Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools
Matched: health
A campaign targeting Cambodia is deploying Spark RAT, an open-source remote access trojan, using lure themes including government notices, public health materials, and real estate content. The attack abuses a vulnerable OPSWAT driver to disable security tools, broadening its potential victim pool across individuals and organizations in the region.
AccuKnox Launches AgentZ to Help Enterprises Build, Run, and Govern AI Agents at Scale
Matched: health
AccuKnox has launched AgentZ, a platform for building, running, and governing AI agents across enterprise teams. It consolidates agents, execution environments, tools, workflows, permissions, and governance into one system. Key features include model-agnostic LLM support, sandboxed isolated execution, audit logs, multi-team access controls, and flexible SaaS, on-prem, or air-gapped deployment. A free hosted plan and open-source repository are available.
Nutex Health Data Breach – Hackers Gained Access to Network and Exfiltrated Data
Matched: health, medical
Nutex Health has disclosed a data breach after an unknown third party accessed and exfiltrated data from its network. The Houston-based healthcare company filed an SEC Form 8-K on August 24, 2026, confirming the intrusion. The full scope remains unclear, but potentially affected data includes patient records, employee information, financial data, and intellectual property. No material operational impact has been identified so far, though the investigation is ongoing.
FBI Shuts Down China-Linked Hacking Platforms Used to Target NASA and U.S. Networks
Matched: health
The DOJ and FBI seized domains tied to two China-linked hacking platforms, QScan and QTRouter, connected to PRC state-sponsored group QTFY, operating through Nanjing Xinjiuwei Network Technology. The platforms infected IoT devices and routed malicious traffic through proxy networks to conceal attack origins. Victims included NASA, the Federal Reserve, DOJ, and the U.S. Senate. Seized domains rendered both platforms inoperable.
Anthropic staff told to work from home due to risk of possible security strikes
Matched: health
Anthropic told San Francisco employees to work from home after reports that security guards employed by contractor Allied Universal might strike. The union representing the workers, SEIU, said no strike vote had been called and denied threatening action on those dates. An underlying labor dispute over wages and benefits is ongoing. Anthropic's precautionary response comes amid broader rises in AI security spending and as the company reportedly eyes a $2 trillion IPO valuation.
Mirage2FA Phishing Kit Bypasses MFA to Hijack Microsoft 365 Sessions, Targeting 3,500+ Organizations
Matched: health
A phishing-as-a-service toolkit called Mirage2FA, linked to the group LinX Coders, has potentially compromised 4,532 Microsoft 365 accounts across 3,518 organizations in 94 countries, with 63.7% of victims in the US. The kit uses HTML, XHTML, and SVG attachments to deploy adversary-in-the-middle proxies that capture authenticated session cookies, bypassing MFA without dropping malware. Over half of 9,332 recorded compromise events involved cookie theft, making simple password resets insufficient for remediation.
Microsoft Teams Outage Largely Mitigated After Users Lost Access to Multiple Features
Matched: health
Microsoft Teams suffered an outage on August 26, 2026, primarily affecting Asia-Pacific users who could not join or create meetings, with some unable to share screens. Microsoft attributed the disruption to maintenance activity with unintended consequences. By 7:26 a.m. IST, the company reported the issue largely mitigated and said engineers would monitor for 15–30 minutes to prevent recurrence. One-to-one calls remained functional during the incident.
ToxNetV2 Linux Botnet Uses NVIDIA AI to Generate Shell and Remote SSH Attack Actions
Matched: health
ToxNetV2 is a Linux botnet targeting AArch64 systems that integrates NVIDIA's NIM AI service into its controller to suggest attack commands. The controller feeds system and botnet data to the AI model, parsing structured responses into a queue of proposed actions — including shell commands, SSH access, and file operations — that human operators must approve before execution. The botnet uses a peer-to-peer structure and includes scanning, self-propagation, and 17 network-attack modules. Researchers at JOESecurity noted the malware embeds a jailbreak prompt to reduce AI refusals.
Fake Microsoft Security Scan Tells You to Remove Antivirus—Then Scammers Ask for Remote Access
Matched: health
Scammers are running fake Microsoft-branded security scan websites that display fabricated system warnings and artificially low security scores to frighten visitors. The sites instruct users to uninstall their antivirus software, then collect personal and banking details through a form before redirecting victims to await a callback. During that call, operators request remote access to complete a fake refund, giving criminals direct control of the device. Malwarebytes identified 11 related sites sharing one server.
Microsoft August 2026 Update Breaks When Generating PDF/XPS Content
Matched: health
Microsoft's August 2026 .NET Framework cumulative updates are causing printing failures and PDF/XPS generation errors in WPF applications. The bug triggers a System.IO.FileFormatException when using ClearType fonts like Calibri, Cambria, Constantia, and Corbel, affecting Windows 10, 11, and Server 2012–2025. The issue stems from stricter font validation in the TrueType subsetter introduced alongside fixes for six security vulnerabilities. A temporary workaround exists but disables the security protections the update introduced.