🛡️ DAILY SECURITY BRIEF: Security News Digest — August 17, 2026

4360: Ransomware Landscape Report for July 2026 Released; New BrzCrypt Variant Emerges Ransomware Landscape Report — BrzCrypt The new BrzCrypt variant employs a dual-pronged approach: brute-forcing Remote Desktop Protocol (RDP) credentials followed by lateral movement and data theft. A fresh wave of 'Silver Fox' attacks repurposes managed endpoints as command-and-control tools. A critical Fastjson vulnerability has also emerged. 5. Rising Star Antivirus: Behind the Leak of One Million Records — Full Attack Reconstruction (Shanghai Pudong Police Investigation) Data Breach | Police Investigation | Unauthorized Data Acquisition In May this year, Shanghai Pudong police cracked a case involving illegal acquisition of internet enterprise data. A hacker group used custom-built tools to steal over one million records. Security vendors have reconstructed the full attack chain, highlighting critical risks in API security and internal network defenses. 🌍 International Headlines 6. French Directorate General of Public Finance (DGFiP) Hacked — ~678,000 Taxpayer Records Compromised Tax System Data Breach | Government Apology France’s Ministry of Finance released its investigation findings and issued a public apology on August 14, confirming that DGFiP was breached in late June, resulting in the theft of approximately 678,437 taxpayer records. The hacking group ‘Zerobytes’ publicly claimed responsibility on August 12. 7. DentaQuest Data Breach: 15 Million Patients Affected — Largest Healthcare Data Breach of 2026 Healthcare Data Breach | ShinyHunters | HIPAA Unauthorized network access occurred between May 17–20, impacting at least 15 million individuals — potentially exceeding 23.4 million. ShinyHunters claimed responsibility and leaked roughly 234 GB of data, which has since been added to Have I Been Pwned (HIBP). 8. ShinyHunters Breaches Workwear Giant Carhartt — 50 GB of Data Leaked Retail Ransomware | ShinyHunters | Data Breach The hacker group ShinyHunters claimed to have stolen 50 GB of data, including millions of customer records (~4.05 million rows), and publicly criticized Carhartt’s negotiation representatives as “incompetent.” 9. Coca-Cola Confirms Ransomware Attack Against Its Fairlife Dairy Subsidiary — Data Stolen

How long does it take for a company to resume operations after a ransomware attack?

There is no universal answer: recovery time depends on your pre-defined Recovery Time Objective (RTO). If you haven’t defined one, recovery becomes a matter of chance. Let’s translate RTO into plain language: 'How long can we recover?' isn’t an IT question—it’s really asking, 'How long are we willing to stay offline?' RTO—the Recovery Time Objective—is a business decision jointly made by leadership and operational stakeholders: it specifies the maximum tolerable downtime for a given system or service. Exceeding that threshold is unacceptable. Without such a target, recovery becomes reactive—waiting on vendors, waiting for data, waiting on luck. The real cost of lacking backups and never conducting drills. In July 2026, Coca-Cola’s dairy subsidiary Fairlife suffered a ransomware attack, halting U.S. production for approximately 12 days. Retailers avoided stockouts only because finished-product inventory was abundant. While production stalled for two weeks, sales held up—but many enterprises lack both inventory buffers and clean backups, pushing their recovery timelines into months—or forcing outright closure. Recovery time must be calculated in advance—not guessed after the fact. Use Business Impact Analysis (BIA) to quantify losses per day of downtime and estimate how quickly customers will churn. Then set your RTO accordingly: e.g., four hours for the order management system, 24 hours for financial data—the exact values are determined by business priorities.

Coca-Cola says fairlife resumes production at 4 US plants after cyberattack

Jul 27, 2026

Coca-Cola's fairlife resumed production at four U.S. plants after a cyberattack by the Anubis group stole 1TB of data. The company confirmed product safety was unaffected and expects minimal financial impact from the incident.

reuters

2026-07-16

Coca-Cola says fairlife halts US production after cyber attack

2026-07-17

US Companies Face Rise in Cyber Attacks

2026-07-18

Fairlife Pauses US Production After Cyberattack Breached Milk Brand’s Systems

2026-07-21

Cyber Gang Claims Responsibility for Hack at Coca-Cola's fairlife Unit

2026-07-27

Coca-Cola says fairlife resumes production at 4 US plants after cyberattack

Coca-Cola says fairlife resumes production at 4 US plants after cyberattack

FAQ