27,000-Download Codex UI Tool Secretly Stole OpenAI Refresh Tokens
A malicious Codex UI npm package with 27,000 weekly downloads was caught exfiltrating OpenAI refresh tokens, exposing developers to account takeover risks.
Últimas Notícias
2557 notíciasWP Maps Pro bug exploited to create admin accounts on WordPress sites
Hackers are targeting WordPress websites running a vulnerable version of the WP Maps Pro plugin, which allows creating rogue administrator accounts without authentication. [...]
The Engineer Who Documented the Future: Siva Krishna Pittu’s Five-Year Research Legacy in Healthcare Technology – vocal.media
The Engineer Who Documented the Future: Siva Krishna Pittu's Five-Year Research Legacy in Healthcare Technology vocal.media
NursesNOW Roundup May 2026
Our monthly round up of nurses news, from the associations, providers, hospital systems, and nurses themselves. The post NursesNOW Roundup May 2026 appeared first on Health IT Answers.
Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices
Dutch authorities have announced the takedown of a botnet that enslaved millions of infected devices, including computers, tablets, smartphones, and IoT devices, to carry out malicious attacks. The bot network, per the Dutch Politie and the National Cyber Security Center (NCSC),…
Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks
Palo Alto Networks is warning that hackers are now exploiting a PAN-OS GlobalProtect authentication bypass flaw, tracked as CVE-2026-0257, in attacks attempting to breach corporate networks. [...]
Fake Anthropic Sites Deliver Fileless Infostealer to Claude Code Users
Fake Anthropic websites are being used to target Claude Code users with a fileless infostealer campaign that steals browser credentials and evades detection.
New CIFSwitch Linux flaw gives root on multiple distributions
A newly discovered local privilege escalation vulnerability dubbed 'CIFSwitch' in the Linux kernel could allow attackers to forge CIFS authentication key descriptions, abuse the kernel's key request mechanism, and gain root privileges. [...]
Health IT Marketing Minutes – May 2026
What makes marketing in the health IT space unique? Who are the movers and shakers? What's working, what's trending? Where can you learn more? News from Unlock Health, Swaay.Health, anthonyBarnum, Matter Communications, KNB Communications, Brafton, Supreme Group, FINN Partners, E…
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
Palo Alto Networks has warned that a recently disclosed medium-severity security flaw impacting PAN-OS and Prisma Access has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-0257 (CVSS score: 7.8), refers to a case of authentication bypass that …
Name That Toon: Mark of (Cybersecurity) Progress
As part of Dark Reading's 20th anniversary package, we asked readers for a cybersecurity-related caption that captures their thoughts about the industry's last two decades.
California AG sues over 23andMe data breach
The attorney general said the civil penalties could add up to “multiple millions” if the suit is successful.
California attorney general sues over 23andMe data breach
The attorney general said the civil penalties could add up to “multiple millions” if the suit is successful.
Natera’s Solomon Moshkevich on how MRD testing pinpoints cancer recurrence
Molecular residual disease testing could one day be as ubiquitous as a CT scan, says Natera’s president of clinical diagnostics.
Botnet of more than 17 million devices dismantled
The botnet was reportedly tied to a Russia-based residential proxy network.
ChatGPT share links abused to host fake outage pages to deliver malware
Threat actors are abusing ChatGPT's content-sharing feature to display fake OpenAI outage pages that direct users to download malware disguised as the ChatGPT desktop application. [...]
California AG sues 23andMe over 2023 breach exposing health data
California Attorney General Rob Bonta filed a lawsuit against 23andMe, now Chrome Holding Co., over the company's failure to protect sensitive customer genetic and personal information. [...]
ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface
Cybersecurity researchers have disclosed details of a vulnerability in OpenAI ChatGPT that leverages the artificial intelligence (AI) assistant's implicit trust in Markdown links and images to trigger prompt injections and open the door to phishing attacks. The technique has bee…
Why data mining is functionally required after a HIPAA breach – IAPP
Why data mining is functionally required after a HIPAA breach IAPP
J&J recalls Impella heart pumps after patient dies
Johnson & Johnson asked customers to quarantine and return affected products. A spokesperson said J&J conducted quality system audits as part of its integration of Abiomed that resulted in some field actions.