McKesson Breach, Grid Security and AI-Driven Ransomware

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. It delivers concise, executive-level analysis of the cyber events shaping business risk.

1. 01

   McKesson disclosed unauthorized access to third-party applications and possible data exfiltration after ShinyHunters claimed to have stolen 284 million patient records. The incident highlights how compromised identities and social engineering can expose healthcare data and disrupt critical services.

2. 02

   President Trump signed an executive order restricting foreign-made power-grid equipment, software, remote access and maintenance services considered supply-chain or national-security risks. The policy brings cybersecurity further into procurement decisions as energy demand grows across AI, data centers, manufacturing and defense.

3. 03

   Berlin says hackers stole data from its administrative network and are attempting extortion, while investigators examine further exfiltration. Manchester Airports Group also reported customer-data theft from booking and WiFi systems at three airports, showing how attacks can expose personal information and disrupt public services without compromising core operations.

4. 04

   TITAN ransomware claims its operators use AI to analyze up to 700GB of stolen data per hour, accelerating the search for sensitive information and leverage. Although the claims remain unverified, the group reflects a broader shift toward rapid data theft, with heightened regulatory, legal and reputational risk.

5. 05

   Microsoft reported Terminalfix, a multistage campaign using reverse tunneling to maintain persistent access while evading detection. The activity reinforces the need for strong identity controls, endpoint visibility and rapid response to reduce attacker dwell time and business impact.