Daily · 2026-07-27
🎯 MCBS Breach Impacts 1.2M, 🎯 EU Sanctions Russian FSB Hackers, ⚠️ vBulletin Preauth RCE PoC, 🛡️ GitHub PyPI Time-Based Defenses, 📋 Claude AI Chats Exposed in Google
PEAR ransomware gang claims MCBS breach affecting 1.2M patients; EU hits Russian FSB 16th Centre officers with sanctions over years-long cyber spying; vBulletin preauth RCE PoC goes public; GitHub and PyPI implement time-based supply chain attack defenses; Claude AI shared chats surface in Google search results.
The PEAR ransomware claim on the MCBS breach is the day's defining story. More than 1.26 million individuals had their records exposed through a single medical billing intermediary, a reminder that healthcare data concentrates in third-party processors that rarely make the risk register. PEAR says it took over 3 TB including SSNs and financial documents, and the group's leak site already lists more than a hundred victims. PEAR Ransomware Group Claims MCBS Data Breach Affecting 1.2 Million Individuals
The public exploit for CVE-2026-61511: vBulletin Preauth RCE with Public PoC matters for what follows it. It is a pre-authentication remote code execution in vBulletin with no user interaction required, and the patch shipped on the same day the proof of concept went public. Any internet-exposed forum still on 6.2.1 or earlier is now a candidate for automated scanning. The Claude shared-chat indexing is a quieter problem: hundreds of conversations carrying credentials and proprietary code were crawlable through Google, a design failure in a convenience feature rather than a flaw in the model. GitHub and PyPI time-based defenses are the right shape of response to supply chain abuse, and they work best as one layer among several.
Watchlist: vBulletin instances still on affected builds, employee-shared Claude chats that should be revoked, and downstream fraud against the seven covered entities named in the MCBS notice.