September, 2026 - DIESEC

McKesson Breach: How the Okta Vishing Attack Happened

By Editorial Team | September 2, 2026

An Okta vishing attack gave ShinyHunters access to McKesson's Salesforce and Snowflake data, followed by a $55 million ransom demand.

An Okta vishing attack — a phone call, not a piece of malware — is how the extortion group ShinyHunters claims it broke into US healthcare and pharmaceutical distribution giant McKesson. McKesson has confirmed unauthorized access to third-party applications and data exfiltration, but has not confirmed the attack path itself: according to ShinyHunters’ own account,…

Exchange Authentication Bypass Vulnerability Now Exploitable

By Editorial Team | September 1, 2026

A public exploit for an Exchange authentication bypass vulnerability is live, and 85% of German on-prem servers remain unpatched, BSI warns.

A working exploit for an Exchange authentication bypass vulnerability is now public on GitHub, and heise.de reports that roughly 85% of on-premises Exchange servers in Germany remain vulnerable three weeks after Microsoft shipped a fix. The catch: for organizations still running Exchange 2016 or 2019, that fix is locked behind Microsoft’s paid Extended Security Update…