NFI North Data Breach Affects Almost 50,000 Individuals – The HIPAA Journal
NFI North Data Breach Affects Almost 50,000 Individuals The HIPAA Journal
Últimas Notícias
3488 notíciasNFI North Data Breach Affects Almost 50,000 Individuals
Data breaches have been announced by NFI North in New Hampshire, Nephrology Associates in Kansas, PAMCAH-UA Local 675 Health and […] The post NFI North Data Breach Affects Almost 50,000 Individuals appeared first on The HIPAA Journal.
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild. The vulnerability, now tracked as CVE-2026-75650 (CVSS score: 10.0), has been codenamed StyleSmuggle…
Elucid raises $55M to commercialize cardiovascular imaging platform
Elucid, which gained a large medtech company as an investor, plans to grow industry partnerships as it looks to expand its AI-powered imaging platform.
BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams
Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the way for malware deployment and tech support scams. The campaign, discovered by the DFIR Report in March 2026, has been codenamed BengalSEO. It has o…
220 million traveler records exposed in Vietnam-linked APIS leak
Exclusive: An exposed Advance Passenger Information System (APIS) database held 220 million passenger and crew records containing names, passport numbers, dates of birth, nationalities, and flight details spanning 2017 to 2026. Researchers accessed the Vietnam-linked system throu…
Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing
Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K. over allegations that it shared users' personal information, including their HIV status, with third-parties. Grindr, which is the largest LGBTQ+ dating app, was sued in April 20…
Hackers exploram falhas críticas no SSH de roteadores MikroTik
Cibercriminosos estão explorando ativamente duas vulnerabilidades críticas no sistema operacional RouterOS para assumir o controle remoto de roteadores MikroTik sem necessidade de autenticação, conforme alertas emitidos pela fabricante e pelo governo da Polônia. As falhas, regist…
Microsoft alertam para ataques com uso do Teams
A Microsoft e o governo da Bélgica emitiram alertas sobre campanhas de ataque que utilizam o Microsoft Teams como vetor principal. O Safeonweb, uma iniciativa do Centro de Cibersegurança da Bélgica (CBB), relatou ter recebido múltiplas notificações de casos de fraude contra diret…
Zero-day no Magento Adobe Commerce instala backdoor em lojas
Um ataque em larga escala explora uma vulnerabilidade zero-day no Magento e no Adobe Commerce, plataformas que equipam mais de 160 mil sites, para instalar um backdoor persistente em servidores Linux. A primeira tentativa de invasão foi registrada em 4 de setembro. A falha, batiz…
PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution
Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser. "Requiring prior administrative or code execution access, its installer injects the extension directl…
Magento StyleSmuggler zero-day exploited to deploy Linux backdoor
A zero-day vulnerability dubbed "StyleSmuggler" affecting all versions of Magento and Adobe Commerce is being exploited in attacks to deploy a backdoor. [...]
Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and other software-as-a-service (SaaS) offerings through information technology (IT) help desk vishing, adversary-in-the-middle (AitM) token theft, and res…
BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations
A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal more than 5,000 Microsoft 365 credentials. [...]
Luminis Health Working to Restore Systems After Cyberattack – The HIPAA Journal
Luminis Health Working to Restore Systems After Cyberattack The HIPAA Journal
Rural Health Sessions at Civitas 2026
Starts September 22nd in Arlington VA - Civitas’ Annual Conference brings together leaders from across the country to discuss interoperability, data-driven quality improvement, social drivers of health, public health, community-led governance, and health outcomes. The post Rural…
Luminis Health Working to Restore Systems After Cyberattack
Luminis Health in Maryland is investigating a cyberattack that has taken certain systems offline. Data breaches have been announced by […] The post Luminis Health Working to Restore Systems After Cyberattack appeared first on The HIPAA Journal.
⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More
Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out of text. It still appears, even with images blocked. A small detail, but an annoying one if that was a precaution you were counting on. Elsewhere, a t…
Hospital São Mateus utiliza técnica avançada para reparar válvula do coração sem prótese
Evolução dos recursos permite cirurgias mais precisas e individualizadas, com possibilidade de abordagem minimamente invasiva em pacientes selecionados Pouco lembrada até surgir algum problema, a válvula mitral desempenha uma função […] O post Hospital São Mateus utiliza técnica …
June 2026 Healthcare Data Breach Report – The HIPAA Journal
June 2026 Healthcare Data Breach Report The HIPAA Journal