By Chris Kenyon - The Centers for Medicare & Medicaid Services Interoperability and Prior Authorization Final Rule (CMS 0057 F) is often discussed as a health plan problem to solve. Are plans compliant? Are the APIs live? Is the data finally reliable? Those are fair questions, bu…
The co-founder and former editor-in-chief passed away five years ago in November. As Dark Reading enters is third decade, we pause to celebrate and honor Wilson's instrumental role in building and elevating the media site.
Every single day, hackers are finding new ways to crash websites and steal data. But right now, something has changed. Hackers are no longer working alone. They are now using powerful Artificial Intelligence (AI) tools to make their attacks faster, stronger, and much harder to s…
Um grupo APT iraniano passou a usar envenenamento de SEO para distribuir um instalador falso do Oracle SQL Developer e infectar máquinas Windows com uma nova backdoor. A campanha foi atribuída ao Nimbus Manticore, também rastreado como UNC1549, ligado ao Corpo da Guarda Revolucio…
Microsoft has rolled out updates to fix a remote code execution vulnerability impacting SharePoint that could be exploited by bad actors in attacks without requiring any specialized conditions to be met. The vulnerability, tracked as CVE-2026-45659, carries a CVSS score of 8.8. …
A CISA alertou que uma falha de SQL injection no Drupal Core já está sendo explorada em ataques reais. A vulnerabilidade, rastreada como CVE-2026-9082, foi incluída no catálogo de falhas exploradas conhecidas em 22 de maio de 2026. O problema afeta o mecanismo de abstração de ban…
Pesquisadores identificaram um forte aumento em varreduras contra interfaces de gerenciamento de firewalls SonicWall, levantando preocupação sobre uma possível fase de reconhecimento antes da divulgação ou exploração de novas falhas. A atividade foi observada entre 9 e 18 de maio…
Com término do prazo de adequação, nova regra obriga instituições de saúde a incluir riscos psicossociais no gerenciamento corporativo e ampliar ações de prevenção ao adoecimento mental no trabalho. The post NR-1 leva saúde mental ao centro da gestão em saúde appeared first on Sa…
Multi-factor authentication (MFA) was supposed to close a critical gap in identity security. It meant that, even if an attacker possessed the account credentials, they couldn't log in without the second factor. While that logic was sound, attackers have now figured out that they …
Mission Community Hospital Pays $1.55M to Settle Data Breach Lawsuit The HIPAA Journal
Deanco Healthcare, LLC, the operator of Mission Community Hospital, an acute care hospital serving patients in the San Fernando Valley […] The post Mission Community Hospital Pays $1.55M to Settle Data Breach Lawsuit appeared first on The HIPAA Journal.
The Indian Computer Emergency Response Team (CERT-In) has issued new guidelines requiring organizations to patch critical security vulnerabilities in internet-exposed systems within 12 hours of being flagged where "feasible" to safeguard against potential threats stemming from th…
CISA has given U.S. government agencies until Wednesday evening to secure their servers against an SQL injection vulnerability in the Drupal content management system (CMS) that it flagged as actively exploited. [...]
Microsoft has confirmed a new known issue affecting Windows Server 2016 systems that causes domain controller lookups to fail after installing the KB5087537 May 2026 security update. [...]
The Iranian state-sponsored threat actor known as Nimbus Manticore (aka Screening Serpens and UNC1549) has been attributed to a fresh campaign using lures impersonating organizations in the aviation and software sectors across the U.S., Europe, and the Middle East following the j…
The ShinyHunters extortion gang stole the personal information of over 183,000 people after hacking the systems of convenience store chain giant 7-Eleven in April, according to data breach notification service Have I Been Pwned. [...]
A now-patched high-severity security flaw affecting Digital Knowledge KnowledgeDeliver, a Learning Management System (LMS) popular in Japan, was exploited as a zero-day to deliver the Godzilla web shell and ultimately facilitate the deployment of Cobalt Strike Beacon. The vulner…
Pesquisadores da GreyNoise detectaram um aumento expressivo na varredura de APIs de gerenciamento do SonicOS, sistema operacional dos firewalls da SonicWall, entre 9 e 18 de maio. O pico ocorreu no dia 12, com aproximadamente 597 mil sessões registradas em um único dia, um cresci…
Uma operação de ataque à cadeia de suprimentos, batizada de Megalodon, comprometeu mais de 5.500 repositórios no GitHub por meio de commits automatizados e falsos. Os invasores injetaram workflows do GitHub Actions contendo payloads projetados para roubar credenciais, chaves, tok…
A Anthropic, empresa de inteligência artificial, revelou que seu modelo Claude Mythos identificou mais de 23 mil potenciais falhas de segurança em mais de mil projetos de software de código aberto. Das 1.900 vulnerabilidades analisadas até o momento por empresas externas, 1.726 f…
