Individuals affected by data breaches at OnePoint Patient Care and Clay-Platte Family Medicine may be entitled to claim benefits after […] The post OnePoint Patient Care and Clay-Platte Family Medicine Settle Data Breach Lawsuits appeared first on The HIPAA Journal.
AI coding tools can introduce unvetted or hallucinated open source dependencies faster than traditional security reviews can keep pace. ActiveState explains why organizations should govern packages at the point of selection, before they enter the development pipeline. [...]
A new White House memo signed by U.S. President Donald Trump instructs the National Coordination Center (NCC) to establish a program that would allow private security companies to apply for approval to hack foreign cybercrime organizations. [...]
The diabetes tech firm recently brought its sales and marketing teams in-house after taking over commercialization of its device from Ascensia Diabetes Care.
OSF Healthcare pays $552,250 for HIPAA violations from ransomware breach Compliance Week
By Khalid Sattar - Healthcare has spent decades optimizing care delivery. It has invested billions in clinical excellence, advanced diagnostics, modern facilities, digital records, and operational efficiency. Yet one of healthcare's greatest challenges still occurs before care ev…
WhatsApp has begun rolling out a new optional "Scam Alert" feature, which uses a local machine learning model to warn users when scammers are targeting them. [...]
Highland Health Systems; Albany Gastroenterology Consultants Settle Data Breach Lawsuits The HIPAA Journal
Settlements have received preliminary approval to resolve class action data breach complaints against Highland Health Systems and Albany Gastroenterology Consultants […] The post Highland Health Systems; Albany Gastroenterology Consultants Settle Data Breach Lawsuits appeared fir…
Researchers discovered hackers-for-hire performing cyber espionage and financially motivated heists from the same Web panel.
The trust framework underlying Belgium's electronic ID system was fully compromised by severe vulnerabilities in a key browser extension, showcasing bigger problems with extensions in general.
Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a critical security feature bypass that stems from …
An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals. [...]
A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal live card data and send it to attackers in real time. [...]
The data was scraped and exfiltrated from 2,500 users of a compromised AI package.
The "City-Forum" campaign has been active since at least March 2025 and has targeted organizations across multiple sectors with custom tooling.
Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts. [...]
More than 737 browser extensions published on the Chrome Web Store impersonated well-known VPN and proxy services while routing users' traffic through SOCKS5 proxies operated by a single provider. [...]
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen backdoor targeting defense and aerospace companies across France, Germany, Brazil, and…
By Syed Sibt-e-Hassan - Most practices judge a good month by the balance in the bank. It is the slowest and least useful way to understand revenue. By the time a shortfall shows up in the account, its causes are weeks old and often past the point of recovery. The post Revenue Cyc…
