The CereCore Podcast release: On this episode of The CereCore Podcast, host Phil Sobol welcomes back Lynn Falcone, CEO of Cuero Regional Hospital, and Ismelda Garza, CIO of Cuero Regional Hospital and CereCore manager, for a candid conversation about their multi-year effort to im…
By Amy Oliver - I have always cared about healthcare access and equity. But recently it stopped being just a professional conviction and became something messier and more specific, the kind of care that comes from watching the system fail someone you love and not being able to do…
The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client installers with malicious versions that deliver backdoors. [...]
Health IT product news from 1upHealth, Cantata Health, CareHive Health, Caris Life Sciences, Carta Healthcare, MedeAnalytics, Trice Workspace, Teladoc Health, AGS Health, HOPPR, Luma Health, MDaudit, Pacific AI, Relatient, Revecore, SimplePractice, & Talkdesk. The post Health IT …
Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outside server. Two security firms found that behavior independently, by different routes. Only one of those routes is confirm…
New research shows content inside an email can escape its message boundary and interfere with the webmail interface. Across attack chains spanning Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail, the techniques can capture passwords, take over third-party account…
Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data visualization software package has been exploited in the wild as a zero-day. The vulnerability (CVSS score: 10.0), which does not carry a CVE identifier, allows an unauthentica…
N-able has released a fresh round of hotfixes for N‑central as part of its investigation into ongoing exploitation of a recently disclosed security flaw in the Remote Monitoring and Management (RMM) product. "We are proactively expanding protections in response to ongoing monito…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity security flaw impacting Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. The vulnerability, tr…
Privacy + Security Forum Fall Academy Davis Wright Tremaine
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally. [...]
How AI Is Changing the Privacy of Your Health Records elderlawanswers.com
Healthcare software company Unlimited Technology Systems reported that more than 3.8 million people were impacted by a data breach incident that occurred in October 2025. [...]
A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux systems. "These packages appear to use AI slop squatted, or randomly generated typo-squatting …
ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well as browser-stored passwords, Apple iCloud Keychain data, and cached credentials. The macOS-focused infection chain is designed to deliver a shell script that pr…
A recent wave of cyber attacks targeting financial services, private equity, and professional services is attributed to a data extortion group known as UNC6671. "UNC6671 continues to rely on voice phishing (vishing) to target enterprise employees, posing as IT help desk staff fa…
SS Support Network Expands U.S. Reach with Comprehensive BPO Services for Healthcare Providers voiceofalexandria.com
A study of more than 6,000 patches found that even working patches can introduce new bugs, break something else, or are open to bypass.
Outside experts will convene in September to review Grail’s premarket approval application for the MCED blood test. Experts selected for the committee will be key to watch, an analyst said.
Levi Strauss & Co. (Levi's) says that hackers used social engineering on three of its employees to gain access to and steal corporate data stored on their machines. [...]
