Critical Langflow Flaw Exploited as Attacks on AI Platform Rise
The attacks targeting CVE-2026-0768 are the latest threat against the low-code AI development platform, which is receiving more attention from adversaries this year.
Últimas Notícias
3768 notíciasAI Model Evaluator METR Hit by Credential Theft, Probing
In one attack, threat actors stole an API key that ultimately led to the consumption of $600,000 in public AI model credits for the security nonprofit.
Aesto Health says data breach affects over 9.5 million patients
Aesto LLC, operating as Aesto Health, disclosed that a data breach discovered recently affects more than 9.5 million individuals. [...]
ChatGPT Integrates Epic EHR with Public Health Data Access – blockchain.news
ChatGPT Integrates Epic EHR with Public Health Data Access blockchain.news
Critical Langflow flaw exploited to steal OpenAI and AWS keys
Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and keys. [...]
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-82329 (CVSS score: 9.8), a case of authentication bypass that could lead to admi…
Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet (formerly UNC5669) since 2024. Google Threat Intelligence Group (GTIG) and Mandiant teams described the threat actor as "speciali…
$50B Rural Health Transformation Program Needs More Transparency, Groups Say
By Arielle Zionts - One year into its creation, a $50 billion federal program aimed at improving rural healthcare lacks transparency, which could make it difficult to protect against fraud, identify successful projects, and ensure the program delivers on its promise to transform …
Hacking Incidents Announced by Rehabilitative Care Providers and Senior Living Facilities – The HIPAA Journal
Hacking Incidents Announced by Rehabilitative Care Providers and Senior Living Facilities The HIPAA Journal
Hacking Incidents Announced by Rehabilitative Care Providers and Senior Living Facilities
Data breaches have been announced by multiple North Carolina rehabilitative care practices, senior living and skilled nursing care providers in […] The post Hacking Incidents Announced by Rehabilitative Care Providers and Senior Living Facilities appeared first on The HIPAA Journ…
Medtronic kicks off its fiscal year on a high note
The medical device maker grew revenue by double digits in its fiscal first quarter, following fourth-quarter growth of nearly 10%.
MiniMed submits new patch pump for FDA clearance
The diabetes tech firm is preparing for the launch of new devices, including a tubeless insulin pump and a fully closed loop automated insulin delivery system.
Health IT Appointments & Hires
Latest announcements made from companies and organizations on hiring include CHG Healthcare, Modivcare, Gold Coast Health Plan, MedScout, Assembly Health, Porter, Royal Health Inc., Azara Healthcare, Crescendo Health, GE HealthCare, I-PASS Patient Safety Institute, Madaket Health…
Hackers push malicious Virtualizor update in BGP hijacking attack
Hackers delivered malicious updates to the Virtualizor VPS management software after hijacking BGP routing for its update infrastructure and redirecting update requests to malicious servers. [...]
GE HealthCare secures CE mark for photon-counting CT device
The certification positions GE HealthCare to challenge Siemens Healthineers for the European market.
Novocure data breach affects more than 1,400 cancer patients
Healthtech company Novocure says the data of an undisclosed number of employees and more than 1,400 U.S. cancer patients has been exposed in a mid-August cyberattack. [...]
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS d…
Why Even the Best Edge Security Still Misses High-Risk Sessions
Attackers can hide behind residential proxies, VPNs, and other infrastructure that makes malicious sessions appear legitimate to existing edge security controls. Spur explains how session enrichment adds data points that help organizations identify risky sessions and make stronge…
ClickFix Campaign Compromises 31 Orgs, Abuses Polygon Blockchain
The campaign uses EtherHiding to dynamically update its command-and-control server, abusing the blockchain as an attacker-controlled address book.
HHS Convenes Leaders at the Live Real Life Symposium to Address Harms of Screen Use in Children – HHS.gov
HHS Convenes Leaders at the Live Real Life Symposium to Address Harms of Screen Use in Children HHS.gov