Responsible dog owners worry about their pets getting out of the yard and possibly attacking people. Now we all have to worry about AI models breaking out of their sandboxes and attacking tech firms or others. Security Boulevard reports: The cyberattack against Hugging Face launched by rogue AI models from OpenAI is only the latest […]
If you haven’t patched already, get busy. DarkReading reports: Attackers have begun widely exploiting two critical vulnerabilities in WordPress that, when chained, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites. The attacks are being fueled by the ready availability of numerous proof-of-concept exploits for the two bugs, identified as CVE-2026-60137 and CVE-2026-63030. Researchers at […]
SecurityWeek reports: Healthcare diagnostics company Centers Laboratory (Centers Lab NJ LLC) has informed the US government that a data breach discovered nearly one year ago affects more than 540,000 individuals. According to a data breach notice posted on its website, the New Jersey-based provider of testing and laboratory services for healthcare organizations discovered an intrusion in its […]
The Verge reports: Federal authorities have arrested a Florida man suspected of stealing at least $220,000 in crypto through malware-infected Steam games, as reported earlier by local news outlet Local10. In the complaint, officials accuse 21-year-old Zyaire Wilkins and co-conspirators of launching eight malware-embedded games from around May 2024 to February 2026, allowing them to infect about 8,000 […]
The Guardian reports: Thousands of medical records and patient information stored with one of Australia’s biggest healthcare providers have been breached in a cyber-attack. Partnered Health, owned by private equity firm Quadrant, said 21 clinics across several cities including Sydney, Melbourne and Canberra have been affected by the breach which occurred on 23 June. “Our investigations […]
TechTimes reports: Notification letters from a company called AssuranceAmerica began arriving in mailboxes on July 10 — and if one reached yours, you are among 6,998,886 people whose driver’s license numbers, insurance records, and in many cases Social Security numbers were stolen in a March cyberattack. The breach is the largest known exposure of Americans’ […]
The Record reports two wins for law enforcement this week. U.S. prosecutors announced two milestones this week in their cases against major ransomware groups. Karen Serobovich Vardanyan, a 34-year-old Armenian national, pleaded guilty Wednesday in an Oregon federal court to conspiracy and computer fraud. For about six months beginning in November 2019, he accessed companies’ computer networks […]
The Register reports: Accenture has confirmed an “isolated matter” after a cybercriminal put up for sale what they allege is 35GB of the consulting giant’s internal data, including source code, cryptographic keys, and cloud credentials. The listing, seen by The Register, appeared on a cybercrime forum on July 6 under the title “Accenture Data Breach,” posted […]
The Record reports: The world’s largest medical device company is notifying more than 3.8 million people that their data may have been exposed in an attack reportedly linked to the ShinyHunters cybercrime group. On April 24, Medtronic confirmed an unauthorized party had accessed data in certain corporate IT systems, but said it had not identified […]
CNN reports: When an executive at a US law firm’s phone rang in April, the voice on the other end was urgent: A computer virus was spreading through the firm. The caller said they were from IT support and needed physical access to the lawyer’s computer because remote fixes to stop the attack weren’t working. […]
