IT Security Newsletter - 8/26/2026
Sensitive Information Exposed in Nutex Health Data Breach
Houston-based healthcare management and operations company Nutex Health Inc. (NASDAQ: NUTX) has suffered a data breach that could involve sensitive information. Nutex Health is a healthcare services and operations company that operates micro-hospitals, specialty hospitals, and outpatient departments. The company revealed in an SEC filing this week that it recently detected unauthorized access to its network. READ MORE...
LACMA data breach last year exposed social security and medical data
The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. The museum says that on July 11, 2025, it detected suspicious activity on its systems that had started four days earlier. A month later, the investigation confirmed that the network was compromised. At the time, the type of exposed data could not be determined, and the first results of the investigation became available in late February 2026. READ MORE...
The GTA VI leaks are breaking the internet. Security researchers have seen this before.
Grand Theft Auto VI, widely heralded as the game event of the decade, took a significant hit last week after a cybercriminal sent much of the internet into pandemonium after publishing gameplay footage a week before the game's publisher planned to reveal core portions of the game to the public. The files posted by the online persona "CyberLeek" indicate either a hacker had direct access to Rockstar Games' most sensitive systems or was given proprietary data by an insider. READ MORE...
Massive DDoS attack disrupts Norway's government digital services
A large distributed denial-of-service (DDoS) attack has disrupted Norway's shared government digital infrastructure since Monday, affecting services used by the public sector. The attack started at 03.38 CEST on Monday and has targeted the infrastructure supporting services operated by the Norwegian Digitalization Agency, Digitaliseringsdirektoratet (Digdir), and its operations provider, Vivicta. READ MORE...
Arrested man allegedly impersonated NSA elite hacking unit, Supreme Court chief justice
Colorado police arrested a man last week over charges that he impersonated both Supreme Court Chief Justice John Roberts and head of the National Security Agency's famed Tailored Access Operations hacking unit. Joshua Culver, also known as "Maverick Young," appeared in a Colorado court Tuesday after his arrest stemming from an indictment in Indiana in July on four counts of falsely impersonating an officer of the court and one count of using a forged signature of a judge. READ MORE...
INTERPOL crackdown on West African crime rings uncovers troubling new trend
Police across 22 countries arrested 58 people and identified 263 suspects during an eight-month INTERPOL operation targeting West African organized crime groups. Operation Jackal IV ran from November 2025 to June 2026. The goal was to disrupt money laundering, flag high-value targets, seize assets, and back up arrests and prosecutions tied to groups such as Black Axe, which Interpol links to a large share of the world's cyber-enabled fraud. READ MORE...
Adobe and Nvidia Patch Dozens of Vulnerabilities
Adobe and Nvidia on Tuesday announced patches for dozens of vulnerabilities affecting their products, including flaws rated critical severity. Nvidia published four new advisories on Tuesday. One advisory alerts customers to 18 security vulnerabilities in NemoClaw and OpenShell. Adobe is now publishing security advisories twice a month and on Tuesday it released seven new advisories addressing dozens of vulnerabilities. READ MORE...
Beware of fake Indeed interview apps used to install spyware
From several independent reports, we've seen evidence of scammers using fake Android "interview" apps to target job seekers on the Indeed platform. Indeed is one of the world's largest employment websites, giving scammers access to a huge pool of potential victims, especially in a competitive job market. A user in the UK posted on our forums after being instructed by a supposed employer on Indeed to install an "Interview App." READ MORE...
Researchers warn about chained SharePoint sequence
Two critical vulnerabilities in Microsoft SharePoint can be chained together to let an unauthenticated attacker execute code on a vulnerable server, according to a Monday blog post by researchers at VulnCheck. The sequence involves a critical authentication bypass vulnerability, tracked as CVE-2026-55040, and an improper input validation flaw, tracked as CVE-2026-63520. A proof of concept was previously disclosed on Aug. 11 by researchers at cybersecurity firm Rapid7. READ MORE...
Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)
Attackers have begun exploiting CVE-2026-60004, a critical code injection vulnerability in the Gitea Git platform, CISA confirmed on Tuesday by adding the vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. The KEV entry does not contain or point to details about the attacks, but according to an incident report published on the blog Habr, someone has exploited the vulnerability to compromise their organization's self-hosted Gitea instance and run crypto-mining software. READ MORE...
Hidden Prompts Trick AI Into False Email Summaries
A new study has shown how attackers can use hidden instructions in an email to manipulate AI assistants into generating false and potentially dangerous summaries for recipients. The study, by researchers at Forcepoint X-Labs, is the latest example of how attackers can use indirect prompt injections to subvert AI systems and get them to behave in unintended ways when processing external content. READ MORE...
- ...in 1920, the 19th Amendent is formally adopted into the U.S. Constitution, guaranteeing the right of women to vote.
- ...in 1939, the Brooklyn Dodgers hosted the Cincinnati Reds in the first televised baseball game.
- ...in 1952, puzzle creator and New York Times crossword editor Will Shortz is born in Crawfordsville, IN.
- ...in 1957, the Ford Motor Company rolls out the first Edsel. It will be discontinued three years later.








