An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is OpenCode's optional hosted service: a workspace saves its own OpenAI, Anthropic…
In this week’s special edition of “News You Can Use” on Healthcare NOW Radio Dr. Nick sits down with Adam Russo, CEO and Founder of The Phia Group. In the last episode in the series, they review the past episode topics and provided some updates and actionable things for everyone …
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers. [...]
By Ivor Campbell - As the world stands on the brink of arguably the most significant technological revolution in human history, the advancement of agentic artificial intelligence that will place decision making systems with humanity destroying potential in the hands of robots, th…
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled …
Alissa Smith | Dorsey Health Law | The Regulatory Sprint Catches up to HIPAA: New Proposed HIPAA Rules Dorsey & Whitney LLP
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. [...]
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...]
The thought leaders in our community are good about sharing their thoughts on the issues of today. Here are the top read and shared guest posts of September that we think deserve sharing again. The post Health IT Issues that Deserve a Second Read – September 2026 appeared first o…
Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." …
Audit a HIPAA Cloud Backup: 13 Steps, 2-Year Logs [2026] tech-insider.org
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environm…
The actions could have resulted in criminal charges had humans been behind the keyboard.`
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. [...]
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year.
Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.
Edwards is asking customers to return some of the delivery systems used with its Sapien M3 devices after receiving three reports of balloons bursting when inflated during the procedure.
Most OT devices at utilities, factories, and elsewhere have been deployed for a decade or more, but operators need to get agile and deploy new cyber defenses.
