Top Cyber Security Alerts From Last Week

1. Manchester Airports Group Breach Exposes 8.7 Million Customers Manchester Airports Group confirmed that an unauthorized third party accessed data belonging to roughly 8.7 million customers across Manchester, London Stansted and East Midlands airports. The exposed records cover car park, lounge and Fast Track bookings plus airport Wi-Fi registrations, including email addresses, phone numbers, postcodes […]

1. Federal Agencies Warn Medusa Ransomware Has Now Hit More Than 500 Critical Infrastructure Organizations The FBI, CISA, and HHS published an updated #StopRansomware advisory on August 18, raising the confirmed Medusa victim count above 500 critical infrastructure organizations, up from roughly 300 in the previous guidance. Investigators note the group has sharply compressed its […]

Top 5 Cyber Security News Stories 1. Six Agencies Issue Joint Advisory on Gunra Ransomware, and Hand Linux Victims a Free Way Out The FBI, CISA, DC3, NSA, U.S. Secret Service, and the Republic of Korea’s National Police Agency published a joint #StopRansomware advisory on Gunra, a Conti-derived double-extortion operation active against government, healthcare, and […]

1. Coordinated Cyberattack Hits More Than 30 Minnesota Water Systems Minnesota IT Services confirmed that a coordinated cyberattack struck over 30 community water systems across roughly 48 hours beginning July 26. Braham’s treatment plant went offline entirely, while Plymouth, South St. Paul, and Maple Plain reported failures in cellular communications and automated utility controls, with […]

This week the threat landscape sharpened around two themes: the weaponization of AI agents and the exploitation of trusted access. A single link could forge a rogue AI insider, extortion crews leaned on the phone rather than the exploit, and a fired employee’s credentials became a live breach. Here is what mattered, and what to […]

1. SharePoint zero-day under active attack forces federal patch deadline. CISA added CVE-2026-58644, a critical (CVSS 9.8) deserialization flaw in on-premises Microsoft SharePoint Server, to its Known Exploited Vulnerabilities catalog on July 16, giving Federal Civilian Executive Branch agencies until July 19 to remediate. The bug allows unauthenticated remote code execution and was weaponized as […]