fbpx

Krypteia Group

Atrium notifies patients of phishing attack

https://www.beckershospitalreview.com/cybersecurity/atrium-notifies-patients-of-phishing-attack-potentially-exposing-their-info.html Charlotte, N.C.-based Atrium Health notified patients that an April phishing attack on its home health service may have exposed their protected health information.  On April 8, Atrium said it learned that an unauthorized user gained access via a phishing tactic to an Atrium Health at Home employee’s email and messaging account Read more…

By Krypteia Group, ago

Flagstar reports data breach affecting 1.5 million clients

Hackers stole social security numbers in December, but the company determined individuals affected after six months Hackers stole the personal information of 1,547,169 clients of Michigan-based Flagstar Bank in December, according to a document sent by the financial institution to the Office of the Maine Attorney General. The cyberattack occurred on Dec. Read more…

By Krypteia Group, ago

Baptist Health System Announces Data Breach Affecting Patients of Two San Antonio-Area Hospitals

https://www.jdsupra.com/legalnews/baptist-health-system-announces-data-7151699/ Recently, Baptist Health System confirmed that the company experienced a data breach stemming from an incident in which an unauthorized party gained access to the company’s computer network after installing a line of malicious code on the System’s website. According to the Baptist Medical Center, the breach resulted in the Read more…

By Krypteia Group, ago

Oversight Leads to Data Breach at Choice Health Insurance

https://www.jdsupra.com/legalnews/oversight-leads-to-data-breach-at-3910791/ Recently, Choice Health Insurance reported a data breach after the company discovered that an unauthorized party was offering data obtained from the Choice Health systems for sale on a popular hackers’ website. According to Choice Health, the breach resulted in the full names, Social Security numbers, Medicare information and health Read more…

By Krypteia Group, ago

Microsoft Releases Workaround Guidance for MSDT “Follina” Vulnerability

https://www.cisa.gov/uscert/ncas/current-activity/2022/05/31/microsoft-releases-workaround-guidance-msdt-follina-vulnerability Microsoft has released workaround guidance to address a remote code execution (RCE) vulnerability—CVE-2022-30190, known as “Follina”—affecting the Microsoft Support Diagnostic Tool (MSDT) in Windows. A remote, unauthenticated attacker could exploit this vulnerability to take control of an affected system. Microsoft has reported active exploitation of this vulnerability in the Read more…

By Krypteia Group, ago

ICS Medical Advisory (ICSMA-22-151-01)

BD Pyxis https://www.cisa.gov/uscert/ics/advisories/icsma-22-151-01 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Becton, Dickinson and Company (BD) Equipment: Pyxis Vulnerability: Not Using Password Aging 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain access to electronic protected health information (ePHI) or other sensitive information. 3. TECHNICAL Read more…

By Krypteia Group, ago

ICS Medical Advisory (ICSMA-22-151-02)

BD Synapsys https://www.cisa.gov/uscert/ics/advisories/icsma-22-151-02 1. EXECUTIVE SUMMARY CVSS v3 5.7 ATTENTION: Low attack complexity Vendor: Becton, Dickinson and Company (BD) Equipment: Synapsys Vulnerability: Insufficient Session Expiration 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access, modify, or delete sensitive information. This includes electronic protected health information (ePHI), protected health information Read more…

By Krypteia Group, ago

Bulletin (SB22-150)

Vulnerability Summary for the Week of May 23, 2022 https://www.cisa.gov/uscert/ncas/bulletins/sb22-150 The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. NVD is sponsored by CISA. In some cases, the vulnerabilities in the bulletin Read more…

By Krypteia Group, ago

Chipmaker Broadcom Is Acquiring VMware For $61 Billion

https://www.forbes.com/sites/roberthart/2022/05/26/chipmaker-broadcom-is-acquiring-vmware-for-61-billion/?utm_campaign=forbes&utm_source=facebook&utm_medium=social&utm_term=Gordie&fbclid=IwAR3MTsVOxIK7gbPM73ywVW5hH6wLij8x0K8c0xaRiV3xPMM9vTyLxEMzyVQ&sh=48bf5670243f U.S. chipmaker Broadcom on Thursday announced a $61 billion deal to buy software firm VMware, marking one of the biggest tech deals of all time and a potentially massive windfall for computer billionaire Michael Dell, VMware’s largest shareholder. KEY FACTS Broadcom will buy VMware in a cash-and-stock deal, the company said. Read more…

By Krypteia Group, ago

CISA and DoD Release 5G Security Evaluation Process Investigation Study

https://www.cisa.gov/uscert/ncas/current-activity/2022/05/26/cisa-and-dod-release-5g-security-evaluation-process-investigation CISA and the Department of Defense (DoD) have released their 5G Security Evaluation Process Investigation Study for federal agencies. The new features, capabilities, and services offered by fifth-generation (5G) cellular network technology can transform mission and business operations; and federal agencies will eventually be applying different 5G usage scenarios: low-, mid-, Read more…

By Krypteia Group, ago