The AI Adoption Blind Spot: How Fake AI Tools Put Enterprises at Risk
Matched: health
Cybercriminals are exploiting enterprise AI adoption by distributing malicious apps disguised as ChatGPT, Claude, and Microsoft Copilot. ANY.RUN researchers identified 1,258 sandbox analyses linked to fake AI campaigns between April and October 2026, with the US ranking second in submissions. Attackers target developers, marketers, and general employees across industries, stealing credentials and deploying malware across Windows and macOS devices.
LiteLLM Compromised – Hackers Injected an Infostealer and RAT in the Latest 1.107.0 PyPI Release
Matched: health
LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, with all seven wheel files containing a credential stealer and remote access trojan that also spread to Docker images. The malware uses Python startup hooks to run automatically without LiteLLM being directly invoked, targeting SSH keys, cloud credentials, browser passwords, and AI tool tokens. Data is sent to an attacker-controlled domain mimicking LiteLLM infrastructure. PyPI removed the release, but stolen credentials remain at risk. Version 1.106.2 is considered safe.
Hackers Hijack 333 Tor Exit Nodes to Intercept SSH Logins and Steal Credentials
Matched: health
Hackers compromised 333 Tor exit nodes beginning October 2, redirecting SSH connections to interception servers to steal credentials using Ebury, an OpenSSH backdoor. The affected relays represented roughly 10% of Tor's exit nodes. Attackers redirected port 22 traffic while passing other traffic normally. Users who ignored host-key warnings and used password authentication exposed their credentials. A researcher discovered the campaign via SSH fingerprint testing and reported it to Tor's network health team, which flagged affected relays by October 4. All identified servers were shut down October 5.
Microsoft Unveils New OneDrive Command-Line Tool to Manage Sync Deployments
Matched: health
Microsoft has introduced a OneDrive Sync Client CLI tool called odsync, designed to help IT admins manage and monitor OneDrive sync across large deployments. Demonstrated at the OneDrive + Copilot event, it shows device health, account details, sync status, Folder Backup settings, and applied Group Policies. JSON output enables integration with scripts, Intune, and AI agents. The tool is not yet publicly available, with a private preview coming soon.
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
Matched: health
A Belarus-aligned hacker group called Partisan Zmiy spent nearly two years inside a Russian healthcare organization's network, concealing a backdoor called Vasilek within VMware Tools. Documented by Russian cybersecurity firm Solar, the group has been active since at least 2020 and has a history of targeting industrial and government entities in Russia.
Now ChatGPT Chrome Extension Can See and Analyze the Content in Open Tabs
Matched: health
OpenAI's ChatGPT Chrome extension now reads content across open tabs and performs browser tasks like comparing products, filling forms, sending messages, and organizing tabs. Available on all plans, it works in Edge, Brave, and Opera too. Tasks can run in the background. Security concerns include access to signed-in accounts, sensitive data exposure, and prompt injection risks. Users should install only from official sources and limit signed-in access during use.
Google Cloud Outage Knocks UK Banks, Websites and Court Systems Offline
Matched: health
A Google Cloud outage struck its London data centre on October 20 after a power event in the europe-west2-b zone, disrupting UK banks, websites and court systems. Revolut, Halifax, HSBC and Lloyds reported service problems. Court video hearings were suspended across parts of England and Wales, and some NHS appointment bookings were briefly affected. Google said most services recovered by afternoon, with an incident report promised.
FBI Suspects Cybersecurity Executive Helped ShinyHunters Run Extortion Website
Matched: medical
The FBI suspects a US cybersecurity consulting executive helped hacking group ShinyHunters operate Shinywire, a website pressuring breached companies to pay ransoms. The site listed nearly 100 victim organizations and threatened data publication within seven days of non-response. Separately, Canadian executive Edward Dubrovsky, 54, was arrested October 8 in Pennsylvania on related extortion allegations. Investigators reportedly gained leads after Dutch police arrested a ShinyHunters suspect and accessed his Signal messages, which revealed contact with both executives. No charges have been filed against the unnamed firm executive. ShinyHunters is attributed with over $70 million in 2026 ransom payments.
.png)
Agentic AI’s first job in Australian healthcare is fixing the fragmented patient journey
Matched: health
Agentic AI is being explored in Australian general practice as a way to reduce administrative burdens and improve patient experiences by linking disconnected healthcare systems. Rather than replacing clinical tools, it would work across existing platforms to streamline tasks like referrals, follow-ups, and appointment management, freeing staff to focus on care.
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Matched: medical
U.S. federal investigators suspect executives at two ransomware negotiation firms had unusually close ties to the ShinyHunters hacking group, with one U.S.-based executive allegedly helping operate the group's victim extortion website. Canadian cybersecurity executive Edward Dubrovsky has been charged with extortion-related offenses. Investigators also identified connections to Daniel Tobok, linked to the alias "Ghostbyte," which appeared in communications from the Dharma ransomware group. ShinyHunters has extorted over $70 million this year.