Cybersecurity

Millions of patient scans and health records spilling online thanks to decades-old protocol bug | TechCrunch

Researchers say they found exposed patient imaging, as well as names, addresses and phone numbers Carly Page 1 day Thousands of exposed servers are spilling the medical records and personal health information of millions of patients due to security weaknesses in a decades-old industry standard designed for storing and sharing medical images, researchers have warned. […]

Cybersecurity

Microsoft Warns of COLDRIVER’s Evolving Evading and Credential-Stealing Tactics

Dec 07, 2023The Hacker NewsThreat Intelligence / Cyber Espionage The threat actor known as COLDRIVER has continued to engage in credential theft activities against entities that are of strategic interests to Russia while simultaneously improving its detection evasion capabilities. The Microsoft Threat Intelligence team is tracking under the cluster as Star Blizzard (formerly SEABORGIUM). It’s […]

Cybersecurity

TA422’s Dedicated Exploitation Loop—the Same Week After Week  | Proofpoint US

December 05, 2023 Greg Lesnewich, Crista Giering and the Proofpoint Threat Research Team Key takeaways  Since March 2023, Proofpoint researchers have observed regular TA422 (APT28) phishing activity, in which the threat actor leveraged patched vulnerabilities to send, at times, high-volume campaigns to targets in Europe and North America.  TA422 used the vulnerabilities as initial access […]