Cybersecurity Intelligence Hub

House subcommittee hearing tackles Medicare physician pay, rural cybersecurity: 6 takeaways

A House Committee on Energy and Commerce Subcommittee on Health hearing Sept. 15 examined more than a dozen bills aimed at reforming Medicare physician payment and strengthening healthcare cybersecurity. Much of the hearing centered on a shared concern raised by lawmakers and witnesses: that the Medicare physician payment system is contributing to independent practices closing […] The post <a href="https://www.

Read original at Becker's Hospital Review

Source: www.beckershospitalreview.com/cybersecurity/

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitation. The vulnerability in question is CVE-2026-89026 (CVSS v3. 1 score: 9.

Read original at The Hacker News

Source: thehackersnews.com

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky. The cybersecurity vendor said it has identified attacks mounted by NightEagle (aka APT-Q-95), a threat actor known to be active since at least 2023, that involve new techniques for persistence and lateral movement.

Read original at The Hacker News

Source: thehackersnews.com

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude

Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension. Once the extension was installed, it could access each product's built-in AI with a single click.

Read original at The Hacker News

Source: thehackersnews.com

Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories

Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and later spread Shai-Hulud across about 100 internal code repositories. Before the repository spread, the assistant recommended software that the attacker had poisoned, and the recommendation was accepted.

Read original at The Hacker News

Source: thehackersnews.com

Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix

Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level of access on a Mac, software company JFrog said this week. The attack needs code already running on the machine as a normal user, so it does not work over the network. JFrog says the fix is in Parallels Desktop 27, a version that Intel Macs cannot install.

Read original at The Hacker News

Source: thehackersnews.com

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Read original at CISA Advisories

Source: www.cisa.gov

CISA Adds One Known Exploited Vulnerability to Catalog

Read original at CISA Advisories

Source: www.cisa.gov

Export-Import Bank: Expanded Use of Delinquent Federal Debt Data Could Better Mitigate Credit Risk

What GAO Found The Export-Import Bank of the United States’ (EXIM) loan guarantee transactions are approved by EXIM’s Board of Directors, staff with individual delegated authority, or delegated authority lenders. The underwriting process for loan guarantee transactions approved by EXIM includes several steps, such as screening applications for completeness, reviewing for minimal eligibility requirements, and performing due diligence to assess transactions’ risks.

Read original at GAO IT Reports

Source: www.gao.gov

CISA KEV: CVE-2026-58704 — Google Pixel Improper Authorization Vulnerability

Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.

Read original at CISA KEV Catalog

Source: www.cisa.gov/known-exploited-vulnerabilities-catalog

CISA KEV: CVE-2026-76460 — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.

Read original at CISA KEV Catalog

Source: www.cisa.gov/known-exploited-vulnerabilities-catalog

CISA KEV: CVE-2026-87886 — Acronis Backup Incorrect Default Permissions Vulnerability

Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.

Read original at CISA KEV Catalog

Source: www.cisa.gov/known-exploited-vulnerabilities-catalog

Acronis warns of actively exploited flaw in its cPanel backup plugin

Acronis disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk that may be exploited in the wild. [...

Read original at BleepingComputer

Source: www.bleepingcomputer.com

Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites

Malicious versions of the Admin Menu Editor Pro plugin for WordPress have been distributed to more than 200 customers after a threat actor compromised the maintainer's website and pushed updates that created a hidden user account. [...

Read original at BleepingComputer

Source: www.bleepingcomputer.com

AHA comments on proposals regarding Medicare provider payment, cybersecurity during House subcommittee hearing

The House Energy and Commerce Subcommittee on Health held a hearing Sept. 15 to discuss more than a dozen legislative proposals regarding Medicare provider payment and healthcare cybersecurity. The AHA provided comments&nbsp;to the subcommittee on bills designed to improve long-term physician payments, including proposals to increase the budget neutrality threshold in the Medicare physician fee schedule and a bill to replace the Merit-based Incentive Payment System with the Data-driven Performance Payment System.

Read original at AHA Cybersecurity

Source: www.aha.org/topics/cybersecurity

CenterPoint Energy confirms customer data stolen in cyberattack

CenterPoint Energy disclosed a breach compromising some customers' personal information after an attacker leaked data allegedly stolen from the utility company. [...

Read original at BleepingComputer

Source: www.bleepingcomputer.com

HTM Workflow Tweaks to Secure Devices

From checking passwords to verifying software versions, routine maintenance gives HTM teams opportunities to strengthen medical device cyber-resilience. By Phil Englert, VP Medical Device Security, Health-ISAC Medical device cybersecurity is often discussed in terms of threats, vulnerabilities, and technical controls, but for healthcare technology management (HTM) professionals, the conversation is really about something far more […] The post <a href="https://health-isac.

Read original at Health-ISAC

Source: health-isac.org

BambooToken malware controls Windows and Linux systems via MQTT

A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with Windows and Linux systems. [...

Read original at BleepingComputer

Source: www.bleepingcomputer.com

Hackers target WordPress sites via third-party WooCommerce plugin

Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to upload a PHP backdoor. [...

Read original at BleepingComputer

Source: www.bleepingcomputer.com

AI Agent Identity and Delegated Authority

AI agent identity management demands continuous authorization monitoring, not just token validation, to detect drift and secure delegated authority. The post <a href="https://identitymanagementinstitute. org/ai-agent-identity-and-delegated-authority/">AI Agent Identity and Delegated Authority</a> appeared first on <a href="https://identitymanagementinstitute.

Read original at Identity Management Institute

Source: identitymanagementinstitute.org

'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink

The notorious Russian threat group is spreading an upgraded version of the botnet malware, which the FBI disrupted in 2022.

Read original at Dark Reading

Source: www.darkreading.com

Maximum Severity GitLab Flaw Puts Supply Chains at Risk

CVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition and Enterprise Edition instances.

Read original at Dark Reading

Source: www.darkreading.com

Anthropic CEO: Time to Shift From Improving to Controlling AI

Dario Amodei says it's time to slow the pace of frontier AI improvements so that security and risk prevention efforts can catch up. What does this mean for enterprises?

Read original at Dark Reading

Source: www.darkreading.com

Human Risk Management Maturity Model

The Human Risk Management Maturity Model is a strategic framework designed to help organizations evolve from basic security awareness to a proactive, data-driven discipline. It provides a roadmap for identifying and reducing cyber risk created by the decisions of both humans and AI agents in a blended workforce. The model evaluates organizational progress across three […] The post <a href="https://health-isac.

Read original at Health-ISAC

Source: health-isac.org

CISA Adds One Known Exploited Vulnerability to Catalog

Read original at CISA Advisories

Source: www.cisa.gov

CISA KEV: CVE-2026-76461 — Cisco Secure Email Gateway SQL Injection Vulnerability

Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.

Read original at CISA KEV Catalog

Source: www.cisa.gov/known-exploited-vulnerabilities-catalog

Anthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch Up

Dario Amodei warned that within six to 12 months AI could be capable of leading a swarm of agents that could take over the entire internet. The post <a href="https://www. securityweek.

Read original at SecurityWeek

Source: www.securityweek.com

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days

Multiple espionage-motivated threat actors have adopted BlueMoon in opportunistic, rushed deployments. The post <a href="https://www. securityweek.

Read original at SecurityWeek

Source: www.securityweek.com

Users in Houthi-Held Yemen Tried to Develop Advanced Weapons With AI, Anthropic Says

Anthropic said the users did not succeed in “fielding an operational device” but did carry out a failed test of a guided rocket. The post <a href="https://www. securityweek.

Read original at SecurityWeek

Source: www.securityweek.com

Threat Actor Generates 1M Personalized Fraud Emails in 3 Days

Cybercriminals behind malicious email campaigns no longer have to compromise volume for credibility, or vice versa, thanks to AI.

Read original at Dark Reading

Source: www.darkreading.com

CISA Calls for More Guidance, Less Spin, as Cyber Outages Escalate

A new joint government advisory signals a regulatory shift, pressing organizations to adopt more transparent breach notification and incident response protocols.

Read original at Dark Reading

Source: www.darkreading.com

Phishing Research Challenges Conventional Security Awareness Testing

Analysis of 2. 47 million simulated attacks shows why organizations should measure credential leaks and reporting, not just clicks. The post <a href="https://www.

Read original at SecurityWeek

Source: www.securityweek.com

GitLab Vulnerability Exploited One Day After Disclosure

The critical-severity path traversal flaw allows unauthenticated attackers to read arbitrary files from the GitLab server. The post <a href="https://www. securityweek.

Read original at SecurityWeek

Source: www.securityweek.com

Health-ISAC Hacking Healthcare 9-11-2026

This week, Health-ISAC®‘s Hacking Healthcare® the Federal Bureau of Investigation’s (FBI) newest cyber strategy. We provide a breakdown of what the strategy seeks to accomplish, how it seeks to accomplish it, and where the strategy may affect the health sector. As a reminder, this is the public version of the Hacking Healthcare blog.

Read original at Health-ISAC

Source: health-isac.org

CISA Adds One Known Exploited Vulnerability to Catalog

Read original at CISA Advisories

Source: www.cisa.gov

CISA Adds Three Known Exploited Vulnerabilities to Catalog

Read original at CISA Advisories

Source: www.cisa.gov

CISA KEV: CVE-2026-84869 — ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation.

Read original at CISA KEV Catalog

Source: www.cisa.gov/known-exploited-vulnerabilities-catalog

Nuclear Security Enterprise: Strategic Partnership Projects Can Support Mission, Operations, and Research

What GAO Found The National Nuclear Security Administration (NNSA)—a separately organized agency within the Department of Energy (DOE)—and its eight contractor-managed and -operated sites engage in Strategic Partnership Projects (SPP). These projects allow NNSA sites to perform work for other federal agencies and nonfederal entities and for those entities to benefit from the significant public investment in the specialized facilities and scientific and technical expertise of NNSA sites. DOE requires NNSA sites to recover the full cost of the SPP through reimbursement from partners.

Read original at GAO IT Reports

Source: www.gao.gov

Microsoft Plugs Nearly 1,000 Security Holes

Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that many organizations already are struggling to prioritize the more human-intensive endeavor of testing and deploying so many fixes each month.

Read original at Krebs on Security

Source: krebsonsecurity.com

Health-ISAC on Health Stealth Radio: Cross-Industry Collaboration

How collective defense, threat intelligence sharing, and cross-industry collaboration make a real impact on healthcare cyber resilience despite longstanding sector challenges. Healthcare’s network defenders understand the core mission of cybersecurity is patient safety and the longstanding challenges that make effective remediation incredibly difficult. The complexity and scope of healthcare infrastructure leave many with vulnerable blind […] The post <a href="https://health-isac.

Read original at Health-ISAC

Source: health-isac.org

Cybersecurity Intelligence Hub

You're in the inner circle

Join the intelligence inner circle

House subcommittee hearing tackles Medicare physician pay, rural cybersecurity: 6 takeaways

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude

Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories

Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog

Export-Import Bank: Expanded Use of Delinquent Federal Debt Data Could Better Mitigate Credit Risk

CISA KEV: CVE-2026-58704 — Google Pixel Improper Authorization Vulnerability

CISA KEV: CVE-2026-76460 — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

CISA KEV: CVE-2026-87886 — Acronis Backup Incorrect Default Permissions Vulnerability

Acronis warns of actively exploited flaw in its cPanel backup plugin

Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites

AHA comments on proposals regarding Medicare provider payment, cybersecurity during House subcommittee hearing

CenterPoint Energy confirms customer data stolen in cyberattack

HTM Workflow Tweaks to Secure Devices

BambooToken malware controls Windows and Linux systems via MQTT

Hackers target WordPress sites via third-party WooCommerce plugin

AI Agent Identity and Delegated Authority

'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink

Maximum Severity GitLab Flaw Puts Supply Chains at Risk

Anthropic CEO: Time to Shift From Improving to Controlling AI

Human Risk Management Maturity Model

CISA Adds One Known Exploited Vulnerability to Catalog

CISA KEV: CVE-2026-76461 — Cisco Secure Email Gateway SQL Injection Vulnerability

Anthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch Up

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days

Users in Houthi-Held Yemen Tried to Develop Advanced Weapons With AI, Anthropic Says

Threat Actor Generates 1M Personalized Fraud Emails in 3 Days

CISA Calls for More Guidance, Less Spin, as Cyber Outages Escalate

Phishing Research Challenges Conventional Security Awareness Testing

GitLab Vulnerability Exploited One Day After Disclosure

Health-ISAC Hacking Healthcare 9-11-2026

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA KEV: CVE-2026-84869 — ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

Nuclear Security Enterprise: Strategic Partnership Projects Can Support Mission, Operations, and Research

Microsoft Plugs Nearly 1,000 Security Holes

Health-ISAC on Health Stealth Radio: Cross-Industry Collaboration

Explore more from our community