AdaptHealth, a publicly traded healthcare company that provides home medical equipment, diabetes supplies, and sleep therapy products, has informed the […] The post AdaptHealth Reports Material Cybersecurity Incident and Theft of Patient Data appeared first on The HIPAA Journal.
A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly hacked with the notorious Pegasus spyware while serving on a committee that was tasked with investigating the abuse of such commercial s…
A CISA alertou que uma vulnerabilidade no Microsoft SharePoint Server está sendo explorada em ataques reais. A falha, identificada como CVE-2026-45659, permite execução remota de código em servidores locais da plataforma. O problema afeta implantações on-premises do SharePoint Se…
Cybersecurity researchers have flagged a new macOS information stealer called PamStealer that employs a series of clever tricks to infect systems and siphon sensitive data. The stealer, discovered by Jamf Threat Labs, is distributed as a compiled AppleScript (.scpt) file imperso…
A agência de cibersegurança dos Estados Unidos, CISA, alertou ontem que atacantes começaram a explorar uma vulnerabilidade crítica de execução remota de código no Microsoft SharePoint, registrada como CVE-2026-45659. A falha, que permite que atacantes autenticados com privilégios…
A Cisco confirmou ontem que atacantes estão explorando ativamente uma vulnerabilidade no Unified Communications Manager (Unified CM), sistema central de telefonia IP da empresa. A falha, registrada como CVE-2026-20230, havia sido corrigida no início de junho, mas a empresa só ago…
A campanha FortiBleed, que comprometeu mais de 430 mil firewalls FortiGate em todo o mundo, está diretamente ligada a operações de ransomware das famílias INC Ransom e Lynx, de acordo com uma análise publicada pela SOCRadar em 1º de julho. A descoberta, feita pela unidade de pesq…
Uma vulnerabilidade crítica no Citrix NetScaler ADC e Gateway, registrada como CVE-2026-8451 e classificada com CVSS 8.8, está sendo ativamente explorada em ataques desde o dia seguinte à sua divulgação pública, de acordo com uma análise publicada pela Lupovis em 1º de julho. O p…
The discovery underscores the increased effort being poured into Mac infostealers.
After gaining a foothold in thousands of Fortinet firewalls, the attackers are starting to monetize that access, and are also piling on a Nextcloud zero-day bug.
Google has significantly degraded NetNut, one of the biggest networks that turns home devices into rented relays for other people's traffic. Working with the FBI, Lumen, and others, Google's Threat Intelligence Group (GTIG) said this week it had reduced the network's pool of usa…
Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial access. "Although tactics differ between affiliates, common patterns emerged in tradecraft through use of legitimate Rem…
The ransomware campaign relies on basic social engineering and stretches across multiple regions, including the US, Europe, Middle East, and elsewhere.
FortiBleed, the Fortinet credential theft campaign, is now connected to INC Ransom and Lynx, with a Nextcloud zero-day vulnerability also under investigation.
This week’s security news is mostly about weak spots. Browsers, bots, sandboxes, AI systems, and email flows all show the same problem in different ways. Everything looks normal until someone tests a small gap and finds a way through. This is not one big break. It is small perm…
ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA bypass tactics work and how to defend against them. [...]
ClickFix Social Engineering Technique is the Leading Method for Malware Delivery The HIPAA Journal
The ClickFix social engineering technique is the leading method of malware delivery, according to an analysis by researchers at ReliaQuest. […] The post ClickFix Social Engineering Technique is the Leading Method for Malware Delivery appeared first on The HIPAA Journal.
The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that's designed to gain surreptitious access to a victim's email correspondence via the Google API. "In this campaign, the attackers focused their attention on corporate email communications ho…
Cibercriminosos estão usando drivers legítimos do Windows para desativar antivírus e ferramentas de detecção em ataques contra empresas. A técnica é conhecida como BYOVD, sigla em inglês para “traga seu próprio driver vulnerável”. O método se aproveita de drivers reais, assinados…
