New Microsoft research shows how attackers can hijack AI agents that act on a user's behalf, using nothing more than a poisoned tool description to make the agent quietly hand over company data to an outsider. The trick is that the agent never breaks a rule. Every step looks rou…
A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, then stitching them into a network built to knock websites and online services offline. Researchers at QiAnXin's XLab have tracked it since February 2…
EvilTokens phishing hides takeover clues until browser execution leaving SOC teams needing deeper visibility to validate threats faster and reduce account risk.
By Ashley Blankette - Interconnected data continues to be the most valuable currency in healthcare administration. Attending AHIP ‘26 in Las Vegas, it became evident that the entire sector feels this pressure. The industry has reached a turning point where we can no longer afford…
Learn how modern businesses can judge office software for ISO 27001 certification, GDPR-aligned data handling, encryption, and safer PDF workflows with clarity.
It is only a matter of time before a cyberattack is directly linked to the death of a patient, according to new research from the managed IT and security service provider Omega Systems. Last year, 52% of healthcare organizations expected a cyberattack to result in a patient fatal…
Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner. The activity has been found to weaponize CVE-2026-33017 (CVSS score: 9.3), an unauthenticated remote code execution (RCE) vulnera…
A malicious extension in the Chrome Web Store is masquerading as the Perplexity AI answer engine, intercepting search traffic and collecting browsing information. [...]
Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing wallet addresses when unsuspecting users initiate a transaction. The cryptocurrency clipper activity has been codenamed Silent Swap by McA…
Pacira’s iovera device uses cold therapy for targeted pain relief. An analyst said the addition complements Zimmer Biomet’s portfolio.
The U.S. government has announced record-breaking Medicaid fraud charges as part of its 2026 National Health Care Fraud Takedown, with […] The post DOJ’s Using Advanced Data Analytics and AI Tools to Combat Healthcare Fraud Before Payment appeared first on The HIPAA Journal.
By Abhishek Gupta - The World Health Organization estimates a workforce shortage of 11 million health workers across the globe by 2030. More alarming is the finding that this will mostly be in the low- and lower-middle income countries, where the need for a stable workforce is cr…
A fake FIFA World Cup 2026 T-shirt giveaway scam is spreading Voidrift malware through personalized emails using company logos and trusted websites to bypass security filters.
Christina Zamarro will take over the role in July after spending nearly 20 years at Goodyear Tire & Rubber Company, most recently serving as its CFO.
DC, United States, 30th June 2026, CyberNewswire
Boston, Massachusetts, 30th June 2026, CyberNewswire
The safety check that is supposed to stop an AI coding agent from running a dangerous command can be walked straight past using a shell trick that has been public for decades. New research from Adversa AI, which is named the bypass GuardFall, found it works against ten of the el…
Business Email Compromise is more than an email scam. It's a coordinated operation involving compromised accounts, financial research, and cash-out networks. Flare explores how underground forums reveal how BEC attacks are planned and executed. [...]
Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through their network traffic. In many cases, the path in was visible just by watching what the app sent: a plaintext API key, a reusable token, or a backend s…
New York, United States, 30th June 2026, CyberNewswire
