June 2026 Healthcare Data Breach Report – The HIPAA Journal
June 2026 Healthcare Data Breach Report The HIPAA Journal
Últimas Notícias
3484 notíciasJune 2026 Healthcare Data Breach Report
In June 2026, 66 large healthcare data breaches – data breaches involving the protected health information of 500 or more […] The post June 2026 Healthcare Data Breach Report appeared first on The HIPAA Journal.
Mathspace discloses data breach affecting over 1 million people
Online maths learning platform Mathspace disclosed over the weekend that attackers stole data from more than 1 million students, staff, and parents after breaching its Metabase internal reporting system. [...]
Trezor data breach impact now reaches 81,000 customers
Cryptocurrency hardware wallet maker Trezor says an August data breach at its shipping and logistics provider, ShipMonk, affects an additional 67,000 U.S. customers. [...]
Why Specialty-Specific Revenue Cycle Workflows Should Be Part of Every Health IT Strategy
By Ricky Bell - For the past decade, I have sat in boardrooms and clinical offices watching healthcare organizations pour millions into Electronic Health Record (EHR) optimization, artificial intelligence, and interoperability. The goal is always the same, and that is operational…
Your Cloud Security Checklist Doesn't Work the Way You Think It Does
If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026 Cloud Security Index, Intruder analyzed misconfiguration data from 3,000 organizations across AWS, Azure, and Google Cloud and found that risk profiles across …
Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute a malicious Visual Basic Script (VBScript) payload to newly connected systems. According to Huntress, three unrelated incidents have been found to use diver…
Ataques cibernéticos abalam cartórios franceses
Uma série de ataques hackers atribuídos a um grupo de cibercriminosos com base na América do Sul, está preocupando o governo francês e ainda não há confirmação de que tenham sido bloqueados. A informação, divulgada pelo jornal Le Monde, com base em documentos internos da Agência …
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution — but only against applications in a specific non-default configuration, and Progress patched the chain in July. There are no confirmed reports …
ChatGPT can now connect to your personal apps to mimic writing style
OpenAI appears to be testing a new "Writing Style" feature for ChatGPT that can learn how you write by looking at examples from your connected apps. [...]
Hackers exploit new MikroTik RouterOS flaws to hijack routers
Hackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH services exposed to the internet. [...]
ConnectWise warns of new ScreenConnect flaw without patch
ConnectWise has shared temporary mitigation measures for a new ScreenConnect Remote Access vulnerability that it plans to patch later this week. [...]
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw
Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able's incident notice says the flaw has been exploited in the wild; its release notes say that is unconfirmed. N-able has released its fourth hotfix in …
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-interception capabilities. "The payloads are protected with javascript-obfuscator, using multiple techniques including RC4-p…
N-able patches max severity N-central flaw amid ongoing attacks
N-able has released an emergency hotfix for a maximum-severity remote code execution (RCE) flaw affecting its N-central remote monitoring and management (RMM) platform. [...]
ChatGPT Astra is now rolling out to $20 Plus subscription
OpenAI is now rolling out ChatGPT Astra, its most powerful model to date, to those with a $20 Plus subscription, but there's no word on when free users will get access.. [...]
AI Isn’t the Enemy, But Opaque Use Might Be
In this week’s special edition of “News You Can Use” on Healthcare NOW Radio Dr. Nick sits down with Adam Russo, CEO and Founder of The Phia Group, about Artificial Intelligence or, as we ultimately agreed, perhaps better named Augmented Intelligence. The post AI Isn’t the Enemy,…
Falha no Elementor Pro permite upload de arquivos maliciosos
A Wordfence divulgou uma vulnerabilidade crítica de upload arbitrário de arquivos no plugin Elementor Pro, utilizado em cerca de 6 milhões de sites WordPress, o que permite a atacantes não autenticados enviar arquivos PHP executáveis e assumir o controle total do site. O alerta f…
IA derruba empresa e deixa relatório de 80 páginas
A Unidade 42 da Palo Alto Networks documentou um ataque de ransomware no qual agentes de inteligência artificial de fronteira, coordenados por um operador humano, comprometeram com ransomware uma empresa não identificada em menos de 10 horas, explorando mais de 50 técnicas do MIT…
Hospital Márcio Cunha, da Fundação São Francisco Xavier, reforça oferta de alta complexidade pelo SUS
Serviço de Hemodinâmica realizou mais de 1.300 procedimentos para pacientes do SUS no primeiro semestre de 2026 A Fundação São Francisco Xavier (FSFX), por meio do Serviço de Hemodinâmica do […] O post Hospital Márcio Cunha, da Fundação São Francisco Xavier, reforça oferta de alt…