CVE Tools
Track your stack

Week in review: Records allegedly stolen from Azure tenants, Medusa ransomware hits 500+ orgs

Help Net SecurityBy Help Net Security

Reported exploitedWindows 11MedusamacOS

Our summary

A threat actor identified as TheHatman claims to have exfiltrated millions of employee records from the Microsoft Azure environments of several Fortune 500 companies, including McDonald's, Vodafone, Kyndryl, and Tata Consultancy Services. In related developments, US federal agencies issued a joint warning stating that the Medusa ransomware group has successfully infiltrated more than 500 organizations since its inception in June 2021.

Read at Help Net Security

Help Net Security publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker News⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and MoreCVE-2026-19478, CVE-2026-69836
  2. Check Point Research24th August – Threat Intelligence ReportCVE-2026-19478, CVE-2026-19490
  3. The Hacker NewsWarning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active ExploitationCVE-2026-19490
  4. Dark ReadingMaximum Severity GitLab Flaw Puts Supply Chains at RiskCVE-2026-19478
  5. The Hacker NewsGitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After DisclosureCVE-2026-19478
  6. Bishop FoxMind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490CVE-2026-19490
  7. SecurityWeekCritical NetScaler Vulnerability Exploited in AttacksCVE-2026-19490
  8. The Hacker NewsCISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch DeadlineCVE-2026-19490
  9. BleepingComputerCritical Citrix NetScaler auth bypass now leveraged in attacksCVE-2026-19490
  10. BleepingComputerCISA orders feds to patch Citrix NetScaler RCE flaw by SaturdayCVE-2026-19490

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store