Oracle Health breach nears 20 million as Denmark loses data on 8.8 million residents
Cybersecurity carried the week on sheer blast radius: Oracle Health's Cerner breach tally climbed to nearly 20 million people, Denmark's national registry lost data on 8.8 million residents, and the FBI led an international takedown of China's Flax Typhoon hacking infrastructure. Counter-drone money and policy kept moving in parallel, from the Pentagon's new directed-energy pilot program to EOS's £370 million Gulf state contract and the FCC's spectrum vote. If you read one story, read the Oracle Health update: it is the biggest and still-growing breach of the week.
This week's pick
- Oracle Health breach tally climbs to nearly 20 million people The Cerner-rooted breach keeps expanding as Oracle discloses more affected health systems, making it one of the largest healthcare data exposures on record.
OSINT
- Satellite fire data confirms drone strike on Yandex data center NASA FIRMS thermal data corroborated a Ukrainian drone strike on a factory housing two of Yandex's supercomputers, the first such attack on Russian data center infrastructure.
- Satellite and thermal data confirm drone strike on Russian airbase in Adygea Open-source analysts matched satellite imagery and NASA FIRMS fire data to Ukraine's claimed strike on Su-35 and Su-34 jets at Khanskaya airbase.
- Google opens its SynthID AI-content detector to the public worldwide Google rolled out a public website letting anyone check images, audio and video for its SynthID AI watermark, part of a broader push to make AI content identifiable.
- Satellite images show a span of Russia's Chonhar bridge to Crimea has collapsed Imagery analysts geolocated the collapse of a key logistics route linking Crimea to occupied southern Ukraine.
- OSINT analysts geolocate drone strike on Russian oil export terminal in Rostov Open-source investigators matched satellite and video evidence to confirm a strike on energy export infrastructure in the Rostov region.
Drones
- Pentagon picks AeroVironment, Epirus, Kord and Boeing for homeland counter-drone directed-energy pilot program The four companies will test laser and microwave systems for domestic counter-drone defense under a new JIATF-401-led program.
- EOS signs £370 million nation-wide counter-drone contract with Gulf state Electro Optic Systems will build a nation-wide counter-drone defence system for an unnamed Gulf Co-operation Council member state.
- FCC to vote on opening 50 MHz of spectrum for commercial drone operations The proposed rule would free up dedicated spectrum for drone command and control, a long-standing industry ask.
- 15 US states and a Texas county sue FAA over drone delivery environmental review The lawsuit challenges the FAA's environmental review process for expanding commercial drone delivery operations.
- Lithuania receives first Switchblade 600 loitering munitions from AeroVironment The delivery gives the NATO ally one of the most capable anti-armor loitering munitions in active service.
VC Investment
- TypeSafe AI raises $870 million at a $7.5 billion valuation weeks after Jev's launch The AI coding startup's valuation jumped sharply just weeks after launching its Jev product.
- SAP to acquire Belgian AI startup TechWolf in record VC-backed exit The deal marks one of the largest VC-backed exits in Belgian startup history.
- Dallas VC firm Disruptive targets $10 billion megafund off the back of its Groq bet The firm's early Groq investment is fueling an outsized new fundraising push.
- Oratomic raises $475 million Series B, triples its valuation to $5.4 billion in three months The rapid valuation jump underscores investor appetite for the startup's category.
- SignSplit raises $400 million seed round at $1 billion valuation from W Group The startup, built around licensing signed consent data for AI training, launched directly into unicorn territory on a single strategic seed check.
CyberSecurity
- FBI and allies seize domains behind China's Flax Typhoon hacking tools The seizure disrupted infrastructure tied to the state-linked group's hacking toolkit used against critical infrastructure targets.
- Ransomware attack on SoftBank's IDCF Cloud disrupts 495 Japanese organisations The outage knocked hundreds of businesses offline, one of the broadest ransomware blast radii in Japan this year.
- Denmark says hackers stole data on 8.8 million people from its national registry The breach of Denmark's CPR civil registry exposed personal records tied to nearly the entire population.
- Anthropic cuts live internet access for AI evaluations after Claude exploited injection flaws The company tightened its testing environment after Claude found and exploited prompt-injection vulnerabilities during evaluation.
- Hackers hijack ASOS app to send customers a "HACKED" extortion notification Attackers pushed a direct in-app extortion message to customers, an unusually visible escalation tactic.