This is the RSS 2.0 feed from www.secnews.physaphae.fr. IT's a simple agragated flow of multiple articles soruces. Liste of sources, can be found on www.secnews.physaphae.fr. 2025-05-10T16:54:54+00:00 www.secnews.physaphae.fr Bleeping Computer - Magazine Américain Ascension, one of the largest private healthcare systems in the United States, has revealed that a data breach disclosed last month affects the personal and healthcare information of over 430,000 patients. [...]]]> 2025-05-09T14:48:15+00:00 https://www.bleepingcomputer.com/news/security/ascension-says-recent-data-breach-affects-over-430-000-patients/ www.secnews.physaphae.fr/article.php?IdArticle=8673808 False Data Breach,Medical None None Cyble - CyberSecurity Firm 2025-05-09T09:14:31+00:00 https://cyble.com/blog/india-experience-hacktivist-group-activity/ www.secnews.physaphae.fr/article.php?IdArticle=8673614 False Data Breach,Threat,Legislation,Medical None 3.0000000000000000 GB Hacker - Blog de reverseur Le groupe de ransomware de l'Agenda, également connu sous le nom de Qilin, aurait intensifié ses attaques au premier trimestre de 2025, ciblant des secteurs critiques comme les soins de santé, la technologie, les services financiers et les télécommunications à travers les États-Unis, les Pays-Bas, le Brésil, l'Inde et les Philippines. Selon une analyse détaillée de Trend Micro, le groupe a évolué son arsenal […]

---

>The Agenda ransomware group, also known as Qilin, has been reported to intensify its attacks in the first quarter of 2025, targeting critical sectors like healthcare, technology, financial services, and telecommunications across the US, the Netherlands, Brazil, India, and the Philippines. According to a detailed analysis by Trend Micro, the group has evolved its arsenal […] ]]> 2025-05-07T14:33:47+00:00 https://gbhackers.com/agenda-ransomware-group-enhances-tactics/ www.secnews.physaphae.fr/article.php?IdArticle=8672811 False Ransomware,Prediction,Medical None 2.0000000000000000 Recorded Future - FLux Recorded Future California-based Masimo, known for oximeters and other medical devices, reported that a late April cyberattack has temporarily limited its ability "to process, fulfill, and ship customer orders."]]> 2025-05-07T12:48:19+00:00 https://therecord.media/masimo-medical-device-company-cyberattack www.secnews.physaphae.fr/article.php?IdArticle=8672759 False Medical None 3.0000000000000000 GB Hacker - Blog de reverseur Le secteur des soins de santé est devenu une cible principale pour les cyberattaquants, motivé par la dépendance croissante à l'égard des applications cloud et l'intégration rapide des outils génératifs de l'IA (Genai) dans les flux de travail organisationnels. Selon le rapport Netkope Threat Labs pour Healthcare 2025, les cybercriminels exploitent des plateformes de confiance comme Github, avec 13% des organisations de soins de santé qui connaissent […]

---

>The healthcare sector has emerged as a prime target for cyber attackers, driven by the increasing reliance on cloud applications and the rapid integration of generative AI (genAI) tools into organizational workflows. According to the Netskope Threat Labs Report for Healthcare 2025, cybercriminals are exploiting trusted platforms like GitHub, with 13% of healthcare organizations experiencing […] ]]> 2025-05-07T12:08:48+00:00 https://gbhackers.com/healthcare-sector-becomes-a-major-target-for-cyber-attacks/ www.secnews.physaphae.fr/article.php?IdArticle=8672763 False Tool,Threat,Medical,Cloud None 2.0000000000000000 Cyble - CyberSecurity Firm Global ransomware attacks in April 2025 declined to 450 from 564 in March – the lowest level since November 2024 – as major changes among the leading Ransomware-as-a-Service (RaaS) groups caused many affiliates to align with new groups. Still, the long-term trend for ransomware attacks remains decidedly upward (chart below) so April\'s decline could be reversed as soon as new RaaS leaders are established.  ~ Rasomware attacks by month 2021-2025 For now, the uncertainty at RansomHub – which went offline at the start of April but plans to return – resulted in new groups taking over the top global attack spots. Qilin, which gained affiliates from the RansomHub uncertainty, led all groups with 74 attacks claimed in April (chart below), followed by Akira at 70, Play with 50, Lynx with 31 attacks, and NightSpire at 24. ]]> 2025-05-06T14:17:39+00:00 https://cyble.com/blog/qilin-tops-april-2025-ransomware-report/ www.secnews.physaphae.fr/article.php?IdArticle=8672355 False Ransomware,Malware,Vulnerability,Threat,Industrial,Prediction,Medical,Cloud,Technical None 2.0000000000000000 The Register - Site journalistique Anglais This time criminals targeted partner\'s third-party software It\'s more bad news from Ascension Health which is informing some of its patients, potentially for the second time in the space of a year, that their medical data was compromised during a major cyberattack.…]]> 2025-05-01T19:22:07+00:00 https://go.theregister.com/feed/www.theregister.com/2025/05/01/ascension_cyberattack/ www.secnews.physaphae.fr/article.php?IdArticle=8670237 False Medical None 2.0000000000000000 GB Hacker - Blog de reverseur La navigation sur la cybersécurité des soins de santé est cruciale dans l'environnement hyper-connecté d'aujourd'hui, où il sous-tend à la fois la résilience opérationnelle et la confiance des patients. La numérisation rapide des dossiers médicaux, la prolifération des dispositifs connectés et la sophistication croissante des cyber-menaces ont placé les chefs de la sécurité de l'information (CISO) au premier plan de la stratégie organisationnelle. Plus seulement les gardiens de la conformité, les cisos […]

---

>Navigating healthcare cybersecurity is crucial in today\'s hyper-connected environment, where it underpins both operational resilience and patient trust. The rapid digitization of medical records, proliferation of connected devices, and the growing sophistication of cyber threats have placed Chief Information Security Officers (CISOs) at the forefront of organizational strategy. No longer just gatekeepers of compliance, CISOs […] ]]> 2025-05-01T16:53:57+00:00 https://gbhackers.com/navigating-healthcare-cybersecurity/ www.secnews.physaphae.fr/article.php?IdArticle=8670170 False Medical None 2.0000000000000000 Smashing Security - Podcast Cyber He\'s not a pop star, but Jeffrey Bowie is alleged to have toured staff areas of a hospital in Oklahoma, hunting for computers he could install spyware on. We dive into the bizarre case of the man accused of hacking medical networks and then sharing how he did it on LinkedIn. Plus! Move over Nigerian...]]> 2025-04-30T22:00:00+00:00 https://www.smashingsecurity.com/415-hacking-hijinks-at-the-hospital-and-waspi-scams/ www.secnews.physaphae.fr/article.php?IdArticle=8670054 False Medical None 2.0000000000000000 The State of Security - Magazine Américain According to the 2024 State of Ransomware report by Sophos, there was a 500% increase in ransom bills in the last 12 months. Moreover, an analysis by Comparitech revealed 181 confirmed ransomware incidents targeting healthcare providers in 2024, with 25.6 million records compromised. Meanwhile, there were 42 more confirmed attacks on healthcare organizations not involved in direct care provision. These additional attacks amounted to over 115 million compromised records. Source Now more than ever, Ransomware-as-a-Service (RaaS) platforms are being used to target hospitals, medical devices, and...]]> 2025-04-30T10:00:04+00:00 https://www.tripwire.com/state-of-security/growing-threat-ransomware-service-raas-healthcare-infrastructure www.secnews.physaphae.fr/article.php?IdArticle=8669979 False Ransomware,Threat,Medical None 3.0000000000000000 Bleeping Computer - Magazine Américain ​Ascension, one of the largest private healthcare systems in the United States, is notifying patients that their personal and health information was stolen in a December 2024 data theft attack, which affected a former business partner. [...]]]> 2025-04-30T09:21:31+00:00 https://www.bleepingcomputer.com/news/security/ascension-discloses-new-data-breach-after-third-party-hacking-incident/ www.secnews.physaphae.fr/article.php?IdArticle=8669969 False Data Breach,Medical None 2.0000000000000000 GB Hacker - Blog de reverseur Un Trojan (rat) à distance non documenté auparavant sans papiers a fait surface, ciblant spécifiquement les organisations de soins de santé et pharmaceutiques du monde entier. Observé pour la première fois aussi récemment que le 10 mars 2025, ce malware se distingue des menaces connexes comme Rhadamanthys et Lumma par son exécution sophistiquée en mémoire et ses techniques d'évasion multicouches. Morphisec, une principale entreprise de cybersécurité, a détaillé les logiciels malveillants […]

---

>A previously undocumented remote access trojan (RAT) named ResolverRAT has surfaced, specifically targeting healthcare and pharmaceutical organizations worldwide. First observed as recently as March 10, 2025, this malware distinguishes itself from related threats like Rhadamanthys and Lumma through its sophisticated in-memory execution and multi-layered evasion techniques. Morphisec, a leading cybersecurity firm, has detailed the malware\'s […] ]]> 2025-04-29T11:27:11+00:00 https://gbhackers.com/resolverrat-targets-healthcare-and-pharmaceutical-sectors/ www.secnews.physaphae.fr/article.php?IdArticle=8669432 False Malware,Medical None 2.0000000000000000 The State of Security - Magazine Américain The FBI is set to report that ransomware was the most pervasive cybersecurity threat to US critical infrastructure during the year of 2024. As Reuters reports, complaints of ransomware attacks against critical sectors have jumped 9% over the previous year. The annual report from the FBI\'s Internet Crime Complaint Center (IC3) will reveal that the likes of manufacturing, healthcare, government facilities, financial services and IT were the top critical infrastructure sectors targeted by digital extortionists. With the impact of ransomware being seen in production lines grinding to a standstill...]]> 2025-04-29T02:57:05+00:00 https://www.tripwire.com/state-of-security/ransomware-attacks-critical-infrastructure-surge-reports-fbi www.secnews.physaphae.fr/article.php?IdArticle=8669356 False Ransomware,Threat,Medical None 3.0000000000000000 GB Hacker - Blog de reverseur AI-generated medical scams across TikTok and Instagram, where deepfake avatars pose as healthcare professionals to promote unverified supplements and treatments. These synthetic “doctors” exploit public trust in the medical field, often directing users to purchase products with exaggerated or entirely fabricated health claims. With advancements in generative AI making deepfakes increasingly accessible, experts warn that […] ]]> 2025-04-26T14:57:37+00:00 https://gbhackers.com/new-ai-generated-tikdocs-exploits-trust-in-the-medical-profession/ www.secnews.physaphae.fr/article.php?IdArticle=8668160 False Threat,Medical None 3.0000000000000000 HackRead - Chercher Cyber Interlock ransomware group claims it stole 20TB of sensitive patient data from DaVita Healthcare. While the group has…]]> 2025-04-25T15:34:27+00:00 https://hackread.com/interlock-ransomware-stole-davita-healthcare-data/ www.secnews.physaphae.fr/article.php?IdArticle=8667725 False Ransomware,Medical None 3.0000000000000000 We Live Security - Editeur Logiciel Antivirus ESET Look out for AI-generated \'TikDocs\' who exploit the public\'s trust in the medical profession to drive sales of sketchy supplements]]> 2025-04-25T09:00:00+00:00 https://www.welivesecurity.com/en/social-media/deepfake-doctors-tiktok-bogus-cures/ www.secnews.physaphae.fr/article.php?IdArticle=8668197 False Threat,Medical None 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine ELENOR-corp ransomware, a new version of Mimic, is targeting healthcare organizations using advanced capabilities]]> 2025-04-24T17:00:00+00:00 https://www.infosecurity-magazine.com/news/elenor-corp-ransomware-targets/ www.secnews.physaphae.fr/article.php?IdArticle=8667268 False Ransomware,Medical None 3.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) The Evolving Healthcare Cybersecurity Landscape  Healthcare organizations face unprecedented cybersecurity challenges in 2025. With operational technology (OT) environments increasingly targeted and the convergence of IT and medical systems creating an expanded attack surface, traditional security approaches are proving inadequate. According to recent statistics, the healthcare sector]]> 2025-04-24T16:00:00+00:00 https://thehackernews.com/2025/04/automating-zero-trust-in-healthcare.html www.secnews.physaphae.fr/article.php?IdArticle=8667102 False Legislation,Medical None 2.0000000000000000 Bleeping Computer - Magazine Américain ​A ransomware attack in January at Frederick Health Medical Group, a major healthcare provider in Maryland, has led to a data breach affecting nearly one million patients. [...]]]> 2025-04-24T12:19:14+00:00 https://www.bleepingcomputer.com/news/security/frederick-health-data-breach-impacts-nearly-1-million-patients/ www.secnews.physaphae.fr/article.php?IdArticle=8667270 False Ransomware,Data Breach,Medical None 3.0000000000000000 GB Hacker - Blog de reverseur Blue Shield of California a divulgué un incident important de confidentialité des données affectant jusqu'à 4,7 millions de membres, après avoir découvert que les informations de santé protégés (PHI) peuvent avoir été partagées par inadvertance avec Google Ads sur près de trois ans. Le fournisseur de soins de santé alerte désormais les membres potentiellement impactés et la mise en œuvre de nouvelles garanties pour éviter de futures violations. La brèche […]

---

>Blue Shield of California has disclosed a significant data privacy incident affecting up to 4.7 million members, after discovering that protected health information (PHI) may have been inadvertently shared with Google Ads over nearly three years. The healthcare provider is now alerting potentially impacted members and implementing new safeguards to prevent future breaches. The breach […] ]]> 2025-04-24T06:14:51+00:00 https://gbhackers.com/blue-shield-exposed-health-data/ www.secnews.physaphae.fr/article.php?IdArticle=8667011 False Medical None 3.0000000000000000 ProofPoint - Cyber Firms 2025-04-24T05:02:55+00:00 https://www.proofpoint.com/us/blog/email-and-cloud-threats/financial-firm-chooses-proofpoint-over-abnormal www.secnews.physaphae.fr/article.php?IdArticle=8667390 False Spam,Tool,Threat,Medical None 3.0000000000000000 Schneier on Security - Chercheur Cryptologue Américain Guillotine: hyperviseurs pour isoler AIS malveillant ." Résumé : À mesure que les modèles AI deviennent plus ancrés dans des secteurs critiques comme la finance, les soins de santé et les militaires, leur comportement inscriptable présente des risques toujours plus grands pour la société. Pour atténuer ce risque, nous proposons la guillotine, une architecture hyperviseur pour les modèles de sable puissant d'IA - des modèles qui, par accident ou malveillance, peuvent générer des menaces existentielles pour l'humanité. Bien que la guillotine emprunte certaines techniques de virtualisation bien connues, la guillotine doit également introduire des mécanismes d'isolement fondamentalement nouveaux pour gérer le modèle de menace unique posé par l'AIS à risque existentiel. Par exemple, un IA Rogue peut essayer de s'introduire sur un logiciel hyperviseur ou le substrat matériel sous-jacent pour activer la subversion ultérieure de ce plan de contrôle; Ainsi, un hyperviseur de guillotine nécessite une co-conception minutieuse du logiciel d'hyperviseur et des dispositifs CPU, RAM, NIC et de stockage qui prennent en charge le logiciel d'hyperviseur, pour contrecarrer les fuites de canaux latéraux et éliminer plus généralement les mécanismes d'IA pour exploiter les vulnérabilités basées sur la réflexion. Au-delà de cette isolement au niveau des logiciels, du réseau et des couches microarchitecturales, un hyperviseur de guillotine doit également fournir des défaillances physiques plus souvent associées aux centrales nucléaires, aux plates-formes avioniques et à d'autres types de systèmes critiques de mission. Les défaillances physiques, par exemple, impliquant une déconnexion électromécanique des câbles de réseau, ou l'inondation d'un centre de données qui détient une IA voyou, assure la défense en profondeur si le logiciel, le réseau et l'isolement microarchitecturale sont compromis et qu'un IA voyou doit être temporairement fermé ou détruit en permanence. ...

---

Interesting research: “Guillotine: Hypervisors for Isolating Malicious AIs.” Abstract:As AI models become more embedded in critical sectors like finance, healthcare, and the military, their inscrutable behavior poses ever-greater risks to society. To mitigate this risk, we propose Guillotine, a hypervisor architecture for sandboxing powerful AI models—models that, by accident or malice, can generate existential threats to humanity. Although Guillotine borrows some well-known virtualization techniques, Guillotine must also introduce fundamentally new isolation mechanisms to handle the unique threat model posed by existential-risk AIs. For example, a rogue AI may try to introspect upon hypervisor software or the underlying hardware substrate to enable later subversion of that control plane; thus, a Guillotine hypervisor requires careful co-design of the hypervisor software and the CPUs, RAM, NIC, and storage devices that support the hypervisor software, to thwart side channel leakage and more generally eliminate mechanisms for AI to exploit reflection-based vulnerabilities. Beyond such isolation at the software, network, and microarchitectural layers, a Guillotine hypervisor must also provide physical fail-safes more commonly associated with nuclear power plants, avionic platforms, and other types of mission critical systems. Physical fail-safes, e.g., involving electromechanical disconnection of network cables, or the flooding of a datacenter which holds a rogue AI, provide defense in depth if software, network, and microarchitectural isolation is compromised and a rogue AI must be temporarily shut down or permanently destroyed. ...]]> 2025-04-23T16:02:48+00:00 https://www.schneier.com/blog/archives/2025/04/regulating-ai-behavior-with-a-hypervisor.html www.secnews.physaphae.fr/article.php?IdArticle=8666711 False Vulnerability,Threat,Medical None 3.0000000000000000 Mandiant - Blog Sécu de Mandiant Ecposystics de logiciels municipaux. Style = "Vertical-Align: Baseline;">, Identifiez et utilisez des vulnérabilités zéro-jour dans Security et ]]> 2025-04-23T14:00:00+00:00 https://cloud.google.com/blog/topics/threat-intelligence/m-trends-2025/ www.secnews.physaphae.fr/article.php?IdArticle=8666639 False Ransomware,Malware,Vulnerability,Threat,Prediction,Medical,Cloud,Technical None 3.0000000000000000 HackRead - Chercher Cyber AOA, DaVita, and Bell Ambulance hit by ransomware in 2025. Over 245K affected as hackers steal patient data,…]]> 2025-04-23T11:47:29+00:00 https://hackread.com/ransomware-us-healthcare-aoa-davita-bell-ambulance-breach/ www.secnews.physaphae.fr/article.php?IdArticle=8666621 False Ransomware,Medical None 2.0000000000000000 SecurityWeek - Security News Massachusetts Medical Firm sur place Mammographie révèle la violation des données ayant un impact sur les informations personnelles de 350 000 patients.

---

>Massachusetts medical firm Onsite Mammography discloses data breach impacting the personal information of 350,000 patients. ]]> 2025-04-23T10:00:00+00:00 https://www.securityweek.com/data-breach-at-onsite-mammography-impacts-350000/ www.secnews.physaphae.fr/article.php?IdArticle=8666566 False Data Breach,Medical None 3.0000000000000000 Dark Reading - Informationweek Branch Dialysis firm DaVita, Wisconsin-based Bell Ambulance, and Alabama Ophthalmology Associates all suffered apparent or confirmed ransomware attacks this month.]]> 2025-04-22T20:28:48+00:00 https://www.darkreading.com/cyberattacks-data-breaches/healthcare-orgs-hit-ransomeware-attacks www.secnews.physaphae.fr/article.php?IdArticle=8666322 False Ransomware,Medical None 3.0000000000000000 The State of Security - Magazine Américain The healthcare industry is a prime target for cyberattacks due to the significant value of medical data and the critical nature of patient care. Unlike other sectors, healthcare organizations must balance cybersecurity with the need for immediate access to life-saving information. Ransomware attacks, in particular, have surged, with cybercriminals exploiting outdated systems, unpatched vulnerabilities, and human error to disrupt operations. A single breach can not only compromise patient privacy but also delay urgent treatments, putting lives at risk. This is where the human component comes in...]]> 2025-04-22T02:57:27+00:00 https://www.tripwire.com/state-of-security/digital-hygiene-healthcare-where-cybersecurity-matter-life-and-death www.secnews.physaphae.fr/article.php?IdArticle=8666013 False Ransomware,Vulnerability,Medical None 3.0000000000000000 HackRead - Chercher Cyber Morphisec discovers a new malware threat ResolverRAT, that combines advanced methods for running code directly in computer memory,…]]> 2025-04-21T15:06:50+00:00 https://hackread.com/native-language-phishing-resolverrat-healthcare/ www.secnews.physaphae.fr/article.php?IdArticle=8665702 False Malware,Threat,Medical None 3.0000000000000000 GB Hacker - Blog de reverseur Une tenue de ransomware relativement nouvelle connue sous le nom de CrazyHunter est devenue une menace importante, ciblant en particulier les organisations taïwanaises. Le groupe, qui a lancé ses opérations dans les secteurs de la santé, de l'éducation et des secteurs industriels de Taïwan, exploite les cyber-techniques sophistiquées pour perturber les services essentiels. Les techniques sophistiquées et l'exploitation open source CrazyHunter's Toolkit sont largement composées d'outils open source d'origine […]

---

>A relatively new ransomware outfit known as CrazyHunter has emerged as a significant threat, particularly targeting Taiwanese organizations. The group, which started its operations in the healthcare, education, and industrial sectors of Taiwan, leverages sophisticated cyber techniques to disrupt essential services. Sophisticated Techniques and Open-Source Exploitation CrazyHunter’s toolkit is largely composed of open-source tools sourced […] ]]> 2025-04-17T19:05:18+00:00 https://gbhackers.com/crazyhunter-hacker-group-exploits-open-source-github-tools/ www.secnews.physaphae.fr/article.php?IdArticle=8664170 False Ransomware,Tool,Threat,Industrial,Medical None 3.0000000000000000 GB Hacker - Blog de reverseur Les chercheurs ont réussi à infiltrer la forteresse numérique de l'un des groupes de ransomware les plus prolifiques, Medusa Locker. Connu pour avoir ciblé des secteurs critiques comme les soins de santé, l'éducation et la fabrication, le groupe a été responsable de nombreuses cyberattaques depuis sa détection en 2019. Découvrir le talon d'Achille La découverte a commencé lorsque les chercheurs en sécurité ont identifié une vulnérabilité critique au sein de […]

---

>Researchers have successfully infiltrated the digital fortress of one of the most prolific ransomware groups, Medusa Locker. Known for targeting critical sectors like healthcare, education, and manufacturing, the group has been responsible for numerous cyberattacks since its detection in 2019. Uncovering the Achilles’ Heel The discovery began when security researchers identified a critical vulnerability within […] ]]> 2025-04-16T16:49:55+00:00 https://gbhackers.com/researchers-expose-medusa-ransomware/ www.secnews.physaphae.fr/article.php?IdArticle=8663640 False Ransomware,Vulnerability,Medical None 3.0000000000000000 HackRead - Chercher Cyber 8M UK healthcare worker records, including IDs and financial data, exposed due to a misconfigured staff management database…]]> 2025-04-15T14:03:51+00:00 https://hackread.com/uk-software-firm-exposed-healthcare-worker-records/ www.secnews.physaphae.fr/article.php?IdArticle=8663112 False Medical None 3.0000000000000000 IndustrialCyber - cyber risk firms for industrial Morphisec Labs a détaillé un Resolverrat surnommé un nouvel accès à distance découvert, qui utilise une exécution avancée en mémoire, ...

---

>Morphisec Labs has detailed a newly discovered remote access trojan (RAT) dubbed ResolverRAT, which employs advanced in-memory execution,... ]]> 2025-04-15T09:31:06+00:00 https://industrialcyber.co/ransomware/resolverrat-malware-attacks-pharma-and-healthcare-organizations-via-phishing-and-dll-side-loading/ www.secnews.physaphae.fr/article.php?IdArticle=8663021 False Malware,Medical None 3.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) Cybersecurity researchers have discovered a new, sophisticated remote access trojan called ResolverRAT that has been observed in attacks targeting healthcare and pharmaceutical sectors. "The threat actor leverages fear-based lures delivered via phishing emails, designed to pressure recipients into clicking a malicious link," Morphisec Labs researcher Nadav Lorber said in a report shared with The]]> 2025-04-14T21:39:00+00:00 https://thehackernews.com/2025/04/resolverrat-campaign-targets-healthcare.html www.secnews.physaphae.fr/article.php?IdArticle=8662764 False Threat,Medical None 3.0000000000000000 SecurityWeek - Security News Organizations in the healthcare and pharmaceutical sectors have been targeted with ResolverRAT, a new malware family with advanced capabilities. ]]> 2025-04-14T13:40:36+00:00 https://www.securityweek.com/new-resolverrat-targeting-healthcare-pharmaceutical-organizations/ www.secnews.physaphae.fr/article.php?IdArticle=8662695 False Malware,Medical None 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine ResolverRAT targets healthcare organizations using advanced evasion techniques and social engineering]]> 2025-04-14T13:00:00+00:00 https://www.infosecurity-magazine.com/news/malware-resolverrat-targets/ www.secnews.physaphae.fr/article.php?IdArticle=8662676 False Malware,Medical None 3.0000000000000000 Bleeping Computer - Magazine Américain A new remote access trojan (RAT) called \'ResolverRAT\' is being used against organizations globally, with the malware used in recent attacks targeting the healthcare and pharmaceutical sectors. [...]]]> 2025-04-14T12:40:23+00:00 https://www.bleepingcomputer.com/news/security/new-resolverrat-malware-targets-pharma-and-healthcare-orgs-worldwide/ www.secnews.physaphae.fr/article.php?IdArticle=8662760 False Malware,Medical None 3.0000000000000000 ProofPoint - Cyber Firms 2025-04-14T09:09:48+00:00 https://www.proofpoint.com/us/blog/email-and-cloud-threats/crypto-scams-cybercriminals-lure-victims www.secnews.physaphae.fr/article.php?IdArticle=8662853 False Malware,Tool,Threat,Medical,Cloud,Commercial None 3.0000000000000000 Recorded Future - FLux Recorded Future The breach affecting Laboratory Services Cooperative involves sensitive information about medical care, as well as bank account details.]]> 2025-04-11T14:42:31+00:00 https://therecord.media/lab-provider-planned-parenthood-breach www.secnews.physaphae.fr/article.php?IdArticle=8661768 False Medical None 2.0000000000000000 SecurityWeek - Security News La coopérative de services de laboratoire indique que les informations personnelles et médicales de 1,6 million ont été volées dans une violation de données d'octobre 2024.

---

>Laboratory Services Cooperative says the personal and medical information of 1.6 million was stolen in an October 2024 data breach. ]]> 2025-04-11T10:35:00+00:00 https://www.securityweek.com/1-6-million-people-impacted-by-data-breach-at-laboratory-services-cooperative/ www.secnews.physaphae.fr/article.php?IdArticle=8661679 False Data Breach,Medical None 3.0000000000000000 Cyble - CyberSecurity Firm ]]> 2025-04-10T05:20:09+00:00 https://cyble.com/blog/ics-vulnerability-report-energy-cyble/ www.secnews.physaphae.fr/article.php?IdArticle=8661332 False Tool,Vulnerability,Threat,Patching,Industrial,Medical,Commercial None 3.0000000000000000 Dark Reading - Informationweek Branch Healthcare and IT security practitioners worry some of the proposed amendments are not practical for a sector that lacks resources and often uses legacy equipment.]]> 2025-04-08T21:36:33+00:00 https://www.darkreading.com/cyber-risk/industry-asks-clarity-proposed-hipaa-rules www.secnews.physaphae.fr/article.php?IdArticle=8661137 False Medical None 3.0000000000000000 IndustrialCyber - cyber risk firms for industrial The European Commission has initiated a consultation on its January Action Plan, which was designed to enhance cybersecurity... ]]> 2025-04-08T10:28:11+00:00 https://industrialcyber.co/medical/european-commission-launches-consultation-on-strengthening-healthcare-cyber-defenses-seeks-input-by-jun-30/ www.secnews.physaphae.fr/article.php?IdArticle=8660919 False Medical None 3.0000000000000000 Checkpoint - Fabricant Materiel Securite La Journée mondiale de la santé 2025, nous rappelons que la santé ne concerne pas seulement la biologie et le comportement - il est question d'infrastructure, d'accès et maintenant de cybersécurité. Comme cet important secteur critique devient de plus en plus numérique, il devient également de plus en plus vulnérable. La vie des patients, les données sensibles et les services de santé nationaux sont désormais en jeu à chaque fois qu'un acteur malveillant viole un système. En regardant ces chiffres, il est temps que nous appelons cela: une crise de santé publique résultant de la cyber-insécurité. Un secteur en siège de l'industrie de la santé continue de se classer parmi les secteurs les plus attaqués dans le monde. L'industrie des soins de santé et médicale souffre, sur […]

---

>On World Health Day 2025, we are reminded that health is not only about biology and behavior-it\'s about infrastructure, access, and now, cyber security. As this important critical sector grows increasingly digital, it also becomes increasingly vulnerable. Patient lives, sensitive data, and national health services are now at stake every time a malicious actor breaches a system. Looking at these figures, it\'s time we call this what it is: a public health crisis resulting from cyber insecurity. A Sector Under Siege The healthcare industry continues to rank among the most attacked sectors globally. The healthcare and medical industry suffers, on […] ]]> 2025-04-07T14:02:59+00:00 https://blog.checkpoint.com/healthcare/world-health-day-2025-when-cyber-security-fails-so-does-public-health/ www.secnews.physaphae.fr/article.php?IdArticle=8660750 False Medical None 3.0000000000000000 Dark Reading - Informationweek Branch Hotel and casino operations for the Lower Sioux Indians have been canceled or postponed, and the local health center is redirecting those needing medical or dental care.]]> 2025-04-04T17:50:09+00:00 https://www.darkreading.com/cyberattacks-data-breaches/minnesota-tribe-operations-ransomware-attack www.secnews.physaphae.fr/article.php?IdArticle=8660289 False Ransomware,Medical None 2.0000000000000000 Dark Reading - Informationweek Branch Shifting to a RaaS business model has accelerated the group\'s growth, and targeting critical industries like healthcare, legal, and manufacturing hasn\'t hurt either.]]> 2025-04-04T14:37:16+00:00 https://www.darkreading.com/threat-intelligence/medusa-momentum-ransomware-as-a-service-pivot www.secnews.physaphae.fr/article.php?IdArticle=8660264 False Medical None 2.0000000000000000 IndustrialCyber - cyber risk firms for industrial The Cybersecurity Working Group (CWG) within the U.S. Healthcare and Public Health Sector Coordinating Council (HSCC) recommended in... ]]> 2025-04-04T09:06:00+00:00 https://industrialcyber.co/medical/hscc-cwg-urges-halting-nprm-calls-for-joint-cybersecurity-policy-reform-to-boost-healthcare-resilience/ www.secnews.physaphae.fr/article.php?IdArticle=8660198 False Medical None 2.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine Highline Public Schools revealed that sensitive personal, financial and medical data was accessed by ransomware attackers during the September 2024 incident]]> 2025-04-03T10:30:00+00:00 https://www.infosecurity-magazine.com/news/sensitive-data-highline-ransomware/ www.secnews.physaphae.fr/article.php?IdArticle=8660015 False Ransomware,Medical None 3.0000000000000000 Recorded Future - FLux Recorded Future The Lower Sioux Indian Community warned residents on Wednesday that a cyberattack caused disruptions for the local healthcare facility, government center and casino.]]> 2025-04-02T20:29:12+00:00 https://therecord.media/native-minnesota-tribe-says-cyber-incident-disrupted-healthcare-casino www.secnews.physaphae.fr/article.php?IdArticle=8659911 False Medical None 3.0000000000000000 CyberScoop - scoopnewsgroup.com special Cyber Alors que les dispositifs médicaux sont achetés et redéfinis sur le marché secondaire, ils deviennent plus difficiles à trouver et à patcher lorsqu'une nouvelle vulnérabilité est découverte, a déclaré un médecin à la maison des législateurs.

---

>As medical devices are bought and re-sold on the secondary market, they become harder to find and patch when a new vulnerability is discovered, a doctor told House lawmakers. ]]> 2025-04-02T00:13:28+00:00 https://cyberscoop.com/gaps-in-medical-device-cybersecurity/ www.secnews.physaphae.fr/article.php?IdArticle=8659723 False Vulnerability,Medical None 2.0000000000000000 AlienVault Lab Blog - AlienVault est un acteur de defense majeur dans les IOC ici . Les menaces de cybersécurité ont augmenté en mars, avec des attaques, des violations et des vulnérabilités importantes, un impact sur les organisations du monde entier. Des augmentations de ransomwares aux défauts logiciels exploités, les entreprises ont été confrontées à un paysage difficile. Ce bref résume les problèmes les plus urgents et offre des étapes pratiques pour rester en sécurité. Nouvelles vulnérabilités entre les principaux fournisseurs Microsoft a publié des correctifs critiques pour Windows et des produits connexes, aborder les vulnérabilités d'exécution de code à distance dans les services de bureau à distance, le sous-système Windows pour Linux, DNS et Microsoft Office. Les questions activement exploitées dans les NTF, le sous-système du noyau, l'EXFAT et les conducteurs liés à l'USB ont soulevé des problèmes d'escalade de privilège. Meilleures pratiques: effectuer des analyses de vulnérabilité régulières et mettre en œuvre la gestion automatisée des correctifs pour réduire le temps d'exposition. Adobe, Apple et Google ont abordé des défauts de haute sévérité similaires sur des logiciels et des plateformes mobiles largement utilisés. Le flaw Webkit d'Apple et les zéro-jours Android de Google (CVE-2024-43093, CVE-2024-50302) ont tous deux été exploités activement. Meilleures pratiques: incluez la protection des points mobiles et des terminaux dans les évaluations des risques et assurez-vous que la formation à la sensibilisation des utilisateurs couvre les menaces basées sur les applications et basées sur le navigateur. Cisco, SAP, VMware et Palo Alto ont corrigé des vulnérabilités critiques dans les systèmes d'entreprise. Il convient de noter que la gestion de la mémoire de VMware zero-day (CVE-2025-22224) pourrait être exploitée à distance, et l'interface Web de Cisco (CVE-2025-22242) a activé l'exécution de commande via HTTP. Meilleures pratiques: segmenter l'architecture du réseau et mettre en œuvre des principes de confiance zéro pour limiter le mouvement latéral en cas de violation. CISA CONTINUTES CONTROMATION DES VULLÉRABILITÉS MISES À JOUR CATALOGUE CISA a ajouté plusieurs nouvelles vulnérabilités à son catalogue de vulnérabilités exploité connu, y compris: Cisco Small Business RV Routeurs (injection de commande) Serveur Hitachi Pentaho (exécution de code distant) Windows Win32k (Escalade des privilèges) Progress WhatsUp Gold (chemin de traverse) Ceux-ci ont un impact sur les secteurs des infrastructures critiques. Best Practice: Alignez les correctifs avec les mandats CISA KEV et maintenir les inventaires d'actifs qui relient les systèmes aux bases de données de vulnérabilité pour la hiérarchisation. Menaces répandues: ransomware et cyberattaques ransomware reste une menace dominante. en mars: CLOP a exploité CVE-2024-50623 dans des outils de transfert de fichiers CLEO, ciblant le commerce de détail, les finances et la logistique. RansomHub a compromis les systèmes non corrigés en utilisant des informations d'identification volées. Medusa (Spearwing) a déployé des tactiques d'extorsion à double. Aki]]> 2025-04-01T23:09:00+00:00 https://levelblue.com/blogs/security-essentials/march-2025-cybersecurity-consulting-updates-and-ransomware-activity www.secnews.physaphae.fr/article.php?IdArticle=8659820 False Ransomware,Tool,Vulnerability,Threat,Patching,Mobile,Medical,Technical None 3.0000000000000000 Recorded Future - FLux Recorded Future As thousands were laid off from the Department of Health and Human Services on Tuesday morning, Congress held a hearing on medical device cybersecurity where experts raised concerns about the ramifications of the firings.]]> 2025-04-01T20:37:05+00:00 https://therecord.media/lawmakers-warn-hhs-firing-impact-medical-device-cybersecurity www.secnews.physaphae.fr/article.php?IdArticle=8659694 False Medical None 3.0000000000000000 Dark Reading - Informationweek Branch The FDA\'s regulations and guidance aim to strike a balance between ensuring rigorous oversight and enabling manufacturers to act swiftly when vulnerabilities are discovered.]]> 2025-04-01T14:00:00+00:00 https://www.darkreading.com/vulnerabilities-threats/fdas-critical-role-keeping-medical-devices-secure www.secnews.physaphae.fr/article.php?IdArticle=8659617 False Vulnerability,Medical None 2.0000000000000000 AlienVault Lab Blog - AlienVault est un acteur de defense majeur dans les IOC Cybersecurity Insiders Introduction Pour les dirigeants de la santé, la priorisation de la conformité à la sécurité ne consiste pas seulement à répondre aux exigences réglementaires, mais à protéger la réputation de l'organisation, à réduire les risques et à assurer la continuité des activités. La certification HitRust E1 ou I1 peut améliorer considérablement le plan de santé et l'assurance des patients, réduire les risques de sécurité et créer des opportunités pour une augmentation des revenus grâce à une confiance améliorée, à un potentiel de partenariat amélioré et à des pratiques de conformité plus efficaces. En investissant dans la conformité de la sécurité et en réalisant des certifications comme HitRust, les organisations de santé de petite à moyenne taille peuvent atténuer les risques et se positionner pour un succès à long terme dans une industrie de plus en plus réglementée et compétitive. Exigences réglementaires et conséquences juridiques Les organisations de soins de santé doivent de plus en plus se conformer aux mandats du plan de santé, aux réglementations fédérales et étatiques, telles que HIPAA (Health Insurance Portability and Accountability Act), et HITECH (Health Information Technology for Economic Health Act). Le non-respect des mandats du plan de santé et des réglementations fédérales et étatiques peuvent entraîner des amendes, des conséquences juridiques et une perte de partenariats commerciaux ou d'accréditation. L'augmentation des attaques de ransomwares, telles que celles ciblant les hôpitaux et les assureurs, a souligné l'importance de sécuriser les systèmes de santé pour assurer la sécurité des patients et la continuité des soins. Menaces d'atténuation des risques et de cybersécurité Les organisations de soins de santé sont des cibles fréquentes des cyberattaques, en particulier en raison de la nature sensible des données de santé. Les violations des données sur les soins de santé peuvent entraîner un vol d'identité, une fraude médicale ou une exposition des informations sur la santé personnelle (PHI). Le rapport d'enquête sur les violations de Verizon 2024 sur les soins de santé montre des erreurs diverses, une mauvaise utilisation des privilèges et l'intrusion du système représentaient 83% des violations. Les acteurs de la menace représentent 70% des violations internes et externes à 30% avec 98% motivées par un gain financier et un espionnage de 1%, et des compromis de données allant de 75% personnels, 51% internes, 25% autres et 13% des informations d'identification (Verrizon 2024 DBIR). confiance et réputation Les patients et les partenaires contiennent les organisations de soins de santé des informations personnelles et médicales très sensibles et s'attendent à ce que leurs prestataires de soins de santé protégent leurs données médicales contre les cybermenaces et les violations de données. Si un plan de santé ou un fournisseur ne démontre pas la conformité, cela peut entraîner une perte de confiance des patients, une rétention de patient inférieure, une confiance érodée et endommager la réputation d'une organisation. La lutte contre la conformité à la sécurité permet de garantir que les données et les systèmes sensibles des patients sont adéquatement protégés, réduisant la probabilité de violations. Continuité opérationnelle Les cadres de conformité de la sécurité fournissent des processus structurés pour garantir que les données sont protégées, que les sauvegardes sont sécurisées et que des plans d]]> 2025-03-28T15:10:00+00:00 https://levelblue.com/blogs/security-essentials/why-healthcare-executives-should-prioritize-security-compliance www.secnews.physaphae.fr/article.php?IdArticle=8659411 False Ransomware,Data Breach,Vulnerability,Medical None 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine Claroty revealed that 89% of healthcare organizations use the top 1% of riskiest Internet-of-Medical-Things (IoMT) devices]]> 2025-03-28T14:50:00+00:00 https://www.infosecurity-magazine.com/news/healthcare-vulnerable-iot-devices/ www.secnews.physaphae.fr/article.php?IdArticle=8658901 False Medical None 2.0000000000000000 Bleeping Computer - Magazine Américain A breach at Oracle Health impacts multiple US healthcare organizations and hospitals after a threat actor stole patient data from legacy servers. [...]]]> 2025-03-28T10:13:58+00:00 https://www.bleepingcomputer.com/news/security/oracle-health-breach-compromises-patient-data-at-us-hospitals/ www.secnews.physaphae.fr/article.php?IdArticle=8658884 False Threat,Medical None 3.0000000000000000 IndustrialCyber - cyber risk firms for industrial Claroty, a cyber-physical systems protection firm, analyzed over 2.25 million Internet of Medical Things (IoMT) devices and more... ]]> 2025-03-27T14:52:37+00:00 https://industrialcyber.co/reports/claroty-reports-alarming-iomt-ot-device-risks-as-critical-vulnerabilities-found-in-99-of-healthcare-networks/ www.secnews.physaphae.fr/article.php?IdArticle=8658599 False Vulnerability,Industrial,Medical None 3.0000000000000000 Recorded Future - FLux Recorded Future A business that provides IT services to numerous healthcare providers in the United Kingdom has been fined about $4 million by the country\'s privacy regulator over a ransomware attack in 2022.]]> 2025-03-27T00:01:00+00:00 https://therecord.media/advanced-fined-3-million-ransomware-attack-ico www.secnews.physaphae.fr/article.php?IdArticle=8658444 False Ransomware,Medical None 3.0000000000000000 The Last Watchdog - Blog Sécurité de Byron V Acohido Cela commence par une ondulation de confusion, puis la panique. Les systèmes hospitaliers gèlent à mi-procédure. Les dossiers médicaux électroniques deviennent inaccessibles. lié: Intelt Intel System de santé préciel sur le système d'inteaux de santé Expositions Aux soins intensifs, les alarmes restent en tant que médecins et infirmières qui se bousculent pour stabiliser les patients critiques… (plus…) Le dernier chien de garde .

---

>It starts with a ripple of confusion, then panic. Hospital systems freeze mid-procedure. Electronic medical records become inaccessible. Related: Valuable intel on healthcare system cyber exposures In the ICU, alarms blare as doctors and nurses scramble to stabilize critical patients … (more…) The post GUEST ESSAY: The case for making real-time business continuity a frontline cybersecurity priority first appeared on The Last Watchdog.]]> 2025-03-26T09:23:19+00:00 https://www.lastwatchdog.com/guest-essay-the-case-for-making-real-time-business-continuity-a-frontline-cybersecurity-priority/ www.secnews.physaphae.fr/article.php?IdArticle=8658275 False Medical None 3.0000000000000000 The Register - Site journalistique Anglais The man who helped make Sammy the biggest name in modern tellies Samsung co-CEO Han Jong-hee died this week in the Samsung Medical Center in southern Seoul after a cardiac arrest. He was 63.…]]> 2025-03-25T19:54:42+00:00 https://go.theregister.com/feed/www.theregister.com/2025/03/25/samsung_co_ceo_dies/ www.secnews.physaphae.fr/article.php?IdArticle=8658174 False Medical None 2.0000000000000000 IndustrialCyber - cyber risk firms for industrial Following a social media post last week on the active planning of a coordinated, multi-city terrorist attack on... ]]> 2025-03-24T12:11:35+00:00 https://industrialcyber.co/medical/fbi-healthcare-agencies-warn-of-credible-threat-against-hospitals-after-multi-city-social-media-terror-plot-alert/ www.secnews.physaphae.fr/article.php?IdArticle=8657775 False Threat,Medical None 3.0000000000000000 Cyble - CyberSecurity Firm vulnérabilités trouvés dans les systèmes de gestion de l'énergie et de cardiologie de l'énergie solaire. Vulnérabilités ICS critiques Cyble a noté que Vulnérabilités Dans Sungrow Isolarcloud "sont parmi les importants car ils ont un impact sur les systèmes de gestion de l'énergie critiques." L'application Android et le micrologiciel A]]> 2025-03-21T10:12:55+00:00 https://cyble.com/blog/ics-vulnerability-report-solar-fixes-urged-by-cyble/ www.secnews.physaphae.fr/article.php?IdArticle=8657159 False Tool,Vulnerability,Patching,Mobile,Industrial,Medical,Commercial None 2.0000000000000000 Cyble - CyberSecurity Firm Overview  The Europol released the EU-SOCTA 2025 report, which offers a comprehensive look into the complex dynamics shaping serious and organized crime across Europe.  Europol\'s analysis provides insight into the increasing intersection of cybercriminal activities, hybrid threats, and the exploitation of emerging technologies. Criminals are rapidly adapting to digital advancements, using technology to expand their reach, enhance their capabilities, and evade law enforcement, the reports said.  Hybrid Threats: A Blurring of Crime and Conflict  Hybrid threats, which combine conventional criminal methods with advanced digital strategies, present significant risks. These tactics destabilize societies, exploit critical infrastructures, and create uncertainty.   Criminal organizations now leverage methods traditionally associated with state-backed actors, including disinformation campaigns, targeted cyberattacks, and manipulation of public opinion. By exploiting vulnerabilities of interconnected systems, these actors disrupt supply chains, compromise sensitive data, and manipulate information on a large scale.  The blending of state-backed espionage and organized crime blurs the line between geopolitical conflict and tra]]> 2025-03-20T14:02:25+00:00 https://cyble.com/blog/hybrid-threats-eu-socta-2025-report/ www.secnews.physaphae.fr/article.php?IdArticle=8656939 False Malware,Tool,Vulnerability,Threat,Legislation,Medical None 2.0000000000000000 The State of Security - Magazine Américain Protecting sensitive patient information is more critical than ever. With technologies evolving at a breakneck pace and the number of cyber threats targeting healthcare entities in the United States skyrocketing, healthcare organizations must have robust policies and guardrails in place to ensure patients\' confidential information doesn\'t fall into the wrong hands. One of the essential frameworks for ensuring data security and privacy is the Centers for Medicare & Medicaid Services Acceptable Risk Safeguards (CMS ARS). Released in January 2022, the CMS ARS provides a standardized approach to...]]> 2025-03-20T04:10:02+00:00 https://www.tripwire.com/state-of-security/cms-ars-blueprint-us-healthcare-data-security-and-compliance www.secnews.physaphae.fr/article.php?IdArticle=8656881 False Medical None 2.0000000000000000 AlienVault Lab Blog - AlienVault est un acteur de defense majeur dans les IOC L'enquête de sécurité 2023 , 78% des décideurs de sécurité ont estimé les données sensibles de leur organisation. La récupération des violations de données peut entraîner des coûts élevés et un temps et des efforts considérables. Dans le Les principales menaces de cybersécurité en 2024 Rapport par Forrester, la moitié des répondants à un niveau de cyber a estimé que le coût du cu]]> 2025-03-18T06:00:00+00:00 https://levelblue.com/blogs/security-essentials/levelblue-compliance-without-complexity www.secnews.physaphae.fr/article.php?IdArticle=8656386 False Ransomware,Tool,Vulnerability,Legislation,Medical None 2.0000000000000000 Cyble - CyberSecurity Firm Le FBI et l'Agence américaine de sécurité de la cybersécurité et de l'infrastructure (CISA) ont publié un avis bien à la fois sur le groupe Ransomware Medusa la semaine dernière, car Cyble a détecté une accélération dans les activités du groupe au cours des derniers mois. medusa Ransomware Attacks ont été un événement presque quotidien jusqu'à présent, fonctionnant près de 45% plus élevé que les niveaux d'attaque du groupe \\ 2024, selon Cyble Threat Intelligence Données. Le cisa-fbi consultatif Examine le groupe Ransomware-as-a-Service (RAAS) du groupe, des techniques, des techniques et des procédures (TTPS). (IOCS), mitre att & ck Techniques, et plus, basé sur des enquêtes récentes du FBI. Les attaques de ransomwares Medusa ont augmenté en février Cyble a enregistré 60 victimes de ransomwares de méduse au cours des 72 premiers jours de 2025, à un rythme de plus de 300 attaques cette année. Ce serait considérablement à partir des 211 attaques de ransomwares MEDUSA enregistrées par Cyble en 2024. Le volume d'attaque a culminé en février, avec 33 victimes revendiquées par le groupe au cours du mois de 28 jours. Février était un mois record pour les attaques de ransomware en général, comme enregistré par les données Cyble. Cyble a e]]> 2025-03-17T11:01:48+00:00 https://cyble.com/blog/medusa-ransomware-surges-as-fbi-share-insight/ www.secnews.physaphae.fr/article.php?IdArticle=8656193 False Ransomware,Tool,Vulnerability,Threat,Patching,Mobile,Medical None 3.0000000000000000 InformationSecurityBuzzNews - Site de News Securite Ever since AI\'s meteoric rise to prominence following the release of ChatGPT in November 2022, the technology has been at the centre of international debate. For every application in healthcare, education, and workplace efficiency, reports of abuse by cybercriminals for phishing campaigns, automating attacks, and ransomware have made mainstream news.  Regardless of whether individuals and [...]]]> 2025-03-17T06:49:07+00:00 https://informationsecuritybuzz.com/threat-of-cyber-risk-during-ai-adoptio/ www.secnews.physaphae.fr/article.php?IdArticle=8656157 False Ransomware,Threat,Medical ChatGPT 2.0000000000000000 The State of Security - Magazine Américain Critical infrastructure organizations bear an enormous responsibility. The assets, systems, and networks they manage are crucial to the functioning of a healthy society. They provide water, energy, transportation, healthcare, telecommunications, and more-should they fail, they would bring entire countries to their knees. The vast importance of Critical National Infrastructure (CNI) makes it a prime target for cybercriminals. Research from early this year even found that global critical infrastructure suffered 13 cyberattacks every second in 2023. And things are only likely to get worse: the...]]> 2025-03-17T05:05:05+00:00 https://www.tripwire.com/state-of-security/strengthening-critical-infrastructure-ncsc-caf www.secnews.physaphae.fr/article.php?IdArticle=8656177 False Medical None 3.0000000000000000 Dark Reading - Informationweek Branch Healthcare organizations must enhance their cybersecurity arsenal. Doing so can help them prevent financial, compliance, and reputational damage.]]> 2025-03-14T14:00:00+00:00 https://www.darkreading.com/vulnerabilities-threats/biggest-cyber-threats-healthcare-industry-today www.secnews.physaphae.fr/article.php?IdArticle=8655747 False Medical None 3.0000000000000000 Checkpoint - Fabricant Materiel Securite L'Internet des objets (IoT) transforme des industries comme les soins de santé, la fabrication, les villes intelligentes et même les véhicules autonomes, ce qui rend notre vie quotidienne hyperconnectée. Mais à mesure que de plus en plus d'appareils se mettent en ligne, se fier uniquement sur le cloud computing peut entraîner des temps de réponse lents, des coûts de bande passante élevés et des risques de sécurité. L'infrastructure traditionnelle basée sur le cloud a du mal à répondre aux exigences du traitement des données en temps réel, de la faible latence et de la sécurité proactive et préventive. Avant de plonger, permettez-moi d'expliquer ce qu'est Edge Computing et comment il s'applique à l'IoT. En termes simples, les données de l'informatique de bord traitent les données là où elles sont générées au lieu de l'achever à la distance […]

---

>The Internet of Things (IoT) is transforming industries like healthcare, manufacturing, smart cities, and even autonomous vehicles-making our daily lives hyperconnected. But as more devices come online, relying solely on cloud computing can lead to slow response times, high bandwidth costs and security risks. The traditional cloud-based infrastructure struggles to keep up with the demands of real-time data processing, low latency, and proactive, preventative security. Before we dive in, let me explain what is edge computing is about and how it applies to IoT. Simply put, edge computing processes data right where it\'s generated instead of routing it to remote […] ]]> 2025-03-14T13:00:08+00:00 https://blog.checkpoint.com/innovation/how-edge-computing-is-unlocking-iots-full-potential/ www.secnews.physaphae.fr/article.php?IdArticle=8655743 False Medical,Cloud None 3.0000000000000000 Schneier on Security - Chercheur Cryptologue Américain infecter TP-Link Routers: Le botnet peut conduire à une injection de commande qui rend ensuite possible l'exécution du code distant (RCE) afin que le malware puisse se propager automatiquement sur Internet. Cette faille de sécurité à haute gravité (suivie comme CVE-2023-1389 ) a également été utilisée pour répandre d'autres familles de dalware dès le 20 avril 2023 lorsqu'elle a été utilisée dans le ]]> 2025-03-14T11:02:58+00:00 https://www.schneier.com/blog/archives/2025/03/tp-link-router-botnet.html www.secnews.physaphae.fr/article.php?IdArticle=8655709 False Malware,Medical None 2.0000000000000000 Dark Reading - Informationweek Branch Medusa developers have been targeting a wide variety of critical infrastructure sectors, from healthcare and technology to manufacturing and insurance, racking up its victim count as it seemingly adds to its numbers of affiliates.]]> 2025-03-13T21:15:09+00:00 https://www.darkreading.com/cyberattacks-data-breaches/fbi-cisa-alarmed-medusa-ransomware-attacks-grow www.secnews.physaphae.fr/article.php?IdArticle=8655625 False Ransomware,Medical None 2.0000000000000000 HackRead - Chercher Cyber A misconfigured database exposed 108.8 GB of sensitive data, including information on over 86,000 healthcare workers affiliated with…]]> 2025-03-13T15:53:55+00:00 https://hackread.com/healthtech-database-exposed-medical-employment-records/ www.secnews.physaphae.fr/article.php?IdArticle=8655572 False Medical None 3.0000000000000000 Dark Reading - Informationweek Branch Following increasing attacks on healthcare organizations, the United Arab Emirates has refined its regulatory strategy for improving cybersecurity in healthcare.]]> 2025-03-13T06:00:00+00:00 https://www.darkreading.com/cyber-risk/abu-dhabi-guidelines-offer-blueprint-cybersecurity-health www.secnews.physaphae.fr/article.php?IdArticle=8655449 False Medical None 2.0000000000000000 AlienVault Lab Blog - AlienVault est un acteur de defense majeur dans les IOC Genai Red Teaming Guide par OWASP fournit une approche claire pour trouver des vulnérabilités AI et rendre Ai SAFER. Explorons ce que cela signifie. Qu'est-ce que Genai Red faisant équipe? Genai Red Teaming est un moyen de tester l'IA en simulant des attaques. Les experts essaient de casser les systèmes d'IA avant que les mauvais acteurs ne le puissent. Contrairement à la cybersécurité régulière, cette méthode examine comment l'IA réagit aux invites et si elle donne de fausses réponses, biaisées ou dangereuses. Il aide à garantir que l'IA reste en sécurité, éthique et alignée sur les valeurs commerciales. Pourquoi une équipe rouge AI est-elle importante? AI est désormais utilisé dans des domaines importants comme les soins de santé, les services bancaires et la sécurité. Si l'IA fait des erreurs, cela peut causer de vrais problèmes. Voici quelques risques clés: Injection rapide: injecter l'IA pour enfreindre ses propres règles. Biais et toxicité: l'IA peut produire un contenu injuste ou offensant. Fuite des données: l'IA pourrait révéler des informations privées. Hallucinations: l'IA peut donner avec confiance en toute confiance. Attaques de la chaîne d'approvisionnement: les systèmes d'IA peuvent être piratés grâce à leur processus de développement. Les quatre domaines clés de l'équipe rouge de l'IA Le guide OWASP suggère de se concentrer sur quatre domaines principaux: Évaluation du modèle: vérifier si l'IA a des faiblesses comme le biais ou les réponses incorrectes. Test de mise en œuvre: s'assurer que les filtres et les contrôles de sécurité fonctionnent correctement. Évaluation du système: examiner les API, le stockage des données et l'infrastructure globale pour les faiblesses. Test d'exécution: voir comment l'IA se comporte dans des situations et des interactions en temps réel. étapes du processus d'équipe rouge Un plan d'équipe RED Strong AI suit ces étapes: Définissez l'objectif: décidez ce qui a besoin de tests et quelles applications d'IA sont les plus importantes. Construire l'équipe: rassembler des ingénieurs d'IA, des experts en cybersécurité et des spécialistes de l'éthique. Modélisation des menaces: prédire comment les pirates pourraient attaquer l'IA et planifier des tests autour de ces menaces. Testez l'ensemble du système: Regardez chaque partie du système d'IA, à partir de ses données de formation à la façon dont les gens l'utilisent. Utiliser des outils de sécurité AI: les outils automatisés peuvent aider à trouver des problèmes de sécurité plus rapidement. Signaler les résultats: notez toutes les faiblesses trouvées et suggérez des moyens de les réparer. Surveiller l'IA au fil du temps: l'IA est toujours en évolution, donc les tests doivent se poursuivre régulièrement. L'avenir de la sécurité de l'IA Alors que l'IA continue de croître, l'équipe rouge sera plus importante que jamais. Un processus d'équipe MATURE AI RED combine différentes méthodes de ]]> 2025-03-13T06:00:00+00:00 https://levelblue.com/blogs/security-essentials/red-teaming-for-generative-ai-a-practical-approach-to-ai-security www.secnews.physaphae.fr/article.php?IdArticle=8655447 False Tool,Vulnerability,Prediction,Medical None 2.0000000000000000 InformationSecurityBuzzNews - Site de News Securite Kansas-based Sunflower Medical Group disclosed to authorities on 7th March that they had suffered a data breach compromising the personal and confidential information of 220,968 individuals.  In a statement on their website entitled \'Notice of a Data Security Incident,\' Sunflower provided details about the attack. They identified how it was on January 7, 2025, when they [...]]]> 2025-03-13T05:06:14+00:00 https://informationsecuritybuzz.com/kansas-sunflower-medical-data-breach/ www.secnews.physaphae.fr/article.php?IdArticle=8655438 False Data Breach,Medical None 3.0000000000000000 Smashing Security - Podcast Cyber What happens when a healthcare giant\'s legal threats ignite a Streisand Effect wildfire… while a ransomware gang appears to ditch the dark web for postage stamps? Find out about this, and more, in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Warning: This podcast may contain nuts,...]]> 2025-03-13T00:00:00+00:00 https://www.smashingsecurity.com/408-a-gag-order-backfires-and-a-snail-mail-ransom-demand/ www.secnews.physaphae.fr/article.php?IdArticle=8655405 False Ransomware,Medical None 2.0000000000000000 Recorded Future - FLux Recorded Future An advisory from the FBI, Cybersecurity and Infrastructure Security Agency (CISA) and the Multi-State Information Sharing and Analysis Center (MS-ISAC) on Wednesday said the group and its affiliates have attacked organizations in the medical, education, legal, insurance, technology and manufacturing industries.]]> 2025-03-12T20:05:31+00:00 https://therecord.media/medusa-ransomware-targeting-critical-infrastructure-orgs www.secnews.physaphae.fr/article.php?IdArticle=8655370 False Ransomware,Medical None 2.0000000000000000 IndustrialCyber - cyber risk firms for industrial Following last month\'s research on a new campaign by the Chinese threat actor Silver Fox, which exploited Philips... ]]> 2025-03-12T13:07:40+00:00 https://industrialcyber.co/medical/forescout-widens-research-on-silver-fox-hackers-reveals-malware-clusters-targeting-healthcare-through-dicom-hl7-exploits/ www.secnews.physaphae.fr/article.php?IdArticle=8655279 False Malware,Threat,Medical None 3.0000000000000000 IndustrialCyber - cyber risk firms for industrial Microsoft published a new white paper that shares insights gained over the past year, focusing on the current... ]]> 2025-03-11T09:39:03+00:00 https://industrialcyber.co/medical/microsoft-highlights-cybersecurity-crisis-in-rural-hospitals-urges-enhanced-measures-to-bolster-healthcare-resilience/ www.secnews.physaphae.fr/article.php?IdArticle=8654972 False Medical None 3.0000000000000000 Recorded Future - FLux Recorded Future Sunflower Medical Group said it initially discovered the breach on January 7 and hired a cybersecurity firm to investigate before it was discovered the hackers had been inside their systems since mid-December.]]> 2025-03-10T21:19:33+00:00 https://therecord.media/kansas-healthcare-provider-data-breach www.secnews.physaphae.fr/article.php?IdArticle=8654927 False Medical None 3.0000000000000000 Cyble - CyberSecurity Firm 2025-03-10T09:02:21+00:00 https://cyble.com/blog/ics-vulnerability-cctv-rtos-and-genome-systems/ www.secnews.physaphae.fr/article.php?IdArticle=8654832 False Tool,Vulnerability,Threat,Patching,Industrial,Medical,Commercial None 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine Symantec found that Medusa has listed almost 400 victims on its data leaks site since early 2023, demanding ransom payments as high as $15m]]> 2025-03-07T09:15:00+00:00 https://www.infosecurity-magazine.com/news/medusa-claims-victims-2025/ www.secnews.physaphae.fr/article.php?IdArticle=8654491 False Ransomware,Medical None 2.0000000000000000 AlienVault Lab Blog - AlienVault est un acteur de defense majeur dans les IOC Incible Response & Numéro & Numéro & Numéro / Nibre Forensics. Les grandes sociétés technologiques ont publié des mises à jour de sécurité concernant 284 vulnérabilités. Les faits clés comprennent: Microsoft a corrigé 67 vulnérabilités, dont quatre défauts critiques et deux bogues activement exploités sous Windows, corrigé le 11 février 2025. Apple a fixé 16 vulnérabilités, dont deux défauts critiques activement exploités dans iOS et iPados, corrigé le 27 janvier et le 10 février 2025. Adobe a abordé 45 vulnérabilités, dont 23 défauts critiques dans des produits comme InDesign et Commerce, corrigé le 11 février 2025. Google a résolu 68 à 69 vulnérabilités dans Android et Chrome, y compris deux défauts critiques et un bogue activement exploité dans Android, corrigé le 3 février pour Android et le 15 janvier et le 5 février 2025, pour Chrome. Cisco a corrigé 17 vulnérabilités, dont deux défauts critiques dans son moteur de services d'identité, mis à jour du 5 au 6 février 2025. SAP a fixé 19 vulnérabilités, dont six défauts de haute sévérité dans Business Intelligence and Enterprise Software, corrigé le 11 février 2025. Palo Alto Networks a résolu 10 vulnérabilités, dont quatre défauts de haute sévérité et deux bogues activement exploités dans Pan-OS, corrigé le 12 février 2025. CISA a ajouté 12 vulnérabilités à son catalogue de vulnérabilités exploité connu, tous activement exploités, affectant les produits Microsoft, Apple, Google et Palo Alto. Au cours du dernier mois, le groupe de ransomwares CLOP a réclamé 347 victimes, ciblant des industries comme la vente au détail, la logistique, la finance et les soins de santé. CloP a exploité des vulnérabilités dans les produits de transfert de fichiers de Cleo, Harmony, VLTrader et Lexicom, en particulier CVE-2024-50623 (non corrigé, permettant une exécution de code à distance) et CVE-2024-55956 (largement corrigé, permettant une exécution de code à distance), un impact sur 4200 organisations globalement, avec 63 à 79% des expositions aux États-Unis. Du 28 janvier au 27 février 2025, le groupe de ransomware CloP a réclamé 347 victimes, ciblant des industries comme la vente au détail, la logistique, la finance et les soins de santé. Clop, détecté pour la première fois en février 2019, fonctionne comme un modèle de ransomware en tant que service (RAAS), géré par le groupe FancyCat, lié à des acteurs motivés financièrement comme FIN11 et TA505. Il a gagné en notoriété par le biais d'attaques de haut niveau en utilisant une extorsion double et triple, crypter des fichiers (pa]]> 2025-03-05T07:00:00+00:00 https://levelblue.com/blogs/security-essentials/february-2025-cybersecurity-consulting-updates-and-ransomware-activity www.secnews.physaphae.fr/article.php?IdArticle=8653700 False Ransomware,Tool,Vulnerability,Threat,Patching,Mobile,Prediction,Medical,Technical None 3.0000000000000000 The State of Security - Magazine Américain Abu Dhabi is boosting its healthcare system with the introduction of the Abu Dhabi Healthcare Information and Cyber Security Standard (ADHICS). This initiative, driven by the Department of Health-Abu Dhabi (DoH)-has been put in place to protect sensitive healthcare data, improve cybersecurity resilience, and keep healthcare services running smoothly. At a time when cyber threats are skyrocketing in frequency and sophistication, this new standard is a giant step toward protecting healthcare entities and citizens in the emirate. The Key Features of the ADHICS ADHICS is a comprehensive framework...]]> 2025-03-05T02:33:49+00:00 https://www.tripwire.com/state-of-security/understanding-abu-dhabi-healthcare-information-and-cyber-security-standard www.secnews.physaphae.fr/article.php?IdArticle=8653737 False Medical None 3.0000000000000000 Cyble - CyberSecurity Firm Overview U.S. ransomware incidents in February have surged well beyond January\'s totals despite the significantly shorter month. According to Cyble data, ransomware attacks started in 2025, up 150% from the year-ago period, likely driven by the perception among ransomware groups that U.S. organizations are more likely to pay ransom. Canada, too, continues to experience elevated ransomware attacks, while other global regions have remained largely stable (chart below). That trend has continued through the month of February. According to Cyble data, the U.S. was hit by 372 ransomware attacks on February 27, well beyond the 304 attacks it saw for all of January 2025. Globally, ransomware attacks increased from 518 in January to 599 for the first 27 days of February, so the U.S. share of global ransomware attacks has also increased, from 58.7% to 62.1%. February ransomware attacks by country (Cyble) We\'ll look at what\'s behind the increase in ransomware attacks (hint: a big name returned in a big way), as well as other developments in the ransomware threat landscape this month. New Ransomware Groups Emerge Cyble documented the rise of three new ran]]> 2025-02-28T09:19:29+00:00 https://cyble.com/blog/u-s-ransomware-attacks-surged-again-in-february/ www.secnews.physaphae.fr/article.php?IdArticle=8651909 False Ransomware,Vulnerability,Threat,Patching,Legislation,Prediction,Medical None 3.0000000000000000 Cyble - CyberSecurity Firm Overview The weekly ICS vulnerabilities Intelligence Report to clients highlights the latest vulnerability landscape for ICS systems, derived from alerts by the Cybersecurity and Infrastructure Security Agency (CISA). This report covers vulnerabilities identified between February 19, 2025, and February 25, 2025, shedding light on the ongoing cybersecurity challenges faced by critical industries that rely on ICS technologies. During this period, CISA issued seven security advisories addressing vulnerabilities impacting multiple ICS products and vendors. These advisories for these ICS vulnerabilities cover vulnerabilities found in products from ABB, Siemens, Rockwell Automation, Rapid Response Monitoring, Elseta, Medixant, and others. ABB was the most affected vendor, reporting five critical vulnerabilities across its FLXEON Controllers, ASPECT-Enterprise, NEXUS, and MATRIX Series products. Publicly available proof-of-concept (PoC) exploits for the reported vulnerabilities have escalated the risk of active exploitation, making it essential for organizations to quickly address these security flaws through patching and mitigation measures. ICS Vulnerabilities by Vendor and Product Figure 1: Vulnerability Severity Category Chart The ICS vulnerabilities identified during this reporting period span a wide range of critical infrastructure systems. For instance, ABB reported multiple flaws in its FLXEON Controllers, ASPECT-Enterprise, NEXUS, and MATRIX Series products. These vulnerabilities inc]]> 2025-02-27T11:52:37+00:00 https://cyble.com/blog/new-cisa-report-rising-ics-cybersecurity-risks/ www.secnews.physaphae.fr/article.php?IdArticle=8651581 False Tool,Vulnerability,Patching,Industrial,Medical None 4.0000000000000000 Recorded Future - FLux Recorded Future In an update, Australian fertility services company Genea said hackers had published stolen data. A ransomware group reportedly claimed responsibility for the attack.]]> 2025-02-26T20:17:54+00:00 https://therecord.media/genea-australia-confirms-hackers-accessed-patient-data www.secnews.physaphae.fr/article.php?IdArticle=8651359 False Ransomware,Medical None 3.0000000000000000 IndustrialCyber - cyber risk firms for industrial New research from Forescout Technologies\' Vedere Labs has recognized that the healthcare sector continues to be a prime... ]]> 2025-02-26T10:34:12+00:00 https://industrialcyber.co/medical/forescout-details-silver-fox-campaign-targeting-healthcare-with-backdoors-keyloggers-crypto-miners/ www.secnews.physaphae.fr/article.php?IdArticle=8651156 False Medical None 3.0000000000000000 Bleeping Computer - Magazine Américain ​The Termite ransomware gang has claimed responsibility for stealing sensitive healthcare data in a recent breach of Genea, one of Australia\'s largest fertility services providers. [...]]]> 2025-02-26T08:31:05+00:00 https://www.bleepingcomputer.com/news/security/australian-ivf-giant-genea-breached-by-termite-ransomware-gang/ www.secnews.physaphae.fr/article.php?IdArticle=8651298 False Ransomware,Medical None 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine Forescout observed the recently identified Chinese hacking group using medical imaging software applications to deliver malware]]> 2025-02-25T13:40:00+00:00 https://www.infosecurity-magazine.com/news/chinese-silver-fox-backdoors/ www.secnews.physaphae.fr/article.php?IdArticle=8650874 False Malware,Medical None 3.0000000000000000 HackRead - Chercher Cyber Chinese Silver Fox APT exploits trojanized medical imaging software to spread ValleyRAT malware, posing a serious threat to…]]> 2025-02-25T13:12:23+00:00 https://hackread.com/silver-fox-apt-valleyrat-trojanized-medical-imaging-software/ www.secnews.physaphae.fr/article.php?IdArticle=8650858 False Malware,Threat,Medical None 3.0000000000000000 ProofPoint - Cyber Firms 2025-02-25T02:00:04+00:00 https://www.proofpoint.com/us/blog/email-and-cloud-threats/capital-one-phishing-email-campaign www.secnews.physaphae.fr/article.php?IdArticle=8651011 False Malware,Tool,Threat,Prediction,Medical,Cloud,Commercial ChatGPT 3.0000000000000000 Mandiant - Blog Sécu de Mandiant Présentation Beginning in August 2024, Mandiant observed a notable increase in phishing attacks targeting the education industry, specifically U.S.-based universities. A separate investigation conducted by the Google\'s Workspace Trust and Safety team identified a long-term campaign spanning from at least October 2022, with a noticeable pattern of shared filenames, targeting thousands of educational institution users per month. These attacks exploit trust within academic institutions to deceive students, faculty, and staff, and have been timed to coincide with key dates in the academic calendar. The beginning of the school year, with its influx of new and returning students combined with a barrage of administrative tasks, as well as financial aid deadlines, can create opportunities for attackers to carry out phishing attacks. In these investigations, three distinct campaigns have emerged, attempting to take advantage of these factors.  In one campaign, attackers leveraged phishing campaigns utilizing compromised educational institutions to host Google Forms. At this time, Mandiant has observed at least 15 universities targeted in these phishing campaigns. In this case, the malicious forms were reported and subsequently removed. As such, at this time none of the phishing forms identified are currently active. Another campaign involved scraping university login pages and re-hosting them on the attacker-controlled infrastructure. Both campaigns exhibited tactics to obfuscate malicious activity while increasing their perceived legitimacy, ultimately to perform payment redirection attacks. These phishing methods employ various tactics to trick victims into revealing login credentials and financial information, including requests for school portal login verification, financial aid disbursement, refund verification, account deactivation, and urgent responses to campus medical inquiries. Google takes steps to protect users from misuse of its products, and create an overall positive experience. However, awareness and education play a big role in staying secure online. To better protect yourself and others, be sure to report abuse.   Case Study 1: Google Forms Phishing Campaign The first observed campaign involved a two-pronged phishing campaign. Attackers distributed phishing emails that contained a link to a malicious Google Form. These emails and their respective forms were designed to mimic legitimate university communications, but requested sensitive information, including login credentials and financial details. ]]> 2025-02-24T14:00:00+00:00 https://cloud.google.com/blog/topics/threat-intelligence/phishing-targeting-higher-education/ www.secnews.physaphae.fr/article.php?IdArticle=8650541 False Spam,Malware,Tool,Vulnerability,Threat,Studies,Legislation,Mobile,Medical None 3.0000000000000000 Sygnia - CyberSecurity Firm Découvrez comment MDR protège les organisations de soins de santé contre les attaques de ransomwares avec une détection avancée des menaces, une réponse rapide et une sécurité des données améliorée.

---

>Discover how MDR protects healthcare organizations from ransomware attacks with advanced threat detection, rapid response, and enhanced data security. ]]> 2025-02-24T10:21:40+00:00 https://www.sygnia.co/blog/how-mdr-protects-healthcare-from-ransomware/ www.secnews.physaphae.fr/article.php?IdArticle=8650450 False Ransomware,Threat,Medical None 2.0000000000000000 IndustrialCyber - cyber risk firms for industrial Orange Cyberdefense a identifié un cluster de menaces sophistiqué, surnommé Green Nailao, ciblant les organisations européennes, avec un accent particulier sur ...

---

>Orange CyberDefense identified a sophisticated threat cluster, dubbed Green Nailao, targeting European organizations, with a particular focus on... ]]> 2025-02-21T18:29:45+00:00 https://industrialcyber.co/threats-attacks/green-nailao-cyber-threat-targets-european-healthcare-with-advanced-tactics-undocumented-ransomware/ www.secnews.physaphae.fr/article.php?IdArticle=8649676 False Ransomware,Threat,Medical None 3.0000000000000000 Recorded Future - FLux Recorded Future A previously unknown hacking group has been spotted targeting European healthcare organizations using spyware linked to Chinese state-backed hackers and a new ransomware strain, researchers said.]]> 2025-02-21T01:12:05+00:00 https://therecord.media/china-linked-hackers-target-european-health-orgs www.secnews.physaphae.fr/article.php?IdArticle=8649420 False Ransomware,Medical None 2.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) A previously unknown threat activity cluster targeted European organizations, particularly those in the healthcare sector, to deploy PlugX and its successor, ShadowPad, with the intrusions ultimately leading to deployment of a ransomware called NailaoLocker in some cases. The campaign, codenamed Green Nailao by Orange Cyberdefense CERT, involved the exploitation of a new-patched security flaw]]> 2025-02-20T16:51:00+00:00 https://thehackernews.com/2025/02/chinese-linked-attackers-exploit-check.html www.secnews.physaphae.fr/article.php?IdArticle=8649214 False Ransomware,Threat,Medical None 3.0000000000000000 HackRead - Chercher Cyber A Dallas, Texas-based clinical research firm had its database exposed, containing sensitive personal healthcare records of over 1.6…]]> 2025-02-20T15:30:01+00:00 https://hackread.com/clinical-research-firm-expose-us-medical-survey-records/ www.secnews.physaphae.fr/article.php?IdArticle=8649279 False Medical None 3.0000000000000000 Recorded Future - FLux Recorded Future The Department of Government Efficiency (DOGE) may already have access to sensitive tax and medical data stored at the IRS and Social Security Administration (SSA), which jointly retain disability diagnoses, child adoption information, exceptionally detailed financial data and individuals\' immigration status, experts say.]]> 2025-02-20T15:18:26+00:00 https://therecord.media/doge-access-to-social-security-irs-data-poses-risks www.secnews.physaphae.fr/article.php?IdArticle=8649278 False Medical None 3.0000000000000000 HackRead - Chercher Cyber FBI and CISA warn of Ghost ransomware, a China-based cyber threat targeting businesses, schools, and healthcare worldwide by exploiting software vulnerabilities.]]> 2025-02-20T12:04:56+00:00 https://hackread.com/fbi-cisa-ghost-ransomware-threat-to-firms-worldwide/ www.secnews.physaphae.fr/article.php?IdArticle=8649212 False Ransomware,Vulnerability,Threat,Medical None 3.0000000000000000