Quest Diagnostics Investigates Unauthorized Access to Lab Results Platform
Quest Diagnostics has suspended its Quanum Lab Services Manager after discovering unauthorized access involving patient health or identifying information. The company says core operations remain available while investigators...
Splunk Patches 24 Flaws, Including Four Critical Enterprise and SOAR Bugs
Splunk has issued a broad security release correcting 24 vulnerabilities across Enterprise, SOAR, and Secure Gateway. Four flaws are rated critical, while several others create command-execution, authorization-bypass, or...
Critical Cisco Expressway Cluster Flaw Opens Path to Root RCE
Cisco has patched a CVSS 9.8 vulnerability that could let a remote attacker execute operating-system commands as root on clustered Expressway systems. There is no workaround, making an...
New Extortion Gang ScarlettGroup Puts Countdown Timers on Alleged Corporate Breaches
Researchers at Foresiet have identified a previously unseen extortion operation, dubbed ScarlettGroup, that lists alleged corporate victims on a dark web site complete with countdown timers pressuring them...
Anthropic’s Claude Security Moves From One-Off Scans to Always-On Vulnerability Monitoring
Anthropic has updated Claude Security so it continuously rescans connected code repositories as they change, rather than waiting for someone to kick off a scan, and now automatically...
eMudhra Abandons Global SSL/TLS Certificate Business After Weak-Key Disaster
Indian digital trust provider eMudhra is walking away from the global SSL/TLS certificate market entirely, weeks after researchers showed that eight of its intermediate CA certificates were signed...
Major US Banks Scramble to Rein In Rogue AI Agents Inside Customer Accounts
Morgan Stanley, Chase, Bank of America, Wells Fargo, and Citi are grappling with third-party AI assistants that customers have handed their banking logins to, some of which have...
Unpatched Linux KSMBD Flaws Exposed Before Fixes Were Ready
Technical details for several unresolved Linux-related vulnerabilities were posted publicly before fixes were broadly available. Two CVSS 9.0 KSMBD flaws could enable remote code execution, although exposure depends...