A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in PTC Windchill and FlexPLM servers is specifically designed for the enterprise Product Lifecycle Management (PLM) software, according to new findings from ReliaQuest. The cyberse…
In the first purported "near-autonomous" attack on a nation-state, a Chinese-language operator used a complex AI framework to target and compromise government agencies, likely in Taiwan.
A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential exploitation of CVE-2026-19478.
Researchers discovered a "meta-hacking" technique that can manipulate the AI service into revealing its own security weaknesses.
Comcast is promoting WiFi-based motion detection as a part of its new Xfinity Shield home protection platform, allowing routers and wireless devices to detect people moving through a home without cameras or motion sensors. [...]
Rich Mogull, chief analyst with the Cloud Security Alliance, joins the Dark Reading News Desk with what defenders need to take away from AI agents escaping their environments to launch attacks.
HIPAA-compliant marketing platform Ours Privacy lands $15M amid growing pixel concerns Fierce Healthcare
Million-dollar heists, divorce, and career-ending burnout are all stories told in the latest docuseries revealing a behind-the-scenes look at the cybersecurity community.
Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on a crafted link to silently pull data from connected apps and other information available to the victim's Copilot session. The flaws, which the researc…
Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web-based SCADA / HMI software built for operational technology (OT) and industrial automation, are witnessing malicious scanning and exploitation effort…
A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to decrypt credentials, enumerate file repositories, and steal files. [...]
The Sequoia Project, the leading non-profit focused on advancing healthcare interoperability, announced it will continue its role as the Recognized Coordinating Entity® (RCE®) to support the implementation of the Trusted Exchange Framework and Common Agreement™ (TEFCA®). The post…
A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations and claims to delete stolen data from ransomware groups' servers in exchange for a fee ranging from $20,000 to $60,000. "In these messages, the third-party of…
Anita Zielinski will join Cardinal Health in November as its new chief accounting officer.
Latest announcements made from companies and organizations on hiring include Health Gorilla, AArete, Vida Health, Iterative Health, NYU Langone Health, NAHQ, Healthcare Management Administrators, Blue Shield of California, Royal Health, HCAA, Corundum Corp., Eagle Telemedicine, e…
CARIN Alliance builds trust outside HIPAA Healthcare Finance News
Security controls can block a familiar attack method while missing quieter ways to achieve the same objective. Picus Security's Blue Report 2026 shows how prevention rates can vary dramatically by technique and why behavioral testing is needed to uncover those gaps. [...]
Secret parameter allowed hackers to steal passwords when a target clicked on a link.
A ransomware affiliate appears to be sidling up to victims with offers of aid, masking its true intention of diverting ransom payments.
Sam Asgarian, Guardant Health’s vice president of clinical development, discusses the progress and challenges of blood-based testing in colorectal and multicancer screening.
