Cybersecurity researchers have discovered three packages on the Python Package Index (PyPI) repository that are designed to stealthily deliver a previously unknown malware family called ZiChatBot on Windows and Linux systems. "While these wheel packages do implement the features …
The New York State Department of Financial Services (NYDFS) has announced that Delta Dental Insurance Company (DDIC) and Delta Dental of New York (DDNY), Inc. will pay a $2.25 million penalty to resolve allegations that they had inadequate incident response and cybersecurity inci…
A dozen critical security vulnerabilities have been disclosed in the vm2 Node.js library that could be exploited by bad actors to break out of the sandbox and execute arbitrary code on susceptible systems. vm2 is an open-source library used to run untrusted JavaScript code inside…
Explore the best OSINT tools for your digital investigations, threat intelligence, reconnaissance, and tracking online activity in 2026.
A phishing campaign delivered through Google sponsored search results is targeting credentials for ManageWP, GoDaddy's platform for managing fleets of WordPress websites. [...]
Authors of the VoidStealer Trojan uncovered a way to get around Google's App-Bound Encryption (ABE), opening the door to infostealers.
ShinyHunters' attack on Instructure, which owns the widely used Canvas learning management system (LMS), carries big questions about the trust educational institutions put into their vendors.
Cybersecurity researchers have exposed a new Mirai-derived botnet that self-identifies as xlabs_v1 and targets internet-exposed devices running Android Debug Bridge (ADB) to enlist them in a network capable of carrying out distributed denial-of-service (DDoS) attacks. Hunt.io, wh…
Google patches a CVSS 10 Gemini CLI vulnerability that allowed hackers to use prompt injection and privilege escalation for a full supply chain compromise.
Interruptions in the supply of neurosurgical patties, sponges and strips are expected to continue through 2026.
The first-in-human study showed no adverse events and a 100% rate of cecal intubation, where the endoscope is guided to the beginning of the large intestine.
A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary code on the host system. [...]
Cisco patched a Crosswork Network Controller and Network Services Orchestrator denial-of-service vulnerability that requires manually rebooting targeted systems for recovery. [...]
ShinyHunters breached Instructure and Vimeo, exposing millions of student and user records through direct and supply chain attacks.
As HL7 International launches its second annual Global AI Challenge, a worldwide competition spotlighting solutions that use standards-based data to solve real healthcare problems, we spoke with HL7’s Chief AI Officer, Dr. Daniel Vreeman about what last year’s inaugural competiti…
Disc Soft Limited, the maker of DAEMON Tools Lite, confirmed that the software had been trojanized in a supply chain attack and released a new, malware-free version. [...]
CEO Ashley McEvoy also shared an update on the company’s recent recall of insulin patch pumps.
We are seeking out the latest developments around virtual healthcare. News from Twentyeight Health, ATA, TytoCare, Enghouse Vidyo, Conscientia Health, and more. The post Virtual Healthcare May 2026 appeared first on Health IT Answers.
The findings for patients 30 days after surgery were included in a package of data supporting J&J’s submission to the FDA for de novo authorization.
RXNT Notifies Customers About Cybersecurity Incident and Data Breach The HIPAA Journal
