Data Breaches
ShinyHunters Claims Full FBI Breach via PeopleSoft Zero-Day, Exposes ROU, Defaces Cl0p Leak Site
One extortion group, one alleged FBI breach, one exposed hacking-unit list, one Cl0p defacement. ShinyHunters escalates this week.
Data Breaches
Data-Breach Round: Revolut, CenterPoint 7.49M, Premier Medical 280k, and Florida DMV/ShinyHunters
Four breach disclosures in one week: a fintech tricked by a fake government request, a utility with 7.49 million records claimed, a New York clinic notifying 280,000 patients, and Florida DMV data dumped by ShinyHunters.
Weekly Roundup
This Week's Signals: WatchGuard Firewall RCEs, a 9.5M-Patient Breach, and Memory Integrity Goes Default
The week's notable stories that didn't get a standalone piece: three critical WatchGuard firewall RCEs, active exploitation of Sangoma, Langflow, and Rails, nearly 22,000 exposed Exchange servers, a 9.5-million-patient cloud breach, and Windows turning on Memory Integrity by default.
Data Breaches
McKesson Confirms a Breach; ShinyHunters Claims 284 Million Rows, Not Patients
McKesson has confirmed an incident and almost nothing else. The 284 million figure is ShinyHunters' claim, it counts database rows rather than people, and this same group's numbers were cut roughly in half the last time anyone checked them.
Data Breaches
Manchester Airports Group Breach Exposes Data on 8.7 Million Customers
Manchester Airports Group says an unauthorised third party stole data on roughly 8.7 million customers across three UK airports. Most records are email addresses from Wi-Fi sign-ups and bookings, but that is enough to fuel targeted phishing.
Data Breaches
ATF Confirms Qilin-Claimed Breach Hit System Holding Investigation Targets
The ATF confirms a cyberattack hit a standalone system holding information on its investigation targets. The Qilin ransomware group claimed it, though the agency has not verified that. What is confirmed, what is not, and what defenders should take from the containment claim.
Data Breaches
Millions of Records Allegedly Stolen From Azure Tenants at McDonald's, Vodafone, TCS, Kyndryl
A seller called TheHatman is advertising millions of employee records allegedly pulled from the Azure tenants of McDonald's, Vodafone, TCS, Kyndryl, and five other large firms. Researchers blame compromised credentials, not an Azure flaw. No named brand has confirmed a breach; TCS disputes it.
Data Breaches
France's DGFiP Tax Authority Confirms Breach After Crook Claims 2 Million Records
France's DGFiP tax authority traced an intrusion to identity theft in late June and has confirmed 678,000 affected individuals and professionals. The attacker's claim of 2 million records remains unverified.
Data Breaches
ShinyHunters Dump 1.6 Million RingCentral Records After Extortion Attack
The ShinyHunters extortion gang published 1.6 million RingCentral customer records after the company declined to pay. Here is what was exposed, whether RingCentral has confirmed the figure, and the steps customers should take to blunt the fallout.
Vulnerabilities
Security Roundup — Week of August 13, 2026: Offensive-Cyber Policy Shifts, an AI Agent at a Nuclear Watchdog, and a 421-CVE Patch Tuesday
A landmark week for offensive-cyber policy in the US and Germany, an autonomous AI agent confirmed at Taiwan's nuclear safety regulator, Microsoft's 421-CVE Patch Tuesday and its exploitation wave, plus a run of breaches, supply-chain hits, and botnet upgrades.
Data Breaches
Researchers Bought noreply.net and deleteduser.com. Companies Email Them Corporate Secrets
Two security researchers bought cheap domains, including noreply.net and deleteduser.com, and pointed them at email listening services. Hundreds of companies are still firing corporate secrets into those inboxes. The exposure is a configuration problem your team can audit today.
Vulnerabilities
Security Roundup — August 8, 2026: AI Agents Escaping Sandboxes, Cisco's Second Patch Wave, and a Ports Cyberattack
The week's throughline was AI agents slipping their leashes — sandbox escapes at two frontier labs, unpatched zero-click browser hijacks, and framework flaws that fire tools without the model. Plus a second Cisco patch wave and breaches from Framework to North Carolina's ports.