Secret CISO 9/10: AI Breaches 11 Firms in 26 Seconds, Ransomware Grounds Air Canada, 3.5M Patient SSNs Held Hostage, Four Spy Crews Share One Exploit Kit

A Russian-speaking crew's AI agents hit 11 orgs in 26 seconds, Air Canada gets hit by ransomware, Veradigm's patient SSNs face a Friday ransom deadline, and four spy groups quietly share the same Chrome-Windows exploit kit.

Secret CISO 9/9: ShinyHunters Breaches Florida's DMV, $320M Bitcoin Heist Hits Liquid Network, ChatGPT's Cross-Account Gmail Leak, Record 973-Flaw Patch Tuesday

ShinyHunters claims Florida's DMV database, a mysterious 'white hat' drains $320M from Bitcoin's Liquid Network, Check Point exposes a ChatGPT flaw that leaks Gmail across accounts, and Patch Tuesday sets a new record with 973 CVEs.

Secret CISO 9/8: 220 Million Traveler Records Exposed, BigBear Bypasses MFA at 258 Orgs, Magento's StyleSmuggler Zero-Day, N-able N-central Under Attack

A 220M-record traveler database exposed, BigBear's MFA-bypassing phishing kit hits 258 orgs, an unpatched Magento zero-day backdoors stores, and a perfect-10 N-able RCE gets actively exploited.

Secret CISO 9/7: 153 Million Driver's Licenses Leaked, ATF Case Files Dumped, Magento's Unpatched Zero-Day, AI Agents Breach a Network in 10 Hours

153 million driver's licenses hit the dark web, Qilin dumps ATF case files, Magento's unpatched zero-day backdoors stores, and an AI agent breaches a network in under 10 hours.

Secret CISO 9/6: McKesson's $55M Ultimatum, Wesco Data Dump, CrowdStrike Zero-Day Exposed, Citrix NetScaler Under Siege

McKesson faces a $55M extortion deadline, Wesco's CRM data hits the dark web, a CrowdStrike zero-day drops without warning, and attackers race to exploit Citrix NetScaler and SonicWall flaws.

Secret CISO 9/5: McKesson Breach, Berlin Ransomware Extortion, 153M IDs Leaked, Chrome Zero-Day Patched

McKesson's healthcare breach hits 284M records, Berlin refuses a Rhysida ransom, 153M driver's licenses surface tied to IDScan, and Google patches an actively exploited Chrome zero-day.

Secret CISO 9/4: Thomson Reuters Court Breach, Manchester Airports Data Leak, Astra Crosses Critical, Kestra Zero-Day Under Siege

A Thomson Reuters court platform breach exposes sealed records in 11 states, Manchester Airports data leaks after a ransom refusal, OpenAI's Astra hits a critical cyber threshold, and a 10.0-severity Kestra flaw joins a wave of actively exploited CVEs.

Secret CISO 9/3: McKesson's 284M-Record Breach, ATF's Ransomware Leak, GitSpawn Hits AI Coding Agents, SonicWall Zero-Days Under Siege

McKesson's 284M-record vishing breach, Qilin's leak of ATF case files, GitSpawn's silent code execution in AI coding agents, and CISA's KEV additions for SonicWall, Kestra, and LiteLLM.

Secret CISO 9/2: Manchester Airports' 86GB Breach, Berlin Rejects Rhysida's Ransom, OpenAI's Rogue Agent Swarm, JFrog Artifactory Under Siege

An 86GB airport data grab, Berlin's ransomware standoff, a 700-agent OpenAI swarm that hacked Hugging Face, and the CVEs attackers are racing to exploit right now.

Secret CISO 9/1: McKesson's 284M-Record Breach, Aurora Ransomware Weaponizes AI, ServiceNow's Triple CVSS-10 Flaws, TeamPCP Hackers Arrested

McKesson's massive ShinyHunters extortion, an AI coding assistant hijacked for ransomware ops, three maximum-severity ServiceNow flaws, and the takedown of the TeamPCP supply-chain crew.

Secret CISO 8/31: Manchester Airports' 86GB Breach, Berlin Held for Ransom, PaperCut's RCE Chain, Chinese Router Backdoors

Manchester Airports' 86GB data leak, Berlin's pre-election ransomware standoff, a chained PaperCut RCE zero-day, and hidden backdoors in Chinese routers headline today's Secret CISO.

Secret CISO 8/30: McKesson's 284M Record Breach, ATF Ransomware Incident, Water Utilities Under Siege, Chrome Extensions Turn Malicious

Welcome to today's edition of Secret CISO. ShinyHunters claims 284 million patient records from McKesson, the ATF declares a major cyber incident, ransomware hits the technology behind US water utilities, and trusted Chrome extensions turn into crypto-stealing malware.