Healthcare Cybersecurity News

Microsoft 365 Massive Outage – Fixes Fail as Restored Servers Keep Going Unresponsive

Matched: health

A Microsoft 365 outage exceeding 10 hours continues as restored servers repeatedly fail under user traffic load. Beginning November 12, 2026, the disruption spread from Exchange Online to Teams, SharePoint, Copilot, and Defender across all regions. Microsoft is rebuilding servers on previous configurations, limiting traffic, and rerouting load while analyzing root cause. Over 120,000 Outlook reports peaked across 74 countries. No cyberattack is involved.

Massive Microsoft 365 Outage Impacts Exchange Online, Teams, SharePoint, Copilot, and Defender XDR Users

Matched: health

A major Microsoft 365 outage beginning November 12, 2026 disrupted Exchange Online, Teams, SharePoint, Copilot, and Defender XDR globally. Microsoft attributed the failure to servers unexpectedly going offline, overloading remaining infrastructure. Failed automated health checks complicated recovery, with restored servers becoming unresponsive under traffic load. Engineers rerouted traffic and explored configuration rollbacks. Full restoration had not been confirmed. Administrators should monitor incidents MO1550821 and EX1550543 in the Microsoft 365 admin center.

Microsoft Teams Outage Hits Users in North America

Matched: health

Microsoft is investigating a Teams outage affecting North American users, tracked as TM1550488 in the Microsoft 365 admin center. Automated recovery measures are underway, with telemetry showing reduced impact, though full restoration is unconfirmed. No root cause, timeline, or affected features have been specified. Administrators are advised to monitor the admin center and document user-reported issues for comparison against official updates.

nDiligence Releases Four-Year Study Identifying a Critical Supply-Chain Vulnerability Across 50 Platform Types

Matched: medical

nDiligence has released a four-year study identifying a supply-chain vulnerability affecting all 50 software and device types examined, with 46 rated critical or high risk. The flaw targets runtime client-side rendering, where attackers compromising any supplier in an app's chain can alter what users see and do after all security checks have passed. Affected platforms include browsers, medical devices, and industrial controls. Full research is freely available at atg.nDiligence.com.

Hackers Abuse Cruciferra Malware-as-a-Service to Conceal Infostealers and Remote Access Trojans

Matched: health

Cybercriminals are renting a crypter tool called Cruciferra to hide infostealers and RATs from security software. Priced at $450–$2,000 monthly, it uses 90+ encryption routines, DLL side-loading, sandbox detection, and BYOVD driver attacks to evade defenses. Active since October 2025 and linked to the older KGB cryptor, it has prompted over 700,000 blocked compromise attempts since January 2026, primarily targeting Türkiye, Greece, and Spain. Payloads include AsyncRAT, XWorm, and Agent Tesla.

Top 10 Best HIPAA Compliance Software in 2026 [Ranked & Scored]

Matched: health

Vanta tops a 2026 ranking of HIPAA compliance software, followed by Drata and Compliancy Group. The list splits tools into two buyer categories: vendor-proof automation platforms for digital-health companies seeking certification, and covered-entity coaching tools for healthcare providers. Paubox and Censinet appear as specialist options for encrypted email and healthcare vendor risk management. Reviewers weighted lane-core capability, risk-assessment depth, and BAA tracking in their scoring methodology.

Top 10 Best IT & Cyber Risk Management Tools in 2026 [Ranked & Scored]

Matched: health

A 2026 ranking scores ten IT and cyber risk management platforms on register workflow, control linkage, scoring range, and reporting. ServiceNow leads for wiring risk registers to live operations; Archer ranks second for deep methodology configurability; LogicGate third for no-code speed. MetricStream suits federated enterprises, Diligent excels at board reporting, and IBM OpenPages serves regulated industries with AI assistance. Riskonnect unifies insurable and cyber risk, Balbix provides exposure math, SAI360 covers operational compliance, and Vanta offers a compliance-fed starter register. The defining 2026 theme is register freshness—tracking what percentage of entries have a current owner, treatment, and review date.

Criminal IP Launches New TI Feed App on Splunkbase for Automated Threat Detection

Matched: health

AI SPERA has launched the Criminal IP TI Feed app for Splunk on Splunkbase. The app automatically correlates Criminal IP threat intelligence with firewall traffic logs to identify whether organizational assets communicated with malicious IPs and if sessions were completed. It runs correlation searches every 10 minutes, performs 30-day retrospective analysis, and offers seven dashboards plus Slack alerting to help SOC teams prioritize threats efficiently.

Top 10 Best Audit Management Software in 2026 [Ranked & Scored]

Matched: health

Cybersecurity News ranked the top 10 audit management software platforms for 2026, using criteria including fieldwork ergonomics, evidence automation, SOX depth, and reporting. Onspring leads for no-code configurability, followed by ServiceNow for findings routing and Caseware for audit-to-financial-reporting integration. TeamMate, Diligent, MetricStream, Hyperproof, Archer, Ideagen, and Netwrix round out the list by specialty. AI-assisted narrative drafting was noted as a genuine 2026 development, with mandatory reviewer sign-off emphasized.

Finite State Raises $27 Million to Help Device Makers Fight ‘Vulnpocalypse’ with AI-Powered Product Security

Matched: medical

Finite State, a Columbus-based product security firm, raised $27 million in Series C funding led by The O.H.I.O. Fund to expand its AI-driven platform that analyzes firmware and software in connected devices. The funding addresses a surge in AI-discovered vulnerabilities dubbed the "Vulnpocalypse" and growing global regulations requiring manufacturers to demonstrate built-in security before devices ship.