Fake Claude AI website delivers new 'Beagle' Windows malware
A fake version for the Claude AI website offers a malicious Claude-Pro Relay download that pushes a previously undocumented backdoor for Windows named Beagle. [...]
Últimas Notícias
2563 notíciasData Breaches Announced by Four Healthcare Providers
Data breaches have recently been announced by Western Orthopaedics in Colorado, Community Health Systems in California, Tri-Cities Gastroenterology in Tennessee, […] The post Data Breaches Announced by Four Healthcare Providers appeared first on The HIPAA Journal.
PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux
Cybersecurity researchers have discovered three packages on the Python Package Index (PyPI) repository that are designed to stealthily deliver a previously unknown malware family called ZiChatBot on Windows and Linux systems. "While these wheel packages do implement the features …
Delta Dental Fined $2.25M for Violations of New York Cybersecurity Regulations
The New York State Department of Financial Services (NYDFS) has announced that Delta Dental Insurance Company (DDIC) and Delta Dental of New York (DDNY), Inc. will pay a $2.25 million penalty to resolve allegations that they had inadequate incident response and cybersecurity inci…
vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution
A dozen critical security vulnerabilities have been disclosed in the vm2 Node.js library that could be exploited by bad actors to break out of the sandbox and execute arbitrary code on susceptible systems. vm2 is an open-source library used to run untrusted JavaScript code inside…
Best OSINT Tools for Investigations and Threat Intelligence in 2026
Explore the best OSINT tools for your digital investigations, threat intelligence, reconnaissance, and tracking online activity in 2026.
Hackers abuse Google ads for GoDaddy ManageWP login phishing
A phishing campaign delivered through Google sponsored search results is targeting credentials for ManageWP, GoDaddy's platform for managing fleets of WordPress websites. [...]
Yet Another Way to Bypass Google Chrome's Encryption Protection
Authors of the VoidStealer Trojan uncovered a way to get around Google's App-Bound Encryption (ABE), opening the door to infostealers.
Instructure Breach Exposes Schools' Vendor Dependence
ShinyHunters' attack on Instructure, which owns the widely used Canvas learning management system (LMS), carries big questions about the trust educational institutions put into their vendors.
Mirai-Based xlabs_v1 Botnet Exploits ADB to Hijack IoT Devices for DDoS Attacks
Cybersecurity researchers have exposed a new Mirai-derived botnet that self-identifies as xlabs_v1 and targets internet-exposed devices running Android Debug Bridge (ADB) to enlist them in a network capable of carrying out distributed denial-of-service (DDoS) attacks. Hunt.io, wh…
Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE
Google patches a CVSS 10 Gemini CLI vulnerability that allowed hackers to use prompt injection and privilege escalation for a full supply chain compromise.
FDA warns of neurosurgical supply disruptions
Interruptions in the supply of neurosurgical patties, sponges and strips are expected to continue through 2026.
Neptune Medical’s GI robot succeeds in colonoscopy study
The first-in-human study showed no adverse events and a 100% rate of cecal intubation, where the endoscope is guided to the beginning of the large intestine.
Critical vm2 sandbox bug lets attackers execute code on hosts
A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary code on the host system. [...]
New Cisco DoS flaw requires manual reboot to revive devices
Cisco patched a Crosswork Network Controller and Network Services Orchestrator denial-of-service vulnerability that requires manually rebooting targeted systems for recovery. [...]
ShinyHunters’ Instructure Canvas LMS and Vimeo Breaches Impact Millions of Users
ShinyHunters breached Instructure and Vimeo, exposing millions of student and user records through direct and supply chain attacks.
AI Challenge Q&A: What Healthcare AI Needs Next: Data, Trust, and Real-World Readiness
As HL7 International launches its second annual Global AI Challenge, a worldwide competition spotlighting solutions that use standards-based data to solve real healthcare problems, we spoke with HL7’s Chief AI Officer, Dr. Daniel Vreeman about what last year’s inaugural competiti…
DAEMON Tools devs confirm breach, release malware-free version
Disc Soft Limited, the maker of DAEMON Tools Lite, confirmed that the software had been trojanized in a supply chain attack and released a new, malware-free version. [...]
Insulet raises revenue expectations for 2026
CEO Ashley McEvoy also shared an update on the company’s recent recall of insulin patch pumps.
Virtual Healthcare May 2026
We are seeking out the latest developments around virtual healthcare. News from Twentyeight Health, ATA, TytoCare, Enghouse Vidyo, Conscientia Health, and more. The post Virtual Healthcare May 2026 appeared first on Health IT Answers.