A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no special access take full control of a machine as root. It affects Linux desktops, servers, and Android, and a fix is out. Bad Epoll sits in the same small stretch of kernel code w…
Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that's distributed by means of a multi-stage phishing chain capable of bypassing traditional security controls. Avalon combines credential collection, lateral movement,…
A joint operation involving Google has disrupted NetNut, a residential proxy network that gave access to millions of compromised Android devices, including smart TVs and streaming boxes. [...]
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft. According to JFrog, the packages "rollup-packages-polyfill-core" and "rollup-runtime-polyfill-c…
By Ubaid Pisuwala - Revenue cycle management has always been the quiet engine behind a healthcare organization's financial health. But for too long, that engine has run on outdated fuel manual processes, human error, and reactive denial management that costs U.S. providers billio…
A new phishing-as-a-service (PhaaS) platform dubbed "ARToken" appears to operate as an affiliate of the EvilTokens phishing platform, giving researchers a glimpse into an extensive toolkit designed to compromise Microsoft 365. [...]
A previously undocumented threat actor known as Armored Likho has been attributed to cyber attacks targeting government agencies and the electric power sector across Russia, Brazil, and Kazakhstan. "Armored Likho blends financially motivated campaigns targeting private individua…
The newly spotted PamStealer is spreading through a fake Maccy clipboard app and steal Mac passwords, browser data and clipboard content.
Two new models from Chinese firms compete with top US mainstream and frontier models. Should cyber-defenders be worried?
ANCHOR-CI Framework Strengthens Partnerships and Information Sharing to Secure Critical Infrastructure The HIPAA Journal
The Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) has announced the formation of the Alliance of […] The post ANCHOR-CI Framework Strengthens Partnerships and Information Sharing to Secure Critical Infrastructure appeared first on T…
AdaptHealth Reports Material Cybersecurity Incident and Theft of Patient Data The HIPAA Journal
AdaptHealth, a publicly traded healthcare company that provides home medical equipment, diabetes supplies, and sleep therapy products, has informed the […] The post AdaptHealth Reports Material Cybersecurity Incident and Theft of Patient Data appeared first on The HIPAA Journal.
A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly hacked with the notorious Pegasus spyware while serving on a committee that was tasked with investigating the abuse of such commercial s…
We have rounded up some virtual events around our industry. They are all free to attended so register today. And check back each week for new events. Have an event we can include? Contact us. The post Upcoming Virtual Events Roundup appeared first on Health IT Answers.
Find a new podcast or catch up on some of your favorites, here are all the newest episodes released this week on Healthcare NOW Radio. Have a great weekend! The post Weekend Playlist on Healthcare NOW Radio appeared first on Health IT Answers.
Delaware & Florida Women’s Health Centers Announce Data Breaches The HIPAA Journal
Two women’s healthcare providers have announced data privacy incidents. Women’s Wellness of Southern Delaware recently learned about unauthorized retention of […] The post Delaware & Florida Women’s Health Centers Announce Data Breaches appeared first on The HIPAA Journal.
A consolidated class action lawsuit against the medtech company Stryker over a March 2026 cyberattack has been voluntarily dismissed by […] The post Employees Drop Class Action Lawsuit Against Stryker Over Hamdala Cyberattack appeared first on The HIPAA Journal.
Cybersecurity researchers have flagged a new macOS information stealer called PamStealer that employs a series of clever tricks to infect systems and siphon sensitive data. The stealer, discovered by Jamf Threat Labs, is distributed as a compiled AppleScript (.scpt) file imperso…
