Barely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.
Researchers escaped the sandboxes in Cursor, Codex, Gemini CLI and Antigravity by having the AI agent write files that trusted host tools later run. Multiple CVEs, patches, and Google downgrading two Antigravity findings. [...]
The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, such as training datasets, vector databases, and model checkpoints. [...]
An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published packages showed no signs of tampering.
Ivanti CSO Daniel Spicer says frontier models have shown surprising effectiveness in early stages; but cost and human-in-the-loop viability remain open questions.
Marc Maiffret reflects on Code Red's legacy and the security lessons helping organizations navigate AI risk today.
Job pressures have increased as companies run headlong into AI adoption, causing 26% of top security executives to consider leaving their position.
Tempus AI’s planned acquisition follows recent interest in blood-based cancer tests across the medtech industry.
"The TFF Trap" uses fileless techniques and loaders with low detection rates to deploy various RATs and stealers, including Agent Tesla, Remcos, XWorm, and Best Private Logger.
Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as SmartLoader as part of an ongoing campaign cod…
OMB Publishes 2026 Unified Agenda Signaling Upcoming Health Privacy and Interoperability Updates from HHS Inside Privacy
A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a command-and-control channel to receive attacker commands and exfiltrate stolen data. [...]
A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments, droppers, builder notes, and two campaign chains. One was already live against Windows users in Me…
By Cheryl Cruver - For the better part of the last three years, healthcare has been fascinated by artificial intelligence (AI). Conferences, board meetings, and strategic plans have all focused on AI's capacity to reshape everything from clinical documentation to revenue cycle ma…
Abbott Investigating Cyberattack Claims From Two Threat Actors The HIPAA Journal
23andMe Pays $18 Million to Settle Multistate Data Breach Lawsuit The HIPAA Journal
A coalition of 42 state attorneys general has agreed to a $18 million settlement with 23andMe (now Chrome Holding Co.) […] The post 23andMe Pays $18 Million to Settle Multistate Data Breach Lawsuit appeared first on The HIPAA Journal.
The healthcare giant Abbott is investigating claims from two threat groups who allege cyberattacks and data theft, one involving legacy […] The post Abbott Investigating Cyberattack Claims From Two Threat Actors appeared first on The HIPAA Journal.
Centers Laboratory Discloses Data Breach Affecting 542K Individuals The HIPAA Journal
Centers Lab NJ LLC, a Hanover, New Jersey-based diagnostic testing laboratory that provides medical and diagnostic testing services to healthcare […] The post Centers Laboratory Discloses Data Breach Affecting 542K Individuals appeared first on The HIPAA Journal.
