Filtered by category: Cybersecurity News × Clear
Cybercriminals Are Selling Corporate Executives’ Social Security Numbers for Just 25 Cents
Matched: health
Rapid7 has tracked 476 compromised SSN records tied to 395 corporate executives on dark web marketplaces since early 2026, with records selling for as little as 25 cents. C-suite executives account for 44.6% of affected profiles. Three platforms — Xilo, Bankomat, and PeopleFinder — represent 81.5% of leaks, sourcing data from large breaches, infostealers, and phishing. Unlike passwords or cards, SSNs cannot be changed, making them permanently exploitable for fraud and impersonation schemes.
AccuKnox Launches AgentZ to Help Enterprises Build, Run, and Govern AI Agents at Scale
Matched: health
AccuKnox has launched AgentZ, a platform for building, running, and governing AI agents across enterprise teams. It consolidates agents, execution environments, tools, workflows, permissions, and governance into one system. Key features include model-agnostic LLM support, sandboxed isolated execution, audit logs, multi-team access controls, and flexible SaaS, on-prem, or air-gapped deployment. A free hosted plan and open-source repository are available.
Nutex Health Data Breach – Hackers Gained Access to Network and Exfiltrated Data
Matched: health, medical
Nutex Health has disclosed a data breach after an unknown third party accessed and exfiltrated data from its network. The Houston-based healthcare company filed an SEC Form 8-K on August 24, 2026, confirming the intrusion. The full scope remains unclear, but potentially affected data includes patient records, employee information, financial data, and intellectual property. No material operational impact has been identified so far, though the investigation is ongoing.
FBI Shuts Down China-Linked Hacking Platforms Used to Target NASA and U.S. Networks
Matched: health
The DOJ and FBI seized domains tied to two China-linked hacking platforms, QScan and QTRouter, connected to PRC state-sponsored group QTFY, operating through Nanjing Xinjiuwei Network Technology. The platforms infected IoT devices and routed malicious traffic through proxy networks to conceal attack origins. Victims included NASA, the Federal Reserve, DOJ, and the U.S. Senate. Seized domains rendered both platforms inoperable.
Mirage2FA Phishing Kit Bypasses MFA to Hijack Microsoft 365 Sessions, Targeting 3,500+ Organizations
Matched: health
A phishing-as-a-service toolkit called Mirage2FA, linked to the group LinX Coders, has potentially compromised 4,532 Microsoft 365 accounts across 3,518 organizations in 94 countries, with 63.7% of victims in the US. The kit uses HTML, XHTML, and SVG attachments to deploy adversary-in-the-middle proxies that capture authenticated session cookies, bypassing MFA without dropping malware. Over half of 9,332 recorded compromise events involved cookie theft, making simple password resets insufficient for remediation.
Microsoft Teams Outage Largely Mitigated After Users Lost Access to Multiple Features
Matched: health
Microsoft Teams suffered an outage on August 26, 2026, primarily affecting Asia-Pacific users who could not join or create meetings, with some unable to share screens. Microsoft attributed the disruption to maintenance activity with unintended consequences. By 7:26 a.m. IST, the company reported the issue largely mitigated and said engineers would monitor for 15–30 minutes to prevent recurrence. One-to-one calls remained functional during the incident.
ToxNetV2 Linux Botnet Uses NVIDIA AI to Generate Shell and Remote SSH Attack Actions
Matched: health
ToxNetV2 is a Linux botnet targeting AArch64 systems that integrates NVIDIA's NIM AI service into its controller to suggest attack commands. The controller feeds system and botnet data to the AI model, parsing structured responses into a queue of proposed actions — including shell commands, SSH access, and file operations — that human operators must approve before execution. The botnet uses a peer-to-peer structure and includes scanning, self-propagation, and 17 network-attack modules. Researchers at JOESecurity noted the malware embeds a jailbreak prompt to reduce AI refusals.
Fake Microsoft Security Scan Tells You to Remove Antivirus—Then Scammers Ask for Remote Access
Matched: health
Scammers are running fake Microsoft-branded security scan websites that display fabricated system warnings and artificially low security scores to frighten visitors. The sites instruct users to uninstall their antivirus software, then collect personal and banking details through a form before redirecting victims to await a callback. During that call, operators request remote access to complete a fake refund, giving criminals direct control of the device. Malwarebytes identified 11 related sites sharing one server.
Microsoft August 2026 Update Breaks When Generating PDF/XPS Content
Matched: health
Microsoft's August 2026 .NET Framework cumulative updates are causing printing failures and PDF/XPS generation errors in WPF applications. The bug triggers a System.IO.FileFormatException when using ClearType fonts like Calibri, Cambria, Constantia, and Corbel, affecting Windows 10, 11, and Server 2012–2025. The issue stems from stricter font validation in the TrueType subsetter introduced alongside fixes for six security vulnerabilities. A temporary workaround exists but disables the security protections the update introduced.
Microsoft August 2026 Windows Updates Trigger Issues on Devices Using RGB Lighting Features
Matched: health
Microsoft is investigating a Windows 11 issue where August 2026 security update KB5121003 causes games to freeze, crash, or trigger PC restarts on devices with RGB lighting hardware. The problem involves the inpoutx64 driver used by RGB peripherals and components. Affected games include ARC Raiders, MARVEL Tōkon: Fighting Souls, and THE FINALS. As a workaround, Microsoft advises disabling the driver via Registry Editor. Windows Server is unaffected.