StealC Malware Returns as New Stadia RAT to Steal Passwords and Secretly Control Windows PCs
Matched: health
The creator of StealC malware has rebranded with a new Windows remote access trojan called Stadia, advertised in October 2026. It combines password theft with hidden desktop control, targeting browsers, crypto wallets, messaging apps, and VPNs. Code analysis confirmed shared components with StealC 3.5. Monthly subscriptions range from $300 to $900, with former StealC customers offered a free Pro trial following June's Operation Endgame infrastructure seizure.
Top 10 Best Email Encryption Services in 2026 [Ranked & Scored]
Matched: health
Virtru tops a 2026 ranking of email encryption services, praised for low recipient friction and sender controls like revocation and expiry. Microsoft Purview ranks second for M365-native automation, followed by Proofpoint for gateway-enforced policy encryption. Paubox earns fourth for portal-free HIPAA delivery. The rankings weight recipient experience heavily, noting that strong encryption fails when confused recipients bypass it. Buyers are advised to test with real external recipients and automate encryption triggers rather than relying on user action.
Quest Diagnostics Hacked – Attackers Accessed the System to Order Tests and View Results
Matched: health, medical
Quest Diagnostics disclosed a cyberattack involving unauthorized access to its Quanum Lab Services Manager system, used by healthcare clients to order tests and view results. Discovered October 21, 2026, the breach prompted suspension of the platform. Patient health information was involved, though the full scope remains under investigation. Core operations continued unaffected. Quest notified federal law enforcement and hired outside cybersecurity experts.
Top 10 Best Secure File Sharing Platforms in 2026 [Ranked & Scored]
Matched: health
Box tops a 2026 ranking of secure file sharing platforms, praised for combining consumer-style usability with enterprise governance via its Shield classification and access controls. Egnyte ranks second for hybrid deployment and built-in data intelligence, while Kiteworks places third for compliance-focused exchange. Microsoft and Google's bundled tools rank fourth and fifth, recommended as configurable baselines before purchasing dedicated solutions. Tresorit leads the zero-knowledge category. Dropbox, ShareFile, OpenText, and Fortra GoAnywhere round out the list.
GoDaddy Revoking 404,607 TLS Certificates Following Compliance Failures
Matched: health
GoDaddy is revoking 404,607 SSL/TLS certificates after discovering they didn't match its published certificate policies, affecting GoDaddy and Starfield certificate chains. A third party flagged mismatches in policy identifiers and documentation. GoDaddy missed the required five-day revocation deadline, creating a second compliance violation. Revocation completed October 21. Affected website owners should install replacement certificates promptly, as browsers may display security warnings until updated.
The AI Adoption Blind Spot: How Fake AI Tools Put Enterprises at Risk
Matched: health
Cybercriminals are exploiting enterprise AI adoption by distributing malicious apps disguised as ChatGPT, Claude, and Microsoft Copilot. ANY.RUN researchers identified 1,258 sandbox analyses linked to fake AI campaigns between April and October 2026, with the US ranking second in submissions. Attackers target developers, marketers, and general employees across industries, stealing credentials and deploying malware across Windows and macOS devices.
LiteLLM Compromised – Hackers Injected an Infostealer and RAT in the Latest 1.107.0 PyPI Release
Matched: health
LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, with all seven wheel files containing a credential stealer and remote access trojan that also spread to Docker images. The malware uses Python startup hooks to run automatically without LiteLLM being directly invoked, targeting SSH keys, cloud credentials, browser passwords, and AI tool tokens. Data is sent to an attacker-controlled domain mimicking LiteLLM infrastructure. PyPI removed the release, but stolen credentials remain at risk. Version 1.106.2 is considered safe.
Hackers Hijack 333 Tor Exit Nodes to Intercept SSH Logins and Steal Credentials
Matched: health
Hackers compromised 333 Tor exit nodes beginning October 2, redirecting SSH connections to interception servers to steal credentials using Ebury, an OpenSSH backdoor. The affected relays represented roughly 10% of Tor's exit nodes. Attackers redirected port 22 traffic while passing other traffic normally. Users who ignored host-key warnings and used password authentication exposed their credentials. A researcher discovered the campaign via SSH fingerprint testing and reported it to Tor's network health team, which flagged affected relays by October 4. All identified servers were shut down October 5.
Microsoft Unveils New OneDrive Command-Line Tool to Manage Sync Deployments
Matched: health
Microsoft has introduced a OneDrive Sync Client CLI tool called odsync, designed to help IT admins manage and monitor OneDrive sync across large deployments. Demonstrated at the OneDrive + Copilot event, it shows device health, account details, sync status, Folder Backup settings, and applied Group Policies. JSON output enables integration with scripts, Intune, and AI agents. The tool is not yet publicly available, with a private preview coming soon.
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
Matched: health
A Belarus-aligned hacker group called Partisan Zmiy spent nearly two years inside a Russian healthcare organization's network, concealing a backdoor called Vasilek within VMware Tools. Documented by Russian cybersecurity firm Solar, the group has been active since at least 2020 and has a history of targeting industrial and government entities in Russia.