PwC confirms learning records breached in attack on vendor site
PwC on Monday said it was investigating claims that hackers had breached a third-party vendor site the company uses to house employee learning records. The company disclosed the breach amid claims from Everest ransomware that it had stolen 590 gigabytes of employee data in an attack. PwC has not commented on the specific ransomware claim. However, after learning of the incident, the company "acted promptly to secure the environment" and conducted a thorough review. READ MORE...
UNM Health ransomware attack disrupts patient care, surgeries
The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities. On Monday, UNM Health, the university's healthcare provider, began temporarily limiting new patient admissions, diverting ambulances to nearby hospitals, and suspending outpatient surgeries and appointments. In an update on the incident, UNM said all clinics will resume scheduled appointments and procedures starting today, Tuesday, October 27. READ MORE...
Data breach at Sony-owned internet provider compromises 2.6 million customer records
Attackers who broke into the So-net member database made off with personal information belonging to more than 2.58 million current and former customers, along with the email passwords of 54,401 users, Sony Network Communications has disclosed. So-net is a Japanese internet service provider run by Sony Network Communications, part of the Sony Group. "We have confirmed an information leak caused by unauthorized access to the member database," the company said in a notice published on October 27. READ MORE...
Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support
Threat actors are flooding employees' inboxes with spam and then contacting them on Microsoft Teams as IT support, offering to fix the problem they created, Arctic Wolf has found. The security company documented more than 400 incidents in which the external chat feature in Teams was abused. In many of these cases, the fake help desk message arrived minutes after the victim's inbox had been filled with hundreds of newsletter and subscription confirmations. READ MORE...
Chrome and Firefox updates fix serious security flaws. Install them now
On October 27, Google issued a new Stable channel update for Chrome. Most users are on Chrome's Stable channel. The desktop update brings Chrome to versions 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 for Linux. The update includes 52 security fixes, including four rated Critical. On the same day, Mozilla issued Security Advisory 2026-118, which fixes 167 vulnerabilities. Firefox 159 also introduces several new features. READ MORE...
Long-Hidden Flaws Patched in EPICS Research Facility Control Software
Four vulnerabilities in EPICS Base could allow attackers to crash processes in control systems used at particle accelerators, fusion experiments and other large research facilities. One flaw could potentially lead to code execution. CISA disclosed the issues in an advisory published on Tuesday, saying they impact EPICS Base 7.0.10 and earlier. The agency recommends updating to version 7.0.11. The vulnerabilities were discovered by Cipher, an autonomous security research system. READ MORE...
'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants
A novel infostealer that specifically targets AI applications and development tools is changing the narrative on illicit data monetization, opening up fresh revenue streams through extortion and other abuses of the stolen data. Researchers from Check Point Software discovered the malware, dubbed Aokigahara after the Japanese "haunted forest" at the base of Mount Fuji, which does typical stealer things, they said in a recent report. READ MORE...
Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison
A36-year-old Ukrainian national was sentenced to 70 months in prison for participating in a string of ransomware attacks targeting various critical infrastructure operators and businesses from the middle of 2018 to late 2021, the Justice Department said Tuesday. Artem Aleksandrovych Stryzhak was involved in ransomware attacks on hospitals that disrupted patient care, government entities, a dentist office, a company in the oil and gas transportation industry and law firms. READ MORE...
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
A two-month operation in Africa led to the arrests of nearly 1,500 cybercrime suspects across 20 African countries and the US, the recovery of $105 million in stolen funds, and the shutdown nearly 11,000 malicious networks. The third annual roundup of cybercriminals and financial scammers, dubbed Operation Serengeti III, aimed to take down groups responsible for ransomware, phishing, and cyber-enabled fraud, Interpol stated. READ MORE...
US launches program to deliver free cybersecurity help to rural hospitals
Small and rural healthcare organizations are among the most vulnerable critical infrastructure organizations in the nation. The U.S. government will help protect rural hospitals from cybersecurity threats as part of a new pilot program that could generate lessons for how to secure healthcare infrastructure nationwide. HHS on Monday launched Project Lifeline 250, a six-month program through which technology and cybersecurity firms will offer free hardware and services to rural hospitals. READ MORE...
Tailscale Rushes Patches After Uncoordinated Disclosure of 'Tailworm' Flaws
Tailscale is getting ready to ship a client update that addresses privilege escalation weaknesses in Tailscale SSH. Details of the bugs went public over the weekend. Tailscale provides a mesh VPN service that uses the WireGuard protocol to connect an organization's devices and services over a private, peer-to-peer network. The Tailscale vulnerabilities, dubbed Tailworm, are described in a report from Cyberdione Labs. READ MORE...
- ...in 1726, Jonathan Swift's satirical fantasy novel "Gulliver's Travels" is published.
- ...in 1886, The Statue of Liberty (originally named "Liberty Enlightening the World") is dedicated at Liberty Island, NY by President Grover Cleveland.
- ...in 1942, computer scientist and academic Gillian Lovegrove, an early pioneer and vocal advocate of women in IT-oriented professions, is born in Yorkshire, UK.
- ...in 1962, Soviet Premier Nikita Khrushchev orders Soviet missiles removed from Cuba, ending the Cuban Missile Crisis.
