A new information-stealing malware called AmnesiaStealer, which targets macOS users via ClickFix attacks, includes a streaming module that allows the attacker to interactively control the victim's web browser. [...]
By Gerardo Herrero - Interoperability conversations in the United States tend to assume a shared floor: one national framework, one certification program, one set of standards everyone is nominally moving toward. Latin America offers a useful counterfactual. The post What Latin …
A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning them into SOCKS5 traffic relay nodes. [...]
The thought leaders in our community are good about sharing their thoughts on the issues of today. Here are the top read and shared guest posts of July that we think deserve sharing again. The post Health IT Issues that Deserve a Second Read – July 2026 appeared first on Health I…
A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts. The vulnerability, tracked as CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It relates to an instance of insufficient authorization checks and input vali…
A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre (NCSC) has warned. The vulnerability in question is CVE-2026-65400 (CVSS score: 9.8), a critical authen…
It could soon become easier to identify AI-generated content, even if it's not the usual "It's Not X, it's Y" type of post you'd come across on LinkedIn and other socials. [...]
In this video interview, Standard Chartered's group CISO shares insights on transitioning from technical roles to strategic leadership, the importance of business-savvy security executives, and how AI is reshaping both defensive capabilities and adversarial tactics in banking.
Architecting HIPAA-compliant AI agents to safeguard health data with AWS Amazon Web Services (AWS)
Threat actors are acquiring expired domains to inherit website traffic and reputation to redirect victims to scams and malware on a large scale. DNS threat intelligence firm Infoblox has given the name dropcatch domains to those that get a second chance, where an expired domain …
Screen-sharing bug lets remote hackers log in without a password.
Four cybercriminals were arrested in Brazil, and three others were charged in Europe over allegations that they exploited a vulnerability at a service provider, allowing them to withdraw funds from Commerzbank customers' bank accounts. [...]
Driven by AI-augmented research and scanning, vulnerability volumes continue to surge, driving the National Institute of Standards and Technology to ask whether AI could be the answer.
IAM compliance is the practice of demonstrating that identity and access controls are not only documented but actually enforced across users, applications, infrastructure, and non-human identities. This guide explains what IAM compliance requires, which regulations matter, and ho…
One Caledonian government agency reported a breach, thanks to a third party that may have serviced other agencies as well.
By Anne Neal - For years, the industry has measured payment integrity success largely through recoveries, savings, and avoided overpayments. However, achieving those metrics often comes at the cost of significant abrasion that manifests as claims rework, provider tension, cash fl…
Should HIPAA Cover Health Apps? Two Privacy Heavyweights Say No – Here’s Why. Hospitalogy
The Netherlands' National Cyber Security Centre (NCSC) is warning that hackers are actively exploiting a macOS authentication bypass vulnerability after public exploit code emerged. [...]
Google Workspace attacks do not always begin with phishing. Stolen OAuth tokens can provide another path into Gmail, Drive, and connected systems. Material Security explains why organizations need defenses that cover the entire Workspace attack chain. [...]
Why do so many boards underestimate technology risk until it becomes a crisis?
