Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observe…
A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files.
Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. [...]
Vendor Incident Affects 341,000 Blueberry Pediatrics Patients The HIPAA Journal
Blueberry Pediatrics, a telemedicine service provider that offers subscribers access to board-certified pediatricians, has been affected by a data security […] The post Vendor Incident Affects 341,000 Blueberry Pediatrics Patients appeared first on The HIPAA Journal.
Artificial intelligence (AI) is everywhere in healthcare, from doctors’ intake forms to cancer screenings. But, in some cases, life-and-death uses are outpacing cyber security.
NOW released, the In Network podcast feature Designing for Health. Craig Joseph, MD talks with Dr. Bimal Desai, Vice President and Chief Health Informatics Officer at Children's Hospital of Philadelphia (CHOP). Together, they explore the implications of AI on medical education, c…
Microsoft again asked Entra ID administrators to migrate users to phishing-resistant methods to avoid sign-in disruptions before it retires SMS and voice authentication in February 2027. [...]
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as "PHP2Shell" put the web management interfaces of firewalls, VPNs, application delivery controllers, and other appliances at risk. [...]
The acquisition, which will give RadNet a new professional services unit, is expected to help hospitals solve challenges with radiology coverage.
PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important as fixing vulnerabilities to reduce the dam…
Government Initiative Provides Free Cybersecurity Upgrades and Security Services to Rural Hospitals The HIPAA Journal
Small and rural healthcare providers lack the resources they need to make essential improvements to their information security programs to […] The post Government Initiative Provides Free Cybersecurity Upgrades and Security Services to Rural Hospitals appeared first on The HIPAA …
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) in the Oracle Application Object Library of O…
Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability. [...]
By Pawan Toshniwal - The industry spent the better part of a decade trying to make the phone matter less. Portals, online booking, text-to-schedule links. Some of it helped. Most of it didn’t move the needle the way we all expected. Patient access was supposed to go digital, and …
A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the machine is booting over the network. UEFI firmware is the softwa…
Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster de…
Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows - CVE-2026…
