LACMA data breach last year exposed social security and medical data
The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. [...]
Últimas Notícias
3776 notíciasHackers abuse npm mirrors to host phishing redirect pages
Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites. [...]
Hidden Prompts Trick AI Into False Email Summaries
With some simple HTML that's invisible to users, attackers can manipulate AI-powered email summarizers into producing malicious information.
AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes
A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock feature. [...]
Abbott receives FDA nod for dual-analyte sensor
Abbott plans to roll out the device, called Libre Duo 10 Day, later this year. The sensor can measure both glucose and ketones.
Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClaw
Attackers can exploit a security bug in NVIDIA's tool to gain unauthenticated access to the local model server through the Ollama API, paving the way for persistent AI agent corruption.
U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part of what it called an "unprecedented, whole-of-government, economic campaign" against the nation and its enablers. "We are launching an economic onslaught against Iran's financial co…
Quality Payment Program Updates from CMS
CMS has released important Quality Payment Program updates. Key updates include the MIPS Value Pathways (MVP) Adoption Survey is now open, 2025 MIPS Final Scores and Targeted Review timeline, & reminder to submit comments on the CY 2027 PFS Proposed Rule Policy Changes for Qualit…
24,700 Fake Debt Relief Emails Target Over 9,000 Organizations in 14 Days
The fake debt relief emails contain no malicious links or attachments, but direct recipients to attacker-controlled phone numbers for vicrim's data.
Employer Health Plans Face HIPAA Fallout After Breaches – CBIA
Employer Health Plans Face HIPAA Fallout After Breaches CBIA
AI Agent Development Company: Outcomes vs. Claims
How to evaluate an AI agent development company by outcomes, not claims: questions that reveal production capability and separate delivery from lasting value.
Massive DDoS attack disrupts Norway’s government digital services
A large distributed denial-of-service (DDoS) attack has disrupted Norway's shared government digital infrastructure since Monday, affecting services used by the public sector. [...]
Talent Tuesday: Workforce Issues at Thru-Put 26
Starting October 11, in Salt Lake City, the Thru-Put Healthcare Operations Summit will dive into evidence-based operations and leadership best-practices, giving you practical strategies you can use with your teams. Check out the Workforce, Culture & Staffing Track. The post Tale…
Is Cyber Facing an Affordability Crisis?
As breach costs reach record highs and defense spending nears $240 billion, small businesses are dangerously exposed, threatening supply chain security.
Hospital operator Nutex Health says data stolen in cyberattack
Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers. [...]
A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw
Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of the local Ollama instance serving an AI agent and plant hidden instructions inside the model itself. The findings were shared with The Hacker …
From Fake Workers to Account Recovery: The Growing Identity Verification Risk
Attackers are increasingly targeting the processes used to establish or recover identity rather than attacking the login itself. Specops explains how stronger identity verification can help organizations prevent fake workers and social engineering attacks from gaining legitimate …
Qiagen names new CEO
Jonathan Pratt will take over the role on Sept. 1. The announcement ends Qiagen’s nearly 10-month search for a new chief executive.
Tift Regional Health System Pays $1.2 Million to Settle Data Breach Lawsuit
Tift Regional Health System Inc, a non-profit health system serving patients in south central Georgia, has agreed to pay $1.2 […] The post Tift Regional Health System Pays $1.2 Million to Settle Data Breach Lawsuit appeared first on The HIPAA Journal.
Microsoft PowerToys adds Alt+Tab-style switching for an app's windows
Microsoft updated its Windows PowerToys toolset with a new utility dubbed "Window Hopper" that lets users switch between an app's windows more quickly. [...]