💥 BREACHES & INCIDENTS
- Amgen confirms July 2026 cloud data breach exposing sensitive patient and proprietary data
Amgen suffered a cloud data breach exposing sensitive proprietary and patient health data.- Applies to Amgen, a U.S. biotech company serving 17 million patients
- Proprietary data and patients' health information were exfiltrated
- Data was stolen from Amgen's cloud environments hosted primarily on AWS
- Volume and types of stolen data are described as potentially sensitive
🕵️ RESEARCH & DEEP DIVES
Chinese-Speaking Hackers Target Central Asian Governments with OctLurk and SilkLurk Malware
Chinese-speaking hackers have targeted Central Asian government organizations using OctLurk and SilkLurk backdoors.- Targets include government, healthcare, research, law enforcement, and educational sectors in Central Asia and Syria
- Attackers deploy OctLurk and SilkLurk backdoors with LurkProxy utility for network traffic proxying
- OctLurk uses memory injection, collects system info, executes commands, dumps credentials, and logs keystrokes
- SilkLurk uses DLL side-loading, connects to C2 servers, executes commands, and deploys PlugX backdoor
- Attackers scan networks, harvest passwords, steal emails, and archive stolen data for exfiltration
Sources 📎 Coverage: thehackernews.com · 👁 via The Hacker NewsCyberattacks Hit Water Facilities in Seven U.S. States, Disrupting Operations
Water treatment plants in multiple U.S. states have been targeted by cyberattacks.- Applies to water treatment plants across at least seven U.S. states
- Several attacks have impacted operational capabilities of the facilities
- Details on attack methods, vulnerabilities, or specific malware used are not disclosed
Sources 📎 Coverage: infosec.exchange · 👁 via @metacurity@infosec.exchange
🔓 CVEs & KEV
- Other: 16 CVEs (worst 8.2)