Amgen confirms July 2026 cloud data breach exposing sensitive patient

💥 BREACHES & INCIDENTS

• Amgen confirms July 2026 cloud data breach exposing sensitive patient and proprietary data
  Amgen suffered a cloud data breach exposing sensitive proprietary and patient health data.
  • Applies to Amgen, a U.S. biotech company serving 17 million patients
  • Proprietary data and patients' health information were exfiltrated
  • Data was stolen from Amgen's cloud environments hosted primarily on AWS
  • Volume and types of stolen data are described as potentially sensitive
    📎 Coverage: mastodon.social · 📄 Original: sec.gov · 👁 via @zackwhittaker@mastodon.social

🕵️ RESEARCH & DEEP DIVES

• Chinese-Speaking Hackers Target Central Asian Governments with OctLurk and SilkLurk Malware
  Chinese-speaking hackers have targeted Central Asian government organizations using OctLurk and SilkLurk backdoors.

  • Targets include government, healthcare, research, law enforcement, and educational sectors in Central Asia and Syria
  • Attackers deploy OctLurk and SilkLurk backdoors with LurkProxy utility for network traffic proxying
  • OctLurk uses memory injection, collects system info, executes commands, dumps credentials, and logs keystrokes
  • SilkLurk uses DLL side-loading, connects to C2 servers, executes commands, and deploys PlugX backdoor
  • Attackers scan networks, harvest passwords, steal emails, and archive stolen data for exfiltration
    📎 Coverage: thehackernews.com · 👁 via The Hacker News

• Cyberattacks Hit Water Facilities in Seven U.S. States, Disrupting Operations
  Water treatment plants in multiple U.S. states have been targeted by cyberattacks.

  • Applies to water treatment plants across at least seven U.S. states
  • Several attacks have impacted operational capabilities of the facilities
  • Details on attack methods, vulnerabilities, or specific malware used are not disclosed
    📎 Coverage: infosec.exchange · 👁 via @metacurity@infosec.exchange

🔓 CVEs & KEV

• Other: 16 CVEs (worst 8.2)