As AI Risks Grow, Insurers Split on Covering the Damage
Insurers are split on AI risk: some build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises exposed without their knowledge.
Insurers are split on AI risk: some build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises exposed without their knowledge.
Innovative Renal Care Pays $900,000 to Settle Data Breach Litigation The HIPAA Journal
American Renal Management LLC, doing business as Innovative Renal Care, a kidney care specialist with more than 200 locations in […] The post Innovative Renal Care Pays $900,000 to Settle Data Breach Litigation appeared first on The HIPAA Journal.
Contern, Luxembourg, 22nd October 2026, CyberNewswire
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving stolen GitHub tokens, malicious AI installers, and MFA phishing, explaining why faster detection and automated conta…
INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, the effort saw law enforcement agencies from 21 countries arrest 1,462 suspects. Codenamed Operation…
Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday. [...]
HHS Confirms HIPAA Penalties Will Not Be Adjusted for Inflation This Year The HIPAA Journal
This week, the Department of Health and Human Services (HHS) has confirmed via the Federal Register that it will not […] The post HHS Confirms HIPAA Penalties Will Not Be Adjusted for Inflation This Year appeared first on The HIPAA Journal.
By Zunaid Khan - A payment can reach the bank while the billing system still shows an unpaid claim. For a small practice, that gap creates avoidable follow-up work and can lead to an incorrect patient statement. Electronic remittance advice (ERA) and electronic funds transfer (EF…
Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching. Nobody reviewed its access. Nobody owns it. If an employee had that much reach…
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers. [...]
For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.
Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized third party may have gained access to encrypted environment …
Massachusetts AG Settles HIPAA & MassHealth Fraud Allegations with Transformative Healthcare The HIPAA Journal
The Massachusetts Attorney General has agreed to settle alleged violations of the Health Insurance Portability and Accountability Act (HIPAA) and […] The post Massachusetts AG Settles HIPAA & MassHealth Fraud Allegations with Transformative Healthcare appeared first on The HIPAA …
Buying the Myriad assets will expand Labcorp’s portfolio of specialty tests for women’s health.
A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model Context Protocol) servers to add outside tools, and such code would run with the dev…
Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials…
LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's release pipeline was compromised to push 1.107.…