Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leak

2026-07-21T19:23:29Z842c64e0043d057cc778a455ea4f1669dacb39fcf74f9ffbfe0801ef4341fd84
AI-malwareAnubisCoca-ColaEncForgeEstée LauderFairlifeGlobalProtectJadePufferLegacyHiveMicrosoft-365-C2 (HollowGraph) ,calendar-C2,autonomous-agent-breOracle E-BusinessOstiumPalo AltoQilinSMA1000SonicWallWindowsWordPresscrypto-theftdata-breachprivilege-escalationransomwarewebshellwp2shellzero-day

What happened

Multiple high-impact incidents and active exploit campaigns were reported: the Anubis ransomware gang claims responsibility for an attack on Coca‑Cola’s Fairlife subsidiary and threatens data leaks; WordPress “wp2shell” critical flaws (CVE-2026-63030, CVE-2026-60137) are being exploited to deploy persistent webshells and malicious plugins; the Qilin ransomware group is exploiting a critical PAN-OS GlobalProtect authentication bypass to gain network access. Separately, SonicWall SMA1000 vulnerabilities were abused as zero-days to install custom malware, a Windows “LegacyHive” privilege‑escalat​

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
842c64e0043d057cc778a455ea4f1669dacb39fcf74f9ffbfe0801ef4341fd84
Enrichment time
2026-07-21T19:23:29Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.