Industry Groups Ask HHS for Guidance on Massive Change Breach Reports

Industry groups are seeking further clarification on delegation processes and want a clear statement that covered entities without a business associate relationship with Change Healthcare are not obliged to notify patients.

Cyware News – Latest Cyber News – ​Read More

Cybersecurity M&A Roundup: 29 Deals Announced in June 2024

Roundup of the more than two dozen cybersecurity-related merger and acquisition (M&A) deals announced in June 2024.

The post Cybersecurity M&A Roundup: 29 Deals Announced in June 2024 appeared first on SecurityWeek.

SecurityWeek – ​Read More

Patelco Credit Union Scrambling to Restore Systems Following Ransomware Attack

Patelco Credit Union shuts down banking systems and suspends electronic operations in response to a ransomware attack.

The post Patelco Credit Union Scrambling to Restore Systems Following Ransomware Attack appeared first on SecurityWeek.

SecurityWeek – ​Read More

PTC Releases Patch for Critical Flaw in Creo Elements/Direct License Server

The vulnerability, tracked as CVE-2024-6071, affects version 20.7.0.0 and earlier, and allows unauthenticated remote attackers to execute arbitrary OS commands on the server through a web interface.

Cyware News – Latest Cyber News – ​Read More

APP Fraud Singled Out as Biggest Financial Crime Threat

Nearly two-thirds of payments professionals in the UK believe that fraud is the most urgent financial crime threat, with authorized push payment (APP) scams being the top concern, according to a survey by The Payments Association.

Cyware News – Latest Cyber News – ​Read More

Bitwarden vs KeePass (2024): Battle of the Best – Who Wins?

Bitwarden vs KeePass: Who comes out on top? Dive into our 2024 analysis and make the best decision for your security needs!

Security | TechRepublic – ​Read More

Supposed Grasshopper Operators Impersonate Israeli Government and Private Companies to Deploy Open-Source Malware

The group uses a mix of publicly available malware and custom development to carry out their attacks. They have been using custom WordPress websites as a payload delivery mechanism.

Cyware News – Latest Cyber News – ​Read More

Microsoft MSHTML Flaw Exploited to Deliver MerkSpy Spyware Tool

Unknown threat actors have been observed exploiting a now-patched security flaw in Microsoft MSHTML to deliver a surveillance tool called MerkSpy as part of a campaign primarily targeting users in Canada, India, Poland, and the U.S.
“MerkSpy is designed to clandestinely monitor user activities, capture sensitive information, and establish persistence on compromised systems,” Fortinet FortiGuard

The Hacker News – ​Read More

Evolve Bank Data Breach Puts Affirm Cardholders Info at Risk

Affirm cardholders beware! Data breach at Evolve Bank, the issuer of Affirm credit cards, may expose personal information.…

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

Chrome Update Will Block Entrust Certificates by November 2024

Google has announced that starting November 1, 2024, Chrome version 127 and higher will no longer trust new TLS server authentication certificates from Entrust and AffirmTrust.

Cyware News – Latest Cyber News – ​Read More