Cyber Security News

Hacking Editorial Brief — August 17, 2026

French Tax Authority Suffers Major Data Breach

Attackers have compromised French tax and land registry systems, exfiltrating revenue data for hundreds of thousands of individuals and companies. The breach represents a significant intelligence collection operation targeting financial records held by government infrastructure. Details regarding attribution, attack vectors, and the full scope of compromised records remain undisclosed. The incident adds to growing concerns about nation-state and financially motivated threat actor targeting of revenue services that maintain comprehensive economic data on citizens and businesses.

EncryptHub Reports Windows Zero-Days While Maintaining Criminal Operations

EncryptHub, a threat actor linked to breaches at 618 organizations, reportedly submitted two Windows zero-day vulnerabilities to Microsoft, demonstrating an unusual dual role as both cybercriminal and security researcher. This behavior pattern complicates traditional threat actor categorization and raises questions about coordinated vulnerability disclosure policies when researchers maintain active criminal operations. Separately, a critical Zoom vulnerability has been patched that could allow remote attackers to commandeer cameras and exfiltrate data. Meanwhile, RingCentral disclosed a data breach following claims by the ShinyHunters group, which published over 600GB of data on the dark web potentially affecting 1.6 million customers. The telecommunications platform breach adds to a growing list of high-profile compromises attributed to this persistent extortion-focused threat actor.

Sources: The Star · BleepingComputer · Cyber Daily