By Mat Steinlin - According to the AMA's 2026 Physician Survey on Augmented Intelligence, over 80% now use AI in a professional context (roughly double the share reported in 2023). The same survey found physicians are significantly more concerned about patient privacy when using …
Uma campanha de password spraying mirou contas root da AWS em mais de 150 organizações entre 24 de julho e 23 de agosto de 2026. Os ataques envolveram tentativas repetidas de login contra identidades com privilégios máximos na nuvem. A conta root é criada junto com cada conta AWS…
The debate about whether AI delivers business value is over. The challenge now is implementing it at scale and securely across every function while meeting board-level pressure to move fast. Organizations must focus on adopting AI at business speed without losing control of cyber…
Um grupo de espionagem ligado à China comprometeu roteadores Cisco IOS XR e outros sistemas de infraestrutura para monitorar tráfego, roubar credenciais e criar caminhos ocultos até redes de alto valor. A atividade é atribuída ao grupo Fire Ant. Os invasores transformaram os rote…
SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall's William Perry and Adam Babis, are lis…
Microsoft is investigating an issue causing the Defender for Office 365 security software to mistakenly block access to legitimate Google search links. [...]
Highlands Oncology Group, an Arkansas-based physician-owned community cancer care and research practice serving Northwest Arkansas, Southwest Missouri, and Southeast Oklahoma, […] The post Highland Oncology Group Settles Litigation Stemming From 2025 Ransomware Attack appeared fi…
Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geoportals. The project shipped fixes in versions 4.4.12 and 4.2.17 on July 8, 202…
The U.S. Department of Justice (DoJ) has charged a Russian national, extradited from Cyprus on August 28, with using roughly 255 fake accounts on a freelance platform to send malware-laced Excel attachments to about 80,000 of its users in 2016 and 2017. Searzhudin Tamirlanovich …
A California federal grand jury has indicted a Russian national for his role in a phishing campaign that infected thousands of freelancers with TVRAT and DarkVNC malware. [...]
OpenAI links Epic patient records to ChatGPT under HIPAA MediaNama
International law enforcement agencies and private partners have seized Sality malware infrastructure in a joint action aiming to disrupt and take down the peer-to-peer (P2P) botnet. [...]
Forescout Research - Vedere Labs said it used Anthropic's Claude to port a working pre-authentication remote code execution (RCE) exploit from one WAGO programmable logic controller (PLC) to another, executing attacker-supplied ARM shellcode on live hardware. The exploit targets…
Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution. The vulnerability in question is CVE-2026-9586 (CVSS score: 9.3), a critical unauthenticated SQL injection vuln…
HIPAA, PCI DSS, and SOC 2: What Enterprise Software Buyers Need to Know Onrec
The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet known as Sality as part of a coordinated law enforcement operation. The effort was undertaken on August 31, 2026, by authorities from the U.S., Bulgaria, Hungary, …
SonicWall warned customers that threat actors are chaining two new SMA1000 zero-day vulnerabilities in remote code execution attacks. [...]
Threat actors exploited commodity in ownCloud to gain initial access, resulting in stolen reactor databases, personnel records, and credential stores.
Paubox Opens HIPAA Compliant Forms to AI Agents 01net
Um pesquisador de segurança conhecido como Chaotic Eclipse, também identificado como MSNightmare e Nightmare-Eclipse, publicou em um repositório público no último sábado (30 de agosto) um código de prova de conceito para uma vulnerabilidade de elevação de privilégios não corrigid…
