KnowledgeDeliver flaw exploited as a zero-day to install web shells
Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell. [...]
Últimas Notícias
2559 notíciasMillions of AI agents imperiled by critical vulnerability in open source package
"BadHost" was found in Starlette, a package with 325 million weekly downloads.
Feeding Frenzy: 'Megalodon' Malware Infects Thousands of GitHub Repos
In just six hours, the campaign quietly pushed thousands of malicious commits to more than 5,500 GitHub repositories, stealing credentials, developer secrets, and more.
Charter confirms data breach after ShinyHunters extortion threat
U.S. telecommunications giant Charter Communications has confirmed it suffered a data breach after the ShinyHunters extortion group threatened to leak stolen data unless a ransom is paid. [...]
State Cyber Leaders Beg Congress for More Funding, Support
A recent congressional hearing highlighted how states are reeling from federal cutbacks to important cyber grants and information sharing initiatives amid damaging attacks to critical infrastructure.
The Hackers Behind Shai-Hulud: Lucky or Skilled?
TeamPCP, the hackers behind the Shai-Hulud worm, has done significant damage to the open source ecosystem. But it's not necessarily due to skill alone.
For Enterprises, Security Remains Agentic AI's Biggest Challenge
Every company needs an agentic AI strategy, but the tools to allow agentic AI frameworks be safely and securely adopted are just starting to appear.
Dexcom warns of scrapped glucose sensors being resold
The diabetes tech firm has identified two lots of G7 sensors that have been stolen, sold and used by customers.
Trojanized Gemini and Claude Installers Target Developers Via SEO Poisoning
Cybercriminals are using SEO poisoning and fake Gemini and Claude installer sites to infect developers with fileless malware and steal data.
Microsoft Issues Out-of-Band SharePoint Patch
SharePoint access often means access to the keys of the kingdom, something attackers and defenders understand all too well.
How Legal Challenges Are Shaping No Surprises Act Implementation
By Bryan M. Dunton Esq. - The No Surprises Act (NSA) was enacted to address a specific and highly visible problem: patients receiving unexpected out-of-network bills for care they did not choose and often could not avoid. In that respect, the statute has largely done what Congres…
J&J corrects Impella controller over issue linked to 2 injuries, 1 death
The controller can stop for about 35 seconds, during which time the patient is unsupported by the heart pump.
Grady patient accuses hospital website of sharing private health data with Google – The Business Journals
Grady patient accuses hospital website of sharing private health data with Google The Business Journals
Claude Mythos AI Identified 10,000+ Software Vulnerabilities in One Month
Anthropic says its Claude Mythos AI identified more than 10,000 software vulnerabilities in one month, including critical flaws in open-source code.
MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries
The Iranian hacking group known as MuddyWater has been linked to a new campaign affecting at least nine organizations across nine countries on four continents in the first quarter of 2026. The activity targeted industrial and electronics manufacturing, education and public-secto…
Health IT Appointments & Hires
Latest announcements made from companies and organizations on hiring include Mosaic Health, Seed Health, AMA, CorVista Health, Next Health, Optivate, ACU-Serve, ConcertAI, Oshi Health, Astrana Health, Inc., Evergreen Nephrology, ProBioGen, Amplity, Watershed Health, & MedReview. …
Ōura files for IPO amid healthcare push
The smart ring maker’s filing follows a recent $900 million fundraise and comes amid plans to develop more health features for the device.
Olympus expands in cancer tech with $270M buy of BioProtect
BioProtect’s balloon spacer device separates the prostate from other structures during cancer radiation.
Beta Bionics to launch its first insulin patch pump to compete with Insulet
The device called Mint, which would work with the company’s adaptive insulin dosing algorithm, is expected to debut in the first half of 2027.
OCR Reports to Congress on HIPAA Compliance and Data Breaches in 2024 – The HIPAA Journal
OCR Reports to Congress on HIPAA Compliance and Data Breaches in 2024 The HIPAA Journal