McKesson Facing $55M Ransom Demand

McKesson Corporation — one of North America's largest healthcare distributors, responsible for delivering roughly one-third of all prescription medicines to hospitals and pharmacies — confirmed over the weekend that hackers stole customer data from its systems, according to SecurityWeek.

The company says it discovered the intrusion on August 25. The breach affected customers in its Oncology & Multispecialty and Medical-Surgical business units, with attackers gaining access through third-party applications. McKesson has not disclosed how many people are affected or exactly what was taken.

The group claiming responsibility is ShinyHunters, a prolific extortion group with a history of high-profile thefts. They are threatening to publish the stolen data unless McKesson contacts them to negotiate payment by September 1 — tomorrow.

ShinyHunters claims the haul includes 284 million customer records: personal details, protected health information, prescription and billing records, employee data, and information about McKesson's partner physicians and clinics. McKesson has not confirmed those numbers.

The company says its operations are continuing normally and that it will offer free credit monitoring and identity protection to affected customers.

What you should do: If you are a McKesson pharmacy customer or have received cancer or specialty care through their network, watch for a notification letter. Enrol in the free credit monitoring once offered, and monitor your health insurance statements for any unfamiliar claims — a sign someone may be using your medical details.

Security researchers are raising the alarm after the Hugging Face incident revealed what an AI agent can do when given access to a production environment, as reported by SecurityWeek.

Hugging Face is an online platform where developers share and collaborate on AI models. An AI agent broke into its production environment and took 17,600 actions across just four days. In a separate lab test, a different agent reached full administrator access on a corporate network in 40 minutes. Attacks that once required a team of human hackers working for days now run automatically, end to end.

The core problem: companies are granting AI agents broad access to systems and credentials without treating them the way they would a new employee — with defined permissions, an assigned owner, and a clear way to revoke that access quickly.

For organisations using AI tools internally, now is a good time to audit what systems those tools can reach.

What Ruby on Rails is: A popular open-source web application framework used by developers to build websites and web services — including many you use every day without knowing it.

What it is: A critical flaw dubbed KindaRails2Shell allows an attacker to read arbitrary files on the server, steal credentials, and then execute their own code remotely. RCE (remote code execution — when an attacker runs commands on a machine they do not own) is the worst outcome a web vulnerability can produce.

Who's at risk: Any Rails application that uses libvips (an image processing library) for Active Storage and accepts image uploads from untrusted users. VulnCheck identified roughly 7,000 exposed instances in early August, before exploitation began.

CVSS: 9.5 (Critical — patch today.)

Root cause: Rails trusts the content type declared by the client to determine whether a file is an image. libvips ignores that declaration and inspects the file's internal bytes instead. An attacker exploits this disagreement by crafting a file that claims to be a MATLAB image, which tricks libvips into handing it to a chain of libraries that ultimately reads an attacker-chosen file from the server and returns its contents.

Attack vector: An unauthenticated attacker uploads a specially crafted file to any vulnerable image upload endpoint. The server processes it as an image, reads a sensitive file — such as the credentials database — and returns its contents to the attacker. Armed with those secrets, the attacker can forge user sessions and execute code. Critically, VulnCheck found that patching to 8.1.3.1 blocks the file-read path but does not neutralise a separate deserialization gadget, meaning RCE remains possible on patched servers given a valid signature.

Detection strategies: Check server logs for image upload requests containing MATLAB or HDF5 file signatures. Look for unexpected outbound connections from your Rails process. Rails has published forensic tools specifically to detect exploitation attempts — run them.

Recommended actions:

1. Patch to the latest Rails release immediately and apply all available security updates.
2. Restrict image upload endpoints to authenticated users where possible.
3. Run Rails' published forensic detection tools and review logs for signs of prior exploitation.

Anthropic has warned Claude users that infostealer malware — software that quietly copies saved passwords, browser cookies, and login credentials — was used to hijack accounts and drain usage limits, according to SecurityWeek. The malware arrives via unofficial downloads or fake apps, not through Claude itself.

If your Claude usage limits appeared to drain without you doing anything, that is a warning sign. Anthropic has signed out affected sessions and removed saved payment methods as a precaution.

The practical step: run a full scan with Malwarebytes — a free, widely trusted tool — before re-adding any payment details to Claude or any other service. Then change your passwords for any accounts that were logged in on the affected device. This applies whether or not you use Claude: infostealers target every saved credential on your machine.

The European Commission has designated ChatGPT, Reddit, and Roblox as Very Large Online Platforms or Search Engines under the Digital Services Act (DSA — EU rules requiring large platforms to actively manage harmful content and systemic risks). All three declared over 45 million monthly EU users. They now have until January 2027 to comply with obligations including risk assessments for illegal content, algorithmic transparency, and protections for minors. For everyday users, this means stronger rights around how these platforms moderate content and handle your data.