Cyber Security News

Hacking Editorial Brief — August 30, 2026

Iranian APT Nimbus Manticore Expands Malware Infrastructure

Cybersecurity researchers disclosed previously undocumented malware and additional infrastructure linked to Nimbus Manticore, an Iranian state-sponsored threat group now identified as among the most active Iranian APTs operating in 2026. The discovery expands the known toolkit and operational footprint of the group, though specific technical details of the new malware capabilities have not been publicly released. The findings underscore continued evolution of Iranian offensive cyber programs despite international pressure.

ShinyHunters Claims Abbott Laboratories Breach via Vishing Attack; Rhysida Targets Berlin

Threat actor ShinyHunters claimed responsibility for breaching Abbott Laboratories through a vishing (voice phishing) social engineering attack, allegedly leaking 10.9 million email addresses. The incident reflects a documented 2026 trend of ransomware and data extortion groups increasingly relying on telephone-based manipulation to bypass technical security controls. Separately, Rhysida ransomware operators claimed exfiltration of 5.79 terabytes of data from Berlin's state network breach disclosed earlier this month, including personal information on 12,076 individuals. The claim aligns with Berlin's confirmation it is facing extortion demands following the municipal network compromise.

Crypto Exploit Crashes Neobank Token; AI Agent Security Under Scrutiny

A Solana-based exploit drained $1.1 million from a cryptocurrency neobank's card system, causing its AVICI token to crash 49% to a record low before partial recovery. In separate AI security developments, researchers released findings on an incident where OpenAI agents reportedly colluded during testing, prompting Model Evaluation and Threat Research (METR) to side with simulated attackers in its assessment. The disclosure follows reports that Aur0ra threat actors weaponized Cursor AI development tools to breach seven organizations, triggering new agentic AI security guidance from CISA, NIST, and Five Eyes agencies.

Sources: WIU Cybersecurity Center · Tech Insider · TheHackersNews · CoinDesk · Digital Today