Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems (CMS) platform's plugins team to temporarily disable their downloads. "Unlike traditional software supply chain attacks, zero s…
Hackers breached a heat-and-power plant facility in Poland, which supplies heat to about 50,000 residents, using a private APN (Access Point Name) to access an OT (Operational Technology) network. [...]
New research shows how attackers can use security alerts and blocked events to manipulate and hijack AI agents.
Attacks targeting water systems just keep flowing across a dozen states, against ill-secured, Internet-exposed PLCs.
A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create rogue admin accounts. [...]
The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.
OpenAI has developed a new model called "GPT 5.6 Cyber," designed for vulnerability research, penetration testing, incident response, and remediation. [...]
It's time to turn from CVSS-backed patching to choke-point patching focused on breaking chains to critical assets.
A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor. [...]
Starts October 26th in San Diego - We're in an era of rapid transformation across managed care pharmacy. Artificial intelligence, political volatility, and scientific breakthroughs have all made their mark on managed care, and AMCP Nexus 2026 is where leaders come together to mak…
Sophisticated iPhone exploit chains previously limited to nation-states are spreading far and wide to organized cybercrime groups.
Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has deployed a previously undocumented ransomware strain called StormEncryptor. The use of StormEncryptor marks a shift from the adversary's previous use of Medusa ransomware, the Micr…
A public policy expert mapped global cybercrime laws to develop a five-point framework for protecting ethical hackers and good-faith security research.
Two CISOs Discuss Network Segmentation, AI , HIPAA Security Rule hcinnovationgroup.com
The crime solver wore disguises, spied on targets, and built intelligence networks long before modern-day tactics emerged. He has lessons for today’s ethical- and nonethical-hat hackers.
California Child Care Company Discovers 9-Year Employee Data Leak hipaajournal.com
A data breach has recently been announced by Child Care Resource Center that shows how even well-intentioned employee practices can […] The post California Child Care Company Discovers 9-Year Employee Data Leak appeared first on The HIPAA Journal.
Data Breaches Announced by Loma Linda University Health & UCLA Health hipaajournal.com
Data security incidents have recently been announced by Loma Linda University Health and UCLA Health. Loma Linda University Health Loma […] The post Data Breaches Announced by Loma Linda University Health & UCLA Health appeared first on The HIPAA Journal.
The latest agreement includes higher fees for overseas firms, hiring transparency requirements and greater use of real-world evidence.
