London Stansted and East Midlands airports, and that the company refused to pay. The disclosure, made public on August 27, 2026 and still developing as of August 29, shifts the story away from the raw scale of…
Every enterprise security team eventually hits the same wall: dozens, sometimes thousands, of vendors touching sensitive data, and no realistic way to audit each one by hand. That’s the gap that security ratings platforms were built to close, and in 2026 three vendors dominate the conversation whenever a CISO asks “which third-party risk management (TPRM)…
Hasbro has confirmed that attackers accessed the personal and financial information of an undisclosed number of employees, months after the toy giant first disclosed a network intrusion to federal regulators. The company began mailing breach notification letters this week, and filings with the Massachusetts Attorney General’s Office show at least 436 employees in that state…
A cybercriminal operating under the alias “TheHatman” is selling roughly 3.6 million employee-directory records allegedly pulled from the Microsoft Azure and Entra ID tenants of nine large companies, according to cybercrime intelligence firm Hudson Rock. The victim list includes McDonald’s, Vodafone, Tata Consultancy Services (TCS), Kyndryl, HCL Technologies, InterContinental Hotels Group (IHG), Gap Inc., Hexaware…
McKesson Corporation, the pharmaceutical distribution giant that moves roughly a third of the prescription drugs sold in the United States, confirmed on August 28, 2026, that it suffered a cybersecurity incident involving unauthorized access to third-party applications and theft of data. Hours after the disclosure, the extortion group ShinyHunters told BleepingComputer it had pulled roughly…
A ransomware crew that built its reputation on mass file-transfer hacks has pulled off something different this month. Cl0p, the extortion group behind the 2023 MOVEit breach, has spent August 2026 naming Shell, Philips, General Electric, Fiserv and roughly 45 other companies on its dark-web leak site. The common thread isn’t a shared vendor for…
OpenAI and more than 100 partner companies published an open letter on August 27, 2026, warning that AI models could within months become powerful enough to let attackers launch sharply more sophisticated cyberattacks against hospitals, water treatment plants, and other critical infrastructure, according to Fox Business. The letter calls for a coordinated global defense push…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to its Known Exploited Vulnerabilities (KEV) catalog following reports that a Chinese-speaking threat actor weaponized the vulnerability to target a nuclear research body in the Philippines. The vulnerability, tracked as CVE-2023-49105 (CVSS score: 9.8), is a case of
The advisory arrived from CISA on August 12, 2026, and it read like most of the ones before it: patch known exploited vulnerabilities, keep offline immutable backups, and segment the network so a single infected laptop can’t become a company-wide outage. That last instruction is the one most organizations still skip. The NIST Zero Trust…
Russian-speaking cybercriminals spent seven weeks this spring running a coding assistant like a junior pentester, and it worked. According to an exclusive Reuters report published August 27, 2026, and a companion investigation from Tel Aviv-based Gambit Security, an affiliate of the Aurora ransomware operation used the AI agent inside Cursor, the code editor SpaceX now…
