The FBI has taken swift action against a contractor who worked with Accenture, a global consulting firm, after a critical patch failure led to a devastating data breach. The incident, attributed to the notorious hacking group ShinyHunters, exposed sensitive information belonging to several major companies and government agencies. At the center of the controversy is … Read more
A critical vulnerability in Atlassian’s software has been discovered, allowing unauthenticated attackers to read known files across eight of its products. The flaw, which affects Confluence, Jira, Bitbucket, and five other applications, could potentially allow hackers to gain access to sensitive data. Atlassian’s software is widely used by organizations for project management, collaboration, and development … Read more
The US Senate has taken a crucial step towards protecting American healthcare data from cyber threats by passing the bipartisan Health Care Cybersecurity and Resilience Act. The bill, introduced by Senators Bill Cassidy, Maggie Hassan, Jon Cornyn, and Mark Warner, aims to strengthen the sector’s defenses against increasingly sophisticated attacks. Cyberattacks on US healthcare institutions … Read more
A Critical Vulnerability in Rejetto HFS Exposes Servers to Remote Code Execution Threat actors have begun exploiting a critical vulnerability in Rejetto HTTP File Server (HFS) that allows them to bypass authentication and gain remote code execution on vulnerable servers. The flaw, tracked as CVE-2026-61500 with a CVSS score of 9.3, was discovered by AI-powered … Read more
Over 250,000 people have had their sensitive information compromised in two separate data breaches at New Jersey-based Clover Health Investments and Texas-based AngMar Management Services. The affected individuals include patients and insurance holders whose personal identifiable information (PII) and protected health information (PHI) were stolen by hackers. The breach at Clover Health Investments occurred in … Read more
A recently discovered Linux backdoor has been spotted using the Session Traversal Utilities for NAT (STUN) protocol to turn infected systems into proxies, exploiting dozens of vulnerabilities along the way. The malware, dubbed ClingSTUN, not only sets up a back-connect proxy backdoor but also contains self-propagation mechanisms that ensure its own execution during the boot … Read more
Google has temporarily shut down its Open Source Software Vulnerability Reward Program (OSS VRP) for product vulnerability submissions, citing a surge in automated reports that have overwhelmed the system. This move affects researchers who had been relying on the program to receive rewards for discovering vulnerabilities in Google’s open source projects. The pause, which was … Read more
US Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity The US Senate has just passed a landmark bipartisan bill aimed at bolstering healthcare cybersecurity, sending it to the House of Representatives for consideration. The Health Care Cybersecurity and Resilience Act is designed to help the healthcare sector fortify itself against cyber threats, which have become … Read more
Critical Vulnerability in Rejetto HFS Exploited by Threat Actors, Warns VulnCheck A critical vulnerability in Rejetto HTTP File Server (HFS) is being actively exploited by threat actors to gain remote code execution and bypass authentication. The flaw, tracked as CVE-2026-61500 with a CVSS score of 9.3, was discovered by Horizon3.ai researchers using an AI-powered model, … Read more
Over 250,000 people’s sensitive medical information has been stolen in a pair of data breaches that hit two separate healthcare companies in New Jersey and Texas. The incidents highlight the ongoing threat of cyber attacks against healthcare organizations, which hold vast amounts of personal and protected health information. Clover Health Investments, based in Jersey City, … Read more