Genomic-diagnostics firm Baylor Genetics is responding to a cyberattack that compromised some patients' data, the firm said on Friday. The intrusion, which occurred between June 11 and June 17, "impacted a limited portion of its information technology environment and certain individuals' personal information," the company said in a statement. Baylor provides laboratory testing for healthcare providers, which means it has amassed a large quantity of private medical data. READ MORE...
Heights Finance Holdings' online data breach notification says an unauthorized party accessed a third-party cloud platform containing customer data, potentially exposing highly sensitive personal, banking, and identity information. Heights Finance is a consumer lender that offers personal installment loans. Reportedly, the company filed a report with Texas regulators mentioning 734,828 affected people, though that figure should not automatically be read as a confirmed nationwide total. READ MORE...
Researchers warn that a critical vulnerability in SAP Commerce Cloud is facing exploitation just days after the company issued a patch. Defused, a firm that specializes in threat intelligence, said Friday that it detected initial exploitation activity against the flaw, which is tracked as CVE-2026-58231, according to a post on X. Exploitation began hitting the security firm's honeypots just three days after the patch was issued, according to Defused. READ MORE...
Acybercrime group responsible for a string of recent attacks against private equity firms, law firms and financial rating agencies remains active and continued to target new victims as of late last week, according to researchers. BlackFile, which Google Threat Intelligence Group tracks as UNC6671 and associates more broadly with The Com, has been active since the start of the year, shifting its focus from one sector to the next. READ MORE...
GitLab on Monday rolled out patches for two vulnerabilities, including a critical-severity code injection flaw that can be exploited without authentication. Tracked as CVE-2026-19478 (CVSS score of 9.4), the security defect allows attackers to modify or delete user data and public projects via a GraphQL directive, GitLab explains in its advisory. The second bug is CVE-2026-19650 (CVSS score of 7.1), a cross-site request forgery (CSRF) issue impacting the GraphQL multiplex query handler. READ MORE...
It turns out that AI agents don't always play nice together. In the latest episode of agentic AI producing unexpected results, Anthropic recently observed "a multiagent turf war" between three instances of the same Claude model with contradictory objectives in testing designed to study behavior the company had already observed in real-world deployments. The models were deployed on virtual machines (VMs) in Claude Code and given a simple goal. READ MORE...
Yet another Mirai-derived botnet is on the loose, targeting Linux systems by exploiting flaws in various Internet-facing devices to combine distributed denial of service (DDoS) attacks with a broader set of malicious capabilities. The botnet, tracked as "Evooo1Bot" by the research team at Fortiguard Labs, has been actively targeting Internet-facing devices since at least July, according to a report published Friday. READ MORE...
The next time you type something sensitive into a Google Doc-or any other online tool with a sharing feature-be careful about the permissions you grant. Speaking with The Register, the founder of QR generation service Pageloot said that he learned that the hard way. Siim Kostabi recalled how a contractor working for the company accidentally exposed login details for its staging environment-credentials that were never meant to leave an internal testing setup. READ MORE...
A critical vulnerability in the Forminator Forms plugin for WordPress potentially exposes thousands of websites to remote code execution (RCE), WordPress security firm Defiant warns. Tracked as CVE-2026-15748 (CVSS score of 9.8), the bug is described as an arbitrary file upload via the handle_file_upload function of the popular form builder plugin. Insufficient file type validation in the affected function allows unauthenticated attackers to upload executable files, leading to code execution. READ MORE...
Researchers manipulated Microsoft Copilot Personal into telling them how to hack the AI assistant - eventually tricking it into sending sensitive data to an external server and poisoning its persistent memory, by repeatedly asking Copilot why an attack wouldn't work. Varonis Threat Labs uncovered the vulnerability, which they named "CoSnitch" and reported to Microsoft in December 2025. Redmond, we're told, planned to issue a patch and formally identify the CVE on Tuesday. READ MORE...
For the past year or so, booksellers have suspected that AI firms are buying up huge lots of rare books, then destroying them after scanning them to train AI. But this was hard to prove until now, as 404 Media reports that an Airtag hidden in a rare book shows that at least one tech giant, in the race to advance its frontier models, is behind some of the bulk orders: Amazon. 404 Media revealed that it had connected with a bookseller who agreed to plant an Airtag in a bulk order. READ MORE...