A BeyondTrust alertou ontem seus clientes sobre duas vulnerabilidades críticas em suas plataformas Remote Support (RS) e Privileged Remote Access (PRA), que poderiam permitir que atacantes não autenticados contornassem controles de acesso. As falhas, registradas como CVE-2026-401…
A hidden authentication backdoor has been found in multiple Tenda router firmware versions, potentially allowing an attacker to gain administrative access to the device's web management panel. [...]
IA integrada ao prontuário cruza dados clínicos em tempo real, com impacto em eficiência operacional e desfechos assistenciais A inteligência artificial começa a mostrar impacto concreto dentro das UTIs brasileiras. […] O post IA na UTI do Samel reduz burocracia e amplia tempo do…
By Arielle Zionts and Sarah Jane Tribble - In Maine, state health officials hoped to steer a slice of $190 million in new federal rural health funding to shield hospitals and clinics from the fallout caused by cuts to federal health programs. Their plan would have helped pay to t…
O FBI abriu em fevereiro deste ano um centro de treinamento de 2 mil metros quadrados em Huntsville, Alabama, para preparar seus agentes e peritos em investigações que dependem cada vez mais de evidências digitais. Chamado de Kinetic Cyber Range, operado pela Divisão de Tecnologi…
Procedimento foi o primeiro a ser realizado em Manaus com a plataforma Da Vinci X, utilizada em procedimentos minimamente invasivos A Samel, grupo de assistência hospitalar da Região Norte, realizou […] O post Hospital Samel realiza primeira cirurgia robótica do Amazonas apareceu…
O Departamento de Justiça dos EUA, com auxílio do FBI e da polícia finlandesa, prendeu na semana passada um jovem de 19 anos, suspeito de integrar o grupo de extorsão Scattered Spider. O preso é Peter Stokes, que tem dupla cidadania americana e estoniana, e foi detido em Helsinqu…
A new Android malware operation called RedWing is being rented out on Telegram as a ready-made bank-fraud service. It lets even low-skill criminals take over a victim's phone, steal their banking logins, and capture the one-time codes that protect their accounts. Zimperium's zLa…
Vietnamese police, aided by US Homeland Security and ACE, arrested seven people accused of running HiAnime, tied to $12.85M in ad revenue.
A critical flaw in Google's Dialogflow CX could have let an attacker with edit rights on one Code Block-enabled agent compromise other Code Block-enabled agents in the same Google Cloud project. From there, they could read live conversations, steal the data users shared, and mak…
The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.
The National Police in Spain have arrested a man who is suspected of being an active member of the CyberArmy of Russia Reborn (CARR) and Z-Pentest, both pro-Russian hacktivist groups. [...]
The medical device supplier said that a threat actor accessed company systems through a social engineering attack.
A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June 2026 and into early July, per findings from ZeroBEC. "The campaign did not depend on a fake Microsoft password p…
A high rate of continuous glucose monitor adoption and low level of automated insulin delivery system penetration make Spain an attractive market for Insulet.
By Prof. Eyal Zimlichman - Seemingly everywhere you look, a wave of AI layoffs are hitting companies across dozens of industries. Tens of thousands of skilled workers are being let go in the name of administrative efficiency. Yet at the same time, others are finding creative ways…
Diabetes technology news has been off to a fast start this year. Here are some highlights of MedTech Dive’s coverage from 2026.
A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization's private repositories, researchers at Noma Security have shown. The attacker needs only to open a normal-looking issue on a public repository, with no stolen credentials and no access…
ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't guarantee a secure pipeline, and how organizations can better govern their CI/CD workflows. [...]
Calibrated Healthcare Settles Class Action Data Breach Lawsuit The HIPAA Journal
