Hackers exploit Sangoma Switchvox flaw to deploy reverse shells
Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution. [...]
Últimas Notícias
3484 notíciasBP integra ranking internacional de hospitais mais verdes na Newsweek
A BP – A Beneficência Portuguesa de São Paulo passou a integrar o World’s Greenest Hospitals 2026, ranking inaugural elaborado pela Newsweek em parceria com a Statista, que reconhece instituições […] O post BP integra ranking internacional de hospitais mais verdes na Newsweek apa…
Abbott ablation device effective at 1 year in complex cases
Abbott said it will use the study results to secure FDA approval for the TactiFlex Duo catheter that offers both PFA and RF energy for tailoring treatment of atrial fibrillation.
SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE
The exploitation activity follows attacks earlier this summer on two other zero-day vulnerabilities in the vendor's edge devices.
I rented a car, and within hours my driver's license was for sale
The FBI is reportedly investigating a massive data breach that is unfolding in real time.
AI Gives Cybercriminals a Dangerous Time Advantage
Former cybercriminal Brett Johnson provides a look inside the mind of a threat actor and discusses where AI provides the most value for attackers.
WordPress backup plugin flaw exposes millions of sites to takeover attacks
An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for WordPress could allow unauthenticated attackers to execute remote code and take control of affected websites. [...]
Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs
Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybersecurity model, and has made it available to a set of trusted defenders via a new initiative called the Fairwind Program. "The Fairwind Program gives high-priority defenders (like g…
AHIMA Supports Bipartisan MATCH IT Act to Improve Patient Matching and Protect Patient Safety
The MATCH IT Act addresses the problem of patient misidentification within the healthcare ecosystem. The bill would create an industry standard definition for how patient match rates are measured and would improve standardization of patients’ demographic elements entered into cer…
Threat Gang 'Springs' Vishing Attacks on Microsoft Teams Users
The "Spring Ring" operation aims to compromise users of the collaboration suite to remotely access their sessions, spread malware, and even take over infrastructure.
Fake Software Installers Disable Windows Update and Weaken Microsoft Defender
An active malware campaign is using bogus software-download websites to impersonate trusted vendors and distribute malicious installers. "The campaign has targeted users looking to download popular software and has resulted in compromises across multiple organizations and indust…
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens
A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. [...]
Por que escolas médicas são estratégicas para a saúde pública?
Ao integrar ensino, assistência e pesquisa, instituições fortalecem o SUS, ampliam o acesso ao cuidado e impulsionam o desenvolvimento dos territórios onde atuam. The post Por que escolas médicas são estratégicas para a saúde pública? appeared first on Saúde Business.
Virtual Healthcare September 2026
We are seeking out the latest developments around virtual healthcare. News from VevaRx, DirectMeds, MedVirtual, SWORD Health, VSee Health, Andor Health, MD Integrations, American Telemedicine Association, VirtuAlly, MUSC Health, Solace Health, and more. The post Virtual Healthcar…
Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository's own Git configuration names a command that the agent runs on the developer's machine, four of them still unpatched at publication. The command executes as the …
Ransomware protection for MSPs: A 6-point checklist for faster recovery
Ransomware resilience requires more than backups or endpoint detection alone. Acronis outlines six capabilities MSPs should test across client environments, from reducing exposure and detecting attacks to preserving recovery points and restoring operations quickly. [...]
Enovis inks eCential takeover to develop surgical ortho robots
The orthopedics specialist aims to launch a knee robot in late 2028, followed by a shoulder robot in 2029.
Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromised web servers run by Brazilian government and educational institutions, and using them to divert visitors to attacker-controlled pages promoting onlin…
Nutex Health Confirms Sensitive Data Stolen in August Cyberattack – The HIPAA Journal
Nutex Health Confirms Sensitive Data Stolen in August Cyberattack The HIPAA Journal
Nutex Health Confirms Sensitive Data Stolen in August Cyberattack
Nutex Health, a Houston, Texas-based healthcare management and operations company that delivers care through 27 micro-hospitals, specialty hospitals, and outpatient […] The post Nutex Health Confirms Sensitive Data Stolen in August Cyberattack appeared first on The HIPAA Journal.