Blue Fish Pediatrics in Texas has announced a July 2025 cyberattack that affected more than 41,000 Texas patients. Data breaches […] The post Blue Fish Pediatrics Data Breach Affects More Than 41,000 Texas Patients appeared first on The HIPAA Journal.
VA OIG Identifies Lack of Oversight of VA GenAI Chat Tools The HIPAA Journal
Attackers no longer need to sift through massive credential dumps. They can pay others to do it for them. Flare explores how an emerging underground market searches stolen credential databases for specific companies, domains, and accounts. [...]
A review of the use of generative artificial intelligence (GenAI) tools by Department of Veterans Affairs (VA) staff has identified […] The post VA OIG Identifies Lack of Oversight of VA GenAI Chat Tools appeared first on The HIPAA Journal.
Cybersecurity researchers have disclosed details of a new campaign that delivers CastleStealer by means of a previously unreported malware loader dubbed OXLOADER. According to Elastic Security Labs, the campaign leverages malicious Google Ads as a starting point to distribute th…
A multi-platform malware campaign abuses fake trust signals to infect Windows and Mac users with a crypto clipper packed with 15,500 attacker wallets.
Google has set September 30, 2026, as the day it begins enforcing Android developer verification in the first four countries, and the major device-maker app stores are in from the start. On that date, certified Android phones in Brazil, Indonesia, Singapore, and Thailand will bl…
By April Miller - Medical billing is a critical aspect of running a healthcare organization, but some facilities have to deal with slower manual processes and claim management challenges. As providers face growing financial and administrative demands, many are turning to automate…
Earlier this month, I spoke at the Gartner Security & Risk Management Summit about a blind spot most security programs are still not accounting for - how attackers are circumventing AI security programs by using legacy infrastructure to hijack AI agents. AI adoption is moving fa…
The post How HITRUST r2 Measured and Managed Maturity Are Scored appeared first on Clearwater.
Icarus extortion group used a legacy Klue Battlecards credential to bypass security and steal bulk Salesforce records from affected companies.
It’s Monday again. This week’s threat list looks painfully familiar: abused integrations, fake tools, poisoned websites, ransomware crews trying to shut down security tools, and mobile malware asking for way too much control. The annoying part is how little of this feels new. W…
Canada's spy service got a judge's permission to reach into infected servers, home routers, and IoT gear sitting on Canadian soil and neutralize two foreign-run botnets. The Federal Court released a public version of the ruling on June 15. It is the first time the Canadian Secur…
ShinyHunters Data Extortion Group Threatens to Leak 8.8 TB of Stolen One Medical Data The HIPAA Journal
One Medical, the Amazon-owned primary care provider, has recently announced a cybersecurity incident in which an unauthorized third party gained […] The post ShinyHunters Data Extortion Group Threatens to Leak 8.8 TB of Stolen One Medical Data appeared first on The HIPAA Journal.
A new malware family is turning forgotten home routers into a distributed reconnaissance and proxy network, not the DDoS botnet these devices usually end up in. QiAnXin's XLab calls it AryStinger and counts at least 4,300 infected routers, a total it says is still rising. The di…
A new report from INTERPOL has revealed a "dramatic increase" in cybercrime in Asia and the South Pacific, fueled by rapid digitalization, internet penetration, new technologies, organized criminal networks, and a disparity in cybersecurity maturity. According to INTERPOL's 2025…
NOW on Demand Tell Me Where IT Hurts episode with host Dr. Jay Anders and his guest Kimberly Brandt, Chief Operating Officer and Deputy Administrator at CMS. They discuss slow value-based care adoption in Medicare, CMS's data quality push through FHIR APIs and USCDI, and how AI w…
A previously undocumented malware botnet named AryStinger has compromised more than 4,000 outdated routers to turn them into proxies for malicious traffic. [...]
In this monthly report you will find news and highlights in the Applied Life Sciences from i-GENETIC AI, Bright Uro, T-CURX, Pantherna Therapeutics, Cercare Medical, ProBioGen, Vetter, United Immunity and more. The post NOW in Life Sciences – June 2026 appeared first on Health IT…
