Explore

Trendline Trendline
Orthanc DICOM Vulnerabilities Pose Risks of Crashes and Remote Code Execution

Orthanc DICOM Vulnerabilities Pose Risks of Crashes and Remote Code Execution

Orthanc DICOM Vulnerabilities Pose Risks of Crashes and Remote Code Execution
Rapid Read Rapid Read
Orthanc DICOM Server Vulnerabilities Expose Healthcare Systems to Crashes and Remote Code Execution

Orthanc DICOM Server Vulnerabilities Expose Healthcare Systems to Crashes and Remote Code Execution

Nine security vulnerabilities have been identified in the Orthanc Digital Imaging and Communications in Medicine (DICOM) server, which is widely used in healthcare and medical research for the automated analysis of medical images. These vulnerabilities, tracked from CVE-2026-5437 to CVE-2026-5445, include issues such as heap-based buffer overflows, out-of-bounds reads, and memory exhaustion flaws. These defects can lead to server crashes, data leaks, and potentially allow attackers to execute arbitrary code remotely. The vulnerabilities were discovered by researchers at Machine Spirits and have been detailed in advisories by the CERT Coordination Center (CERT/CC). Users of Orthanc versions 1.12.10 and earlier are advised to update to version 1.12.11, which addresses these security issues.
Trendline Trendline
Mercor Faces Challenges After Data Breach Exposes Sensitive Information

Mercor Faces Challenges After Data Breach Exposes Sensitive Information

Mercor Faces Challenges After Data Breach Exposes Sensitive Information
Trendline Trendline
MITRE Corporation Launches Framework to Combat Cyber Fraud

MITRE Corporation Launches Framework to Combat Cyber Fraud

MITRE Corporation Launches Framework to Combat Cyber Fraud
Rapid Read Rapid Read
Critical Marimo Vulnerability Exploited Shortly After Disclosure

Critical Marimo Vulnerability Exploited Shortly After Disclosure

A critical vulnerability in Marimo, an open-source reactive notebook for Python, was exploited within hours of its public disclosure. The flaw, identified as CVE-2026-39987, allows unauthenticated remote code execution due to a lack of authentication validation in the terminal WebSocket endpoint. Sysdig reported that an attacker quickly developed an exploit from the advisory description, leading to credential theft and system command execution. The vulnerability affects all Marimo releases up to version 0.20.4, with users advised to update to version 0.23.0 or newer.
Trendline Trendline
Apache ActiveMQ Classic Vulnerability Exposed After 13 Years, Posing Security Risks

Apache ActiveMQ Classic Vulnerability Exposed After 13 Years, Posing Security Risks

Apache ActiveMQ Classic Vulnerability Exposed After 13 Years, Posing Security Risks
Rapid Read Rapid Read
Cybersecurity Firm Defiant Warns of Critical Ninja Forms Vulnerability Affecting WordPress Sites

Cybersecurity Firm Defiant Warns of Critical Ninja Forms Vulnerability Affecting WordPress Sites

A critical vulnerability has been identified in the File Uploads addon for the Ninja Forms WordPress plugin, which could allow threat actors to take over vulnerable websites. The cybersecurity firm Defiant has reported that this addon is used by approximately 50,000 websites, and there have been thousands of attempts to exploit the vulnerability. The flaw, tracked as CVE-2026-0740, is an unauthenticated arbitrary file upload issue due to missing file type validation. This vulnerability allows attackers to upload malicious PHP code to a website's server, potentially leading to remote code execution. The issue was discovered and reported via the Wordfence bug bounty program, with a security researcher receiving a reward for identifying the flaw. Users are advised to upgrade to the latest version of the addon to mitigate the risk.
Rapid Read Rapid Read
Eurail Data Breach Affects 300,000 Customers, Exposing Personal Information

Eurail Data Breach Affects 300,000 Customers, Exposing Personal Information

Eurail, a European travel company, has notified over 300,000 customers of a data breach that occurred in December 2025. Hackers accessed the company's network, stealing personal information such as names and passport numbers. The breach was initially disclosed in January, with further details emerging about the extent of the data theft. The stolen data was reportedly offered on the dark web, raising concerns about identity theft and privacy violations. Eurail has assured customers that no financial information was compromised and is taking steps to notify affected individuals.
Rapid Read Rapid Read
AI-Driven Voice Scams Pose Growing Threat to U.S. Healthcare Systems

AI-Driven Voice Scams Pose Growing Threat to U.S. Healthcare Systems

Healthcare organizations in the U.S. are increasingly targeted by sophisticated AI-driven voice scams, which are creating significant legal and financial liabilities. These scams, often involving deepfake technology, impersonate healthcare providers to deceive patients and staff. A notable incident occurred in 2025 when a ransomware attack on Kettering Health led to a systemwide IT outage, allowing scammers to impersonate staff and solicit fraudulent payments. The American Hospital Association has warned of an escalating wave of such scams, which utilize multi-modal communication strategies to appear legitimate. Survey data indicates that 77% of Americans are concerned about AI being used to impersonate their identity, highlighting the growing threat these scams pose to the healthcare sector.
Trendline Trendline
Former Meta Engineer Investigated for Extracting 30,000 Private Facebook Photos

Former Meta Engineer Investigated for Extracting 30,000 Private Facebook Photos

Former Meta Engineer Investigated for Extracting 30,000 Private Facebook Photos
Rapid Read Rapid Read
LAPD Records Leak: Sensitive Data Exposed in City Attorney's Office Hack

LAPD Records Leak: Sensitive Data Exposed in City Attorney's Office Hack

A significant data breach involving the Los Angeles city attorney's office has resulted in the leak of sensitive Los Angeles Police Department (LAPD) records. The breach, which occurred last month, exposed 337,000 files, including officer personnel files and Internal Affairs investigation documents. These records, typically sealed from public view under state law, were accessed by hackers who infiltrated a digital storage system used by the city attorney's office. The breach has raised concerns about the security of sensitive police data and has prompted criticism from the Los Angeles Police Protective League, the union representing LAPD officers. The union has expressed dissatisfaction with the city attorney's office for not promptly informing them about the breach. The LAPD has stated that the breach did not involve its systems or networks, and the city attorney's office is working to secure the affected tool and investigate the extent of the data accessed.
Trendline Trendline
AI-Generated Passwords Pose Security Risks Due to Predictability

AI-Generated Passwords Pose Security Risks Due to Predictability

AI-Generated Passwords Pose Security Risks Due to Predictability