Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are setting off detection rules written to catch human intruders. The agents are not malicious. They just do a lot of things that, to a behavioral engin…
A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft 365 users to enroll a new Entra passkey. [...]
A financially motivated operation uses lures of cracked or pirated software to deliver a malware two-for-one combo for data theft and cryptomining.
Selling the software business to Frazier Healthcare Partners will allow the respiratory device maker to shift more resources to faster-growing parts of its portfolio.
Moving our healthcare system into the digital age, better outcomes, controlling and reducing costs, and patient access to their health data. Our monthly HIE rundown includes updates on industry interoperability news, TEFCA, HIE networks, job openings and vendor contracts. The pos…
AI coding assistants have a habit of making things up. Ask one to fetch a popular tool, and it will sometimes hand back a real-sounding name for a project that does not exist. New research, which its authors call HalluSquatting, turns that habit into an attack: work out the fake…
Penumbra, which is set to become part of Boston Scientific this year, is running the trial to inform the treatment of a type of medium-vessel blockage.
Ubiquiti has shipped updates to address multiple critical security flaws impacting UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS that could result in privilege escalation and arbitrary command execution. The list of vulnerabilities is as follows - CVE-…
Kaspersky details how the newly named Armored Likho APT uses BusySnake Stealer, AI-generated loaders, and phishing to target government and energy organizations.
Specops Software explains how AI is making service desk impersonation attacks more convincing, personalized, and scalable, along with practical steps organizations can take to strengthen onboarding and identity verification. [...]
HOW TO ENSURE YOUR TECHNOLOGY IS HIPAA COMPLIANT HME News
The market for robotic surgery got more competitive this year, with Medtronic, Stryker, CMR Surgical and Distalmotion introducing new platforms. Check up on their progress and more in MedTech Dive’s roundup of robotics coverage.
Melbourne, Florida, United States, 8th July 2026, CyberNewswire
A recent EvilTokens campaign targeting businesses across the US and Europe is exposing a new email security blind spot. This “ghost phishing” technique keeps the malicious page hidden until it decrypts and comes to life inside the victim’s browser. For security leaders, the risk…
A new banking fraudulent operation is targeting customers of Mexican banks, fintech, payment processors, and cryptocurrency exchanges using ClickFix lures. The activity cluster, tracked by Elastic Security Labs under the moniker REF6045, involves infecting victims through fake C…
By Kajol Shah - Healthcare organizations are moving quickly from AI pilots to AI-enabled workflows. What began as administrative chatbots and documentation support is now expanding into AI agents that can assist with scheduling, intake, patient communication, clinical documentati…
DuckDuckGo announced that its browser can now block most video ads on YouTube, including those shown before the video starts playing and during playback. [...]
China-linked UNK_MassTraction targets US and Canadian universities through Roundcube flaws, stealing sessions and opening access to research mail servers.
New research shows that a signed Git commit's hash is not the one-of-a-kind name that much of the software world assumes it to be. Given any signed commit, someone without the signing key can mint a second commit with the same files, author, and date, and a valid signature, GitHu…
For years, account takeover (ATO) followed a predictable script. Attackers bought stolen credentials in bulk, ran them through automated tools, and waited for matches. Credential stuffing was cheap, scalable, and for defenders, relatively well understood. That era is ending. Not…
