Sunflower Medical Group has notified 220,968 people of a December attack by Rhysida. According to their submission to the Maine Attorney General’s Office and their notification letter to those affected, the Kansas-based group of independent physicians detected the attack on January 7, 2025. Investigation revealed that it had occurred on December 15, 2024. The day…
For over a decade, application security teams have faced a brutal irony: the more advanced the detection tools became, the less useful their results proved to be. As alerts from static analysis tools, scanners, and CVE databases surged, the promise of better security grew more distant. In its place, a new reality took hold—one defined…
MORSECORP Inc. (MORSE), of Cambridge, Massachusetts, has agreed to pay $4.6 million to resolve allegations that MORSE violated the False Claims Act by failing to comply with cybersecurity requirements in its contracts with the Departments of the Army and Air Force. The settlement resolves allegations that MORSE submitted false or fraudulent claims for payment on contracts with…
Popular video-sharing social network TikTok has officially gone dark in the United States, 2025, as a federal ban on the app comes into effect on January 19, 2025. “We regret that a U.S. law banning TikTok will take effect on January 19 and force us to make our services temporarily unavailable,” the company said in…
The supply chain attack involving the GitHub Action “tj-actions/changed-files” started as a highly-targeted attack against one of Coinbase’s open-source projects, before evolving into something more widespread in scope. “The payload was focused on exploiting the public CI/CD flow of one of their open source projects – agentkit, probably with the purpose of leveraging it for…
There’s an update to a previously reported breach claimed by “Nullbulge.” Pirates and Princesses reports: A California resident has pleaded guilty to charges related to hacking a Disney employee’s personal computer, resulting in the theft of more than 1 terabyte of confidential data. Last year, it was reported that a hacker accessed Disney’s files and released…
Evan Bolin reports: Iowa County, Wisconsin is working with cybersecurity experts after suspicious activity was detected in the county computer network. County spokesperson Debbie Siegenthaler says the county detected the activity on April 28. At that point, the county took systems offline out of an abundance of caution. Siegenthaler says some government services and functions…
