Your Security Digest · 29 jul

Today, 39 things to read.

11 critical · 28 to skim · nothing on fire

Data source: supabase

tracked39

critical11

active exploit0

39 incidents · ransomwareupdated live

Jul 281d ago

…

criticalransomware

Over 24,000 exposed server BMCs leak password hash via decades-old flaw

More than 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface.

aeo—social0 · flat

Jul 281d ago

…

highransomware

Data breach at medical billing firm MCBS affects 1.26 million people

Healthcare billing company Medical Computer Business Services (MCBS) has disclosed that a 2025 network breach exposed the sensitive information of more than 1.2 million people.

aeo—social0 · flat

Today, 39 things to read.

Over 24,000 exposed server BMCs leak password hash via decades-old flaw

Data breach at medical billing firm MCBS affects 1.26 million people

Coca-Cola confirms data theft in Fairlife ransomware attack

Ernst & Young data breach claimed by ShinyHunters extortion gang

ShinyHunters data leaks fuel $2,000 sextortion email scam

Hermes AI agent used to automate attack on Thai Finance Ministry

Europol flags 4,340 URLs for removal in 'The Com' crackdown

New Dolphin X malware uses AI to rank high-value targets

CISA orders urgent action on actively exploited Langflow RCE flaw

Upbound says hack caused $13 million in fraudulent Acima leases

Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack

How enterprise GenAI can amplify ransomware risk — and how to contain it

Adobe Chrome extension flaw let sites access private WhatsApp chats

Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leak

JadePuffer agentic attacks now target AI model data with ransomware

CISA orders feds to patch actively exploited Oracle flaw by Saturday

New Spirals ransomware encrypts victim network in under 24 hours

Coca-Cola says Fairlife ransomware attack halts US dairy production

23andMe to pay $18 million in new genetics data breach settlement

Dutch police bust investment fraud ring stealing over €100 million

Google Gemini CLI abused as a hacking agent, malware botnet operator

Spanish Police take down €140 million cyber fraud ring, arrest four

Japan's largest taxi operator shuts systems after cyberattack

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

Money launderer accused of stealing seized crypto while in prison

Ryuk ransomware member pleads guilty in the US, faces 15 years in prison

Former ransomware negotiator gets 4 years for BlackCat attacks

Police arrests 5,800 suspects in global anti-fraud crackdown

The Hidden Security Risks of Reduced Summer IT Coverage

CISA orders feds to prioritize patching Langflow auth bypass flaw

Accenture confirms breach after hacker offers stolen data for sale

Spain arrests suspected member of pro-Russian hacktivist groups

JadePuffer ransomware used AI agent to automate entire attack

Alleged Scattered Spider hacker extradited to the United States

Kubota says hackers had month-long access to network systems

DHS confirms hackers breached HSIN info-sharing platform

Insurance giant Aflac discloses data breach after subsidiary hack

Microsoft adds smarter bot protection to Teams meetings

Blackfield ransomware asks Nidec Corporation for $2 million ransom