Cybersecurity Brief
Monday 27 July 2026
In this brief ESAFENET, GitHub, PyPI, +1 more
- Vendors
- ESAFENET, GitHub, PyPI
- Threat actors
- PEAR ransomware
Major Incidents or Breaches
- The PEAR ransomware group claimed responsibility for a data breach affecting MCBS, a medical business management company, with 3 TB of data allegedly stolen and impacting 1.2 million individuals [4].
Newly Discovered Vulnerabilities
- Scanning activity has been detected targeting weak login credentials in the ESAFENET CDG 3 Document Management System, highlighting potential exploitation of insecure authentication in this platform [3].
Trends, Tools, or Tactics of Interest
- GitHub and PyPI have implemented time-based mechanisms in their Dependabot dependency management tool to protect against supply chain attacks and limit the impact of compromised packages [1].
Sources
- MCBS Data Breach Affects 1.2 Million Individuals - securityweek.com
- Scans for ESAFENET CDG 3 Document Management System Weak Logins, (Sun, Jul 26th) - isc.sans.edu
- GitHub, PyPI add time-based defenses against supply chain attacks - bleepingcomputer.com