Breaking News – Cyber Threats – 2026-08-28 17:00 PDT

Breaking News – Cyber Threats (last 6h)

Generated: 2026-08-28 17:00 PDT

• McKesson discloses breach after ShinyHunters claims patient data theft
  BleepingComputer • 2026-08-28 15:40 • www.bleepingcomputer.com
  Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with the ShinyHunters extortion group claiming it stole 284 million patient data records. […]
  https://www.bleepingcomputer.com/news/security/mckesson-discloses-breach-after-shinyhunters-claims-patient-data-theft/
• Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network
  The Hacker News • 2026-08-28 14:30 • thehackernews.com
  Berlin’s state government has confirmed that it is the target of an extortion attempt following the August compromise of the city’s state administrative network, and said it will not meet the extortionists’ demands.

  The same statement disclosed that forensic work had found further data outflows in the portfolio of the Senate Department for Mobility, Transport, Climate Protection and Environment
  https://thehackernews.com/2026/08/berlin-refuses-to-pay-hackers-who-stole.html

• Friday Squid Blogging: Truckload of Squid Spills in Rhode Island
  Schneier on Security • 2026-08-28 14:02 • www.schneier.com

  Ugh:

  A tractor-trailer rollover sent a truckload of squid spilling into a Rhode Island roadway, leaving a stench as they sat in the road for hours in the summer heat. Local authorities have dubbed it the “Squidpocalypse of ’26.”

  That would be twenty tons of squid.

  As usual, you can also use this squid post to talk about the secur…
  https://www.schneier.com/blog/archives/2026/08/friday-squid-blogging-truckload-of-squid-spills-in-rhode-island.html

• Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable
  The Hacker News • 2026-08-28 13:38 • thehackernews.com
  Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026.

  The vulnerability, designated GHSA-7g4w-cg88-2cq2, is rated Critical by Cosmos Labs and was published without a CVE identifier, a weakness classification, or a CVSS score.

  Affected versions are < 0.6.2 and >=
  https://thehackernews.com/2026/08/cosmos-evm-flaw-exploited-after-cosmos.html

• PaperCut releases second emergency patch for exploited flaws
  BleepingComputer • 2026-08-28 12:08 • www.bleepingcomputer.com
  PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF print management software after researchers discovered multiple ways to bypass the initial fixes. […]
  https://www.bleepingcomputer.com/news/security/papercut-releases-second-emergency-patch-for-exploited-flaws/
• GiveWP WordPress donation plugin flaw lets hackers execute server commands
  BleepingComputer • 2026-08-28 11:18 • www.bleepingcomputer.com
  A maximum-severity vulnerability in the GiveWP plugin for WordPress allows an unauthenticated attacker to execute arbitrary commands on the hosting server. […]
  https://www.bleepingcomputer.com/news/security/givewp-wordpress-donation-plugin-flaw-lets-hackers-execute-server-commands/

Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.