In partnership with
| ~7 MIN READ |
|
This week's theme: the price of getting caught keeps climbing, whether you're a ransomware crew missing a payment deadline or a platform settling a privacy case nobody wants to litigate. Here's what broke, what got exposed, and one bug you should check for right now.
PS: Was this forwarded to you? Subscribe free at exzeccyber.com/subscribe → |
|
In this edition
|
HEALTHCARE EXTORTION
💊 ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.
Intro
McKesson moves roughly a third of the prescription drugs sold in North America, and this week that made it ShinyHunters' newest target.
What Happened
The extortion group claims it stole 284 million records, including patient PII, protected health information, prescription and billing data, and internal employee records, after breaching a subset of McKesson's Oncology and Medical-Surgical business units around August 25. ShinyHunters demanded roughly $55 million and gave McKesson until September 1 to start negotiating before publishing the data.
Why It Matters
McKesson says its services are still operating, but a breach at this scale, at a company that touches most of the US pharmaceutical supply chain, puts patient records and daily operations at thousands of downstream providers at risk too.
The Other Side
McKesson hasn't confirmed the 284 million figure, and ShinyHunters has inflated claimed record counts before, so the real scope could land well short of the number on the leak site.
TL;DR: ShinyHunters claims it stole 284 million McKesson records and wants $55 million; the deadline already passed.
Further reading: SecurityWeek
|
|
AI made PMs faster. Multiplayer mode is still broken.
A PM can summarize research, draft a PRD, and mock up a prototype before lunch. The hard part starts when the team has to decide what actually gets built.
Jira Product Discovery gives product teams one place to capture insights, prioritize ideas with consistent frameworks, and build living roadmaps stakeholders can rally around.
And because it’s connected to Jira, the context behind every decision stays with the work—so developers and their agents know not just what to build, but why.
AI helps PMs move faster. Jira Product Discovery helps the whole team build with confidence.
|
|
|
Stop Paying for 6 Tools. One AI Does It All.
Most e-commerce sellers juggle 6–8 tools and pay hundreds monthly to keep operations running. StoreClaw replaces the stack with one autonomous AI engine that monitors competitors, optimizes listings, automates marketing, and tracks profit 24/7. Connect your store and let AI handle the work — no prompts, no complex setup, no credit card required.
Strange but real
💳 A Bank Employee Called, and 13 Minutes Later Your Card Was Cloned
Intro
A new Android malware combo can clone your contactless card and drain your account in the time it takes to finish a phone call.
What Happened
Group-IB found fraudsters calling victims across Czechia, Slovakia, and Slovenia, posing as bank staff and talking them into sideloading the SpyNote remote-access trojan. Once installed, SpyNote quietly installs a second tool, WindRelay, which turns the victim's phone into a fake payment terminal: the attacker asks the victim to tap their card against their own phone "to verify it," and WindRelay relays that live NFC handshake straight to the attacker's device for real-world purchases.
Why It Matters
The whole con, from first ring to drained account, runs about 13 minutes, and Group-IB found nearly two dozen samples of this malware quietly operating since November 2025 before anyone gave it a name.
The Other Side
It only works if the victim answers the phone, sideloads an app, and taps their card on command, so basic skepticism about unsolicited "bank" calls still stops it cold.
TL;DR: A phone scam plus two malware tools can clone your contactless card in 13 minutes flat.
Further reading: BleepingComputer
|
How Jennifer Aniston’s LolaVie brand grew sales 40% with CTV ads
The DTC beauty category is crowded. To break through, Jennifer Aniston’s brand LolaVie, worked with Roku Ads Manager to easily set up, test, and optimize CTV ad creatives. The campaign helped drive a big lift in sales and customer growth, helping LolaVie break through in the crowded beauty category.