Your Security Digest · 28 jul

Quiet today.

495 scanned. Nothing on fire. Read at your own pace.

Data source: supabase

tracked63

critical0

active exploit0

63 incidents · highupdated live

Jul 281d ago

…

highransomware

Data breach at medical billing firm MCBS affects 1.26 million people

Healthcare billing company Medical Computer Business Services (MCBS) has disclosed that a 2025 network breach exposed the sensitive information of more than 1.2 million people.

aeo—social0 · flat

Jul 272d ago

…

highcloud

New Dysphoria DDoS botnet spreads to 200k devices worldwide

A botnet called Dysphoria has compromised around 200,000 devices across the world and is using them for distributed denial of service (DDoS) attacks and traffic relay operations.

aeo—social0 · flat

Quiet today.

Data breach at medical billing firm MCBS affects 1.26 million people

New Dysphoria DDoS botnet spreads to 200k devices worldwide

Coca-Cola confirms data theft in Fairlife ransomware attack

Ernst & Young data breach claimed by ShinyHunters extortion gang

CISA Adds Two Known Exploited Vulnerabilities to Catalog

ShinyHunters data leaks fuel $2,000 sextortion email scam

OnTrac notifies customers of data breach after network hack

Hermes AI agent used to automate attack on Thai Finance Ministry

Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack

Europol flags 4,340 URLs for removal in 'The Com' crackdown

New Dolphin X malware uses AI to rank high-value targets

Microsoft 365 outage affects Teams, SharePoint and other services

New msaRAT malware uses Chrome, Edge browsers to route C2 traffic

Upbound says hack caused $13 million in fraudulent Acima leases

Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack

How enterprise GenAI can amplify ransomware risk — and how to contain it

Adobe Chrome extension flaw let sites access private WhatsApp chats

CISA Adds Two Known Exploited Vulnerabilities to Catalog

FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware

Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leak

CISA Adds Four Known Exploited Vulnerabilities to Catalog

JadePuffer agentic attacks now target AI model data with ransomware

Critical ServiceNow code execution flaw now exploited in attacks

Ernst & Young discloses data breach after support system hack

New ClickLock macOS malware traps users into revealing login password

Coca-Cola says Fairlife ransomware attack halts US dairy production

23andMe to pay $18 million in new genetics data breach settlement

CISA Adds Three Known Exploited Vulnerabilities to Catalog

Google Gemini CLI abused as a hacking agent, malware botnet operator

AsyncAPI npm packages infected with credential-stealing malware

We built a vulnerability vending machine: AI tokens in, zero-days out

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Spanish Police take down €140 million cyber fraud ring, arrest four

Nearly 300 GitHub repos pose as legit software to push malware

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Urges SharePoint Hardening After New Exploitations

Japan's largest taxi operator shuts systems after cyberattack

New CrashStealer malware poses as Apple crash reporting tool

CISA Adds One Known Exploited Vulnerability to Catalog

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

New U-Boot flaws could enable stealthy firmware attacks

Ryuk ransomware member pleads guilty in the US, faces 15 years in prison

Hackers exploit critical auth bypass in Gitea Docker image

The Replicant in Your Directory: AI Agents and the Identity Security Gap

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Former ransomware negotiator gets 4 years for BlackCat attacks

The Hidden Security Risks of Reduced Summer IT Coverage

CISA orders feds to prioritize patching Langflow auth bypass flaw

Chinese hackers develop LONGLEASH malware to expand ORB network

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

New Januscape Linux flaw allows VM escape on Intel, AMD devices

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

JadePuffer ransomware used AI agent to automate entire attack

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

Alleged Scattered Spider hacker extradited to the United States

CISA Adds One Known Exploited Vulnerability to Catalog

Malicious PyPI packages give hackers control of Telegram bot servers

Insurance giant Aflac discloses data breach after subsidiary hack

Microsoft adds smarter bot protection to Teams meetings

Blackfield ransomware asks Nidec Corporation for $2 million ransom

CISA Adds One Known Exploited Vulnerability to Catalog