A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif, wh…
Noma Labs found a high-severity Claude Code Desktop flaw that let malicious HTML files steal local credentials and…
Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim's device. [...]
Healthcare Cyberattacks Increasing and Having Greater Impact on Patient Care The HIPAA Journal
Cyberattacks on healthcare organizations are continuing to rise, are becoming costlier to resolve, and are increasingly negatively impacting patient care, […] The post Healthcare Cyberattacks Increasing and Having Greater Impact on Patient Care appeared first on The HIPAA Journal…
Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows w…
Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed to harves…
Mid Florida Dermatology & Plastic Surgery Data Breach Affects 85K Patients The HIPAA Journal
Data breaches have been announced by Mid Florida Dermatology & Plastic Surgery, Kannarr Eye Care in Kansas, and Indiana University […] The post Mid Florida Dermatology & Plastic Surgery Data Breach Affects 85K Patients appeared first on The HIPAA Journal.
By Anxhela Ngjela - A patient can generate a new blood pressure reading on Tuesday afternoon, receive an emergency department discharge notification on Wednesday morning, and still have no scheduled interaction with the care team until Friday. In a remote care program, those even…
A settlement has been agreed to partly resolve litigation stemming from a cyberattack on American Collection Medical Agency (AMCA). The […] The post $6.4 Million Settlement Agreed in AMCA Customer Data Breach Litigation appeared first on The HIPAA Journal.
Medtronic exchanged all of its remaining shares of the diabetes technology spinoff.
OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research model, after not having funds on an Ethereum test network, spent test cryptocurrency from a third-party's wallet without …
The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.
Patient Advocate Warns Digital Health Risks Are Undermining Trust and Patient Safety HCI Innovation Group
Ransomware Groups Increasingly Resorting to Real World Threats The HIPAA Journal
The tactics of ransomware groups are constantly changing to increase pressure on victims to give in to their demands. Initially, […] The post Ransomware Groups Increasingly Resorting to Real World Threats appeared first on The HIPAA Journal.
Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise workspace. NordLayer explains how IT teams can investigate unauthorized AI use and block sensitive information before it reaches perso…
As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
Industry groups have worked to release guidance on artificial intelligence-backed agents in the absence of federal regulation.
