Security firm Coinspect has disclosed a crypto wallet flaw it calls Ill Bloom, and attackers are already using it. The flaw is in how some wallet software generated its recovery phrase, the words that control the money. When that phrase is made with weak randomness, an attacker c…
A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks. [...]
A 41-year-old former ransomware negotiator has been sentenced to nearly six years (i.e., 70 months) in prison in the U.S. for their role in conspiring with the now-defunct BlackCat ransomware operators to extort multiple victims and working with two other cybersecurity profession…
The OpenMandriva Linux project announced that it was the target of an attempted act of internal sabotage after a dispute among contributors. [...]
With the acquisition of Robocath completed, Stereotaxis intends to accelerate development of next-generation robotic technologies for endovascular procedures.
The feud between NightmareEclipse and Microsoft shows no signs of resolving soon.
Microsoft details GigaWiper, a destructive Windows backdoor that can wipe disks, encrypt files and give attackers remote access to compromised systems globally.
Obscurity isn't a defense. If your company has any Internet-facing vulnerability, you're at risk from multiple threats.
The researcher known as "Nightmare-Eclipse" published a proof-of-concept (PoC) exploit for the Windows Defender vulnerability in early June after dropping several other Microsoft zero-days.
Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node Package Manager (npm) that stole cryptocurrency wallet private keys and mnemonic seed phrases. [...]
If you're handling them like a service account or API token, consider yourself behind. AI agents need a fundamentally different approach.
Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. "Operators rely on automated scraping tooling with custom or legitimate-sounding user a…
Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not one tool but three older destructive programs bolted into one, offered as commands the operator can choose from. Each is a different way to break a machine: wipe …
Newly released episode of AI Amplified. Host Dr. Heather Bassett talks to Miriam Paramore, founder and CEO of RxUtility, discussing a problem most patients don't realize exists: prescription drug prices are opaque, highly variable across pharmacies, and can fluctuate multiple tim…
Darktrace says a LiteLLM AI gateway linked to Amazon Bedrock was compromised for cryptomining after signs of exposed SSH activity.
A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to steal data from SharePoint environments. [...]
Microsoft says Windows users should expect to see an increase in security updates as the company increasingly relies on artificial intelligence to discover vulnerabilities in its codebase. [...]
GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating granular access tokens (GATs) designed to bypass two-factor authentication (2FA). The Microsoft-owned subsidiary noted that the following npm install be…
The draft agreement outlines the Food and Drug Administration’s goals for medical device reviews from 2028 to 2032.
Business and financial news from NextGen Healthcare, SOS Technologies, FitTrace, Inovalon, Verato, emtelligent, Ochsner MD Anderson Cancer Center, Callie Care, Teladoc Health, and more. The post Health IT Business News, Financial Edition – July 9, 2026 appeared first on Health IT…
