News
CISA Issues Guidance on Microsoft’s Enhanced Logging Features The Cybersecurity and Infrastructure Security Agency (CISA) has released new guidance for government and business users on leveraging expanded logging capabilities within Microsoft 365. These enhancements are designed to improve forensic and compliance investigations. Enhanced Logging Capabilities Microsoft has introduced advanced
Medusind, a prominent provider of revenue cycle management and practice management software based in Florida, has disclosed a significant data breach impacting 360,934 individuals. Detected and halted on December 23, 2023, during an unauthorized intrusion, this breach has only recently been communicated to affected parties.* A comprehensive investigation by
Recent cybersecurity incidents have emerged in various healthcare institutions, unveiling insider threats and unauthorized access. Eastern Idaho Public Health, Pacific Pulmonary Medical Group, and Ingham County Medical Care Facility have reported breaches, raising concerns about data security and privacy. Eastern Idaho Public Health Breach Eastern Idaho Public Health has notified
Teton Orthopaedics has recently informed over 13,000 individuals of a ransomware attack that was detected nine months ago. The disclosure highlights potential lapses in timely notification and public reporting following a cyber incident involving significant personal and medical data exfiltration. **Initial Discovery:** The breach was first identified on March
On January 11, 2025, the United States Department of Justice (DoJ) charged three Russian citizens, Roman Vitalyevich Ostapenko, Alexander Evgenievich Oleynik, and Anton Vyachlavovich Tarasov, with running illicit cryptocurrency mixing services, specifically Blender.io and Sinbad.io. Arrest and Charges Ostapenko and Oleynik were apprehended on December 1, 2024, through
On January 9, 2025, cybersecurity firms have rolled out crucial updates to address significant vulnerabilities in products by Palo Alto Networks, SonicWall, and Aviatrix. These updates are pivotal to safeguarding systems from potentially severe exploits. Palo Alto Networks’ Expedition Tool Vulnerabilities Palo Alto Networks has issued patches for its Expedition
On Monday, 1Password announced its acquisition of Trelica, a UK-based company specializing in SaaS access management tools. Although the financial terms remain undisclosed, this purchase represents the most significant acquisition by revenue in 1Password's 18-year history. Company Backgrounds 1Password is renowned for its password management services and the
Veracode, a leader in application security, has bolstered its portfolio by acquiring key technology components from Phylum, a rising startup specializing in software supply chain security. This acquisition includes Phylum’s advanced capabilities for analyzing, detecting, and mitigating malicious software packages, alongside integrating some of Phylum's expert personnel
The U.S. Treasury Department has announced sanctions against Beijing-based Integrity Technology Group, Inc. (Integrity Tech) for their involvement with the Flax Typhoon hacking group. The group, believed to be state-sponsored by China, used Integrity Tech's systems to orchestrate cyberattacks on U.S. and European networks for over