Boston Scientific has clarified that a recent cyberattack compromised only certain on-premises systems while leaving its cloud-based infrastructure untouched, with no unauthorized activity detected since August 25. The medical device manufacturer continues recovery efforts with third-party experts including CrowdStrike, working to restore manufacturing and shipping capabilities while investigating whether data was exfiltrated or ransomware deployed. Currently, new remote-monitoring activations for cardiac devices are limited, but patient safety risks remain low as non-connected devices and existing remote monitoring continue to function normally.
Read full article at The Cyber Express ↗An extortion group calling itself FulcrumSec has claimed responsibility for breaching Manchester Airports Group and stealing over 80 GB of data. The threat actors have indicated they plan to leak the stolen data online, following a typical extortion and data-leak approach.
Extortion group FulcrumSec claims to have stolen 86GB of data from Manchester Airports Group after discovering exposed API credentials in client-side JavaScript code. The breach affects multiple UK airports operated by MAG, including Manchester, London Stansted, and East Midlands, with the company's disclosure coming on August 27 followed by FulcrumSec's extortion claim two days later. The incident highlights the continued risk of credential exposure in web application code as a vector for large-scale data theft.
At least 274 internet-facing Zimbra server instances have been compromised through CVE-2026-73570 exploitation, according to the Shadowserver Foundation. The week also saw attackers actively exploiting a previously patched Citrix NetScaler vulnerability, while security researchers highlighted emerging AI supply chain risks appearing in developer workflows.
Hasbro experienced a cyberattack earlier this year that disrupted operations and has now resulted in a data breach disclosure. The breach exposed personal information belonging to company employees.