The day's cybersecurity headlines from public sources, in one place. Search them, filter by theme or CVE, or show only vulnerabilities CISA has confirmed are being exploited. Every headline links to the original.
For my own read on what the news means for your business, see Insights.
48 stories match. Clear filters
-
Data breach at hearing aid giant Amplifon impacts thousands
The U.S arm of international hearing aid company Amplifon has been notifying customers about a data breach early this year that included medical information.
-
Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records
A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis's Threat Research Unit said last week. The agents also found a Taipei fire department platform exposing patient data from 2018, including ECG readings and ambulance video…
-
HHS rule: Medicare and Medicaid Programs; CY 2027 Payment Policies Under the Physician Fee Schedule and Other Changes to Part B Payment and Coverage Policies; Medicare Shared Savings Program Requirements; and Medicare Prescription Drug Inflation Rebate Program
This final rule addresses: changes to the physician fee schedule (PFS); other changes to Medicare Part B payment policies to ensure that payment systems are updated to reflect changes in medical practice, relative value of services, and changes in the statute; codification of establishment of new…
-
Medical services company settles with 4 states over 2023 hack of sensitive patient records
The case, brought by AGs in Connecticut, New Jersey, New York and Michigan, targeted the medical transcription, coding and imaging subsidiaries of the Nevada-based Perry Johnson Companies.
-
Healthcare can’t govern the AI tools it hasn’t found yet
Nearly nine in ten healthcare leaders say security or compliance staff always or usually review AI-written code that touches patient data before it goes live, and seven in ten have still found an AI-built tool handling that data without IT or security knowing, according to Paubox. Source: Paubox…
-
Michigan State cyber incident claimed by ransomware gang behind recent hospital attack
A recent post by the BYOD gang appears to line up with a security incident that prompted campus-wide action at Michigan State University. BYOD drew attention in October for an attack on the University of New Mexico.
-
Protecting OT, IoT and medical devices without disrupting operations
A smarter OT security strategy starts with visibility, context and prioritization.
-
BYOD ransomware gang apologizes for hitting University of New Mexico hospital systems (backfill, 2026-10-29 article)
The group posted on about Oct 27 that it did not know the devices supported patient care and offered free decryption keys. It still holds stolen patient and employee data and offered to delete it for $2,500 per person. The health center says it paid no ransom and all facilities were running as of…
-
HHS OCR settles Lehigh Valley Health Network ransomware case for $800,000 (backfill, 2026-10-29)
Ransomware found Feb 4, 2023. PHI of 248,359 people was exfiltrated and posted on the dark web, including sensitive photos of radiation oncology patients. OCR cited no accurate and thorough risk analysis, no regular review of system activity, impermissible disclosure, and late breach notices. LVHN…
-
Covenant Health (Maine) settles 2025 breach class action for $2 million
Attackers accessed Covenant Health's network in May 2025, found in July 2025. More than 500,000 patients affected, at least 284,000 in Maine. Data included SSNs, treatment details and insurance information. Class members can claim up to $5,000 for documented losses or about $75 cash, plus two…
-
Cybersecurity incident forces a major New Mexico hospital to divert patients and close clinics (UNM Hospital)
UNM Hospital diverted ambulances and closed clinics after an incident. TechNadu reports ransomware groups have claimed breaches at universities in Mexico and New Mexico. Cause and scope are unconfirmed. Publication dates were not available, so window fit is unconfirmed.
-
AI Takes Root in Hospital Corridors, Raises Security Stakes
Artificial intelligence is everywhere in healthcare, from doctors' intake forms to cancer screenings. But in some cases, life-and-death uses are outpacing cybersecurity.
-
ShinyHunters' Oracle PeopleSoft zero-day was three chained flaws (CVE-2026-35273, CVSS 9.8); WAF path blocking was bypassed
An SSRF in the Integration Gateway reaches the Environment Management Hub, which trusts localhost by default, leading to RCE. ShinyHunters (UNC6240) exploited it from May 27 to June 9, mainly against universities, with a later wave across tech, healthcare, transport and government. Oracle patched…
-
HHS rule: Health Data, Technology, and Interoperability: ONC Deregulatory Actions To Unleash Prosperity
This final rule focuses on deregulatory actions identified in HHS regulations regarding health information technology standards, implementation specifications, and certification criteria and regarding certification programs for health information technology. This final rule reduces burden, offers…
-
Wazuh and AI for Enhanced SOC Workflows
Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decision-making…
-
Quest Diagnostics: patient data likely accessed in hack (SEC filing)
Quest notified the SEC that patient data was likely accessed. A 60-day HIPAA notification clock follows. Same-day HIPAA Journal items: Tarter Krinsky & Drogin law firm breach exposing PHI of 196,645 people (a BAA and supply-chain example), UltraMobile Imaging breach (~75,000), Washington…
-
Conduent agrees to $80 million settlement over 2024 breach affecting about 62 million people
Settlement filed Oct 16 in a class action over the 2024 attack, allegedly by SafePay. Data exposed includes SSNs and medical details. Two subclasses (about 40 million and about 22 million). Cash up to $3,500 for documented fraud losses. Conduent denies wrongdoing and agreed to strengthen security…
-
Healthcare ransomware up 64% quarter over quarter; HHS OCR logged 77 large breaches in July
Comparitech reports healthcare ransomware attacks and claims rose 64% from Q2 to Q3 2026. OCR's July tally shows 77 large breaches, mostly hacking or IT incidents. A Semperis survey notes fewer victims are paying while attackers threaten staff and families.
-
ICSMA-26-288-02: J4Care dcm4che
Highest CVSS 9.1. Affects dcm4chee-arc-light. Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition.
-
Healthcare breaches: Any-Time Home Care (30,017 people), Photon Health, Healthcare Highways
Any-Time Home Care ransomware exposed prescriptions, diagnoses, SSNs, and insurance data for 30,017 people. Photon Health reported unauthorized access through a zero-day in its Metabase application. Healthcare Highways confirmed intrusion and data theft. Direwolf and Chaos claimed two of the…
-
iRhythm breach affects at least 360,000 patients
Attackers took data from third-party-hosted business applications June 3 to 8. Stolen: names, contact details, dates of birth, plus account, device serial, insurance numbers and service dates. Extortion demand came June 9. State filings show 360,000+ (298,647 in Texas, 69,526 in South Carolina)…
-
IQVIA fined 7 million euros (about $7.8M) by Italy's data authority for weak anonymization
Roughly one million patient records were open to de-anonymization risk. Regulator found the anonymization inadequate.
-
250,000 affected by healthcare breaches at Clover Health Investments and AngMar Management Services
A July incident exposed patient information at a New Jersey and a Texas healthcare firm.
-
Senate passes Health Care Cybersecurity and Resilience Act, heads to House
Passed unanimously. Provides grants (with rural clinic support), requires an HHS incident response plan, designates ASPR as Sector Risk Management Agency, improves HHS and CISA coordination, and updates cybersecurity regulations. It died at the end of the 2024 term and was reintroduced December…
-
Google Gemini 4 Argon finds critical flaw in hospital software, launched with guardrail-free access for vetted defenders
Google says the model found a critical flaw exposing sensitive personal information in healthcare software used by hospitals worldwide. Vendor and remediation status are not disclosed. Access is limited to vetted defenders through its Fairwind program.