The Anubis ransomware gang has claimed responsibility for the cyberattack on Coca-Cola's Fairlife dairy subsidiary, threatening to publish allegedly stolen corporate data unless the company pays a ransom. [...]
Apple has moved to address a security flaw in its Hide My Email service that enabled users' real email addresses to be unmasked, effectively undermining the feature's privacy guarantees. 404 Media reported Tuesday that a fix for the issue was deployed by Apple on July 3, 2026, a…
A Russian-speaking actor, "Trim," dismantled publicly available frontier models and integrated them with offensive security tools.
Latest announcements made from companies and organizations on hiring include Element Care, Aledade, HealthTree Foundation, Syra Health, Mantra Health, Protocol Behavioral Health, AGS Health, Parkview Health, Colorado Permanente Medical Group, RHA Health Services, Tower Health, & …
Supervisors consider AI use policy for its HIPAA program Kalona News
Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers. [...]
Major Healthcare Software Vendor Investigating Cyberattack The HIPAA Journal
The healthcare technology company Craneware is investigating a cybersecurity incident and has confirmed that a significant amount of data was […] The post Major Healthcare Software Vendor Investigating Cyberattack appeared first on The HIPAA Journal.
Protected in Name Only: HIPAA’s Health Data Gap Is Becoming a National Security Risk Foundation for Defense of Democracies
Hidden text on a web page was enough to make Kiro, AWS's agentic coding IDE, rewrite its own configuration file and run an attacker's code on a developer's machine, with no approval step able to stop it. Intezer, in research with Kodem Security, found that a request as ordinary …
The computing platform will make its debut at the Society of Robotic Surgery meeting this week, as Medtronic challenges Intuitive in the U.S. robotic soft tissue market.
Google's DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber, a specialized artificial intelligence (AI) model built atop 3.5 Flash that's designed to discover, validate, and patch vulnerabilities quickly and efficiently. According to the tech giant, the model wi…
CMS is proposing transformational reforms to Medicare’s physician payment and value-based care programs that would expand accountable care, modernize physician payment, reduce administrative burden, and help shift the healthcare system’s focus from treating illness to preventing …
Learn how Fig adds testing, deployment, and continuous verification to SecOps, helping security teams keep detections reliable as infrastructure evolves. daily.
A third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploitation, per watchTowr. The vulnerability in question is CVE-2026-50522 (CVSS score: 9.8), a critical deserialization of untrusted data in Microsoft O…
Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) ransomware on victim environments. Arctic Wolf Labs said it investigated multiple intrusions in June 2026 that began wit…
Critical infrastructure attacks often begin with stolen credentials, compromised devices, or trusted accounts. Specops Software explains why Zero Trust should verify both user identities and device trust before granting access to critical systems. [...]
Zimbra has rolled out fixes to address multiple critical security issues, including a command injection flaw in the Simple Network Management Protocol (SNMP) monitoring component. As many as nine security vulnerabilities have been patched in Zimbra 10.1.20. Topping the list is a…
AI-generated code introduces 15 vulnerabilities on average per codebase, but the actual risk depends on framework pairing more than the model used.
Fake FBI agents are using deepfake videos, spoofed IC3 websites and false recovery claims to steal money and personal information from people who were scammed before, the FBI warns.
