**Security Teams’ Euphoria Over MFA May Be Misplaced** For years, security teams have been implementing multi-factor authentication (MFA) as a crucial layer of protection against account takeovers. However, recent attacks suggest that this approach may be creating a false sense of security. While MFA has indeed raised the bar for attackers, it’s also inadvertently pushed … Read more
Veradigm Faces Patient Data Breach After Ransomware Gang Claims Attack Healthcare technology company Veradigm has disclosed a data breach affecting thousands of its customers, including hospitals and clinics across the United States. The breach is attributed to a ransomware gang that claims to have stolen sensitive patient information, including Social Security numbers and personal details. … Read more
US Government Warns of Widespread Theft of AI Model Tokens by Chinese Firms A joint advisory from top US cybersecurity and intelligence agencies has revealed a coordinated effort by six Chinese AI companies to extract billions of tokens from frontier AI models. The affected American firms include Anthropic, OpenAI, Google, and xAI, with the attackers … Read more
A coordinated assault on web applications has left multiple organizations scrambling to patch vulnerabilities after four separate spy groups were found to be utilizing a shared Chrome and Windows exploit kit within a week. This alarming trend highlights the ease with which attackers can leverage existing tools to breach sensitive systems, underscoring the importance of … Read more
A massive online scam has been disrupted, with US authorities freezing over $52.8 million in cryptocurrency linked to Xinbi Guarantee, a notorious marketplace for fake financial guarantees and stolen identities. The operation, which allowed scammers to sell fake identities and exploit vulnerable individuals, has been brought to its knees by a coordinated effort between law … Read more
Over 36,000 Exposed Plex Servers Remain Unpatched Against Security Vulnerabilities A staggering 36,000+ Plex Media servers exposed online remain vulnerable to attacks due to unpatched security vulnerabilities. The affected servers are running on outdated versions of Plex Media Server v1.43.2 and earlier, leaving their users open to potential cyber threats. Plex issued a warning last … Read more
Account Recovery Processes Exposed as Vulnerable Weak Link in Multi-Factor Authentication In a disturbing trend, hackers are increasingly targeting account recovery processes to gain unauthorized access to sensitive systems. This tactic exploits a weakness in multi-factor authentication (MFA) mechanisms, which have become the norm in modern cybersecurity. By focusing on the process of resetting or … Read more
Veradigm has disclosed a patient data breach after a cybersecurity incident at one of its third-party vendors exposed sensitive information for thousands of individuals. The company, which supplies electronic health records and other software to medical practices across the United States, says the breach did not disrupt operations but affected a small number of customers. … Read more
US Intelligence Agencies Expose Chinese Firms’ Industrial-Scale Theft of AI Models A shocking joint advisory from top US cybersecurity and intelligence agencies reveals that six Chinese AI companies have been conducting industrial-scale distillation attacks on American frontier AI models, extracting billions of tokens since at least late 2024. The affected firms include DeepSeek, Moonshot AI, … Read more
A newly uncovered vulnerability in identity exposure management systems has exposed replayable AI tokens that can bypass even the most robust multi-factor authentication (MFA) protocols. This critical flaw, discovered through a series of real-world attacks, allows malicious actors to exploit AI-powered login tokens and gain unauthorized access to sensitive networks. The issue lies in the … Read more