Meridiano
A ransomware attack on the University of Hawaii Cancer Center's Epidemiology Division compromised data for nearly 1.2 million individuals. The stolen information includes Social Security numbers, driver's license numbers, and health data from several research studies, primarily historical files from the 1990s and early 2000s. The university paid the attackers for a decryption tool and to secure the destruction of the stolen data. The incident was isolated to research systems and did not impact clinical operations, patient care, or student records.
Articles infosec
Showing articles 46 - 60 of 160 total (matching filters).
-
infosec 4 -
infosec 3Coordinated Israeli and American strikes hit a military compound in Tehran, killing senior Iranian figures including Supreme Leader Ali al-Khamenei. The Iranian government responded with a near-total internet blackout, a tactic it routinely employs during crises to control information and prevent external coordination. This severely hinders journalists and activists, who risk arrest for using circumvention tools like Starlink terminals or encrypted apps to document events. The article covers the military strikes, the government's internet shutdown policy, and the challenges faced by those reporting from within Iran under tightened espionage laws.
-
infosec 5Microsoft has identified phishing campaigns targeting government and public-sector organizations that exploit a legitimate OAuth redirection feature to bypass standard defenses. Attackers craft deceptive OAuth links that redirect victims to malicious sites, leading to malware downloads disguised as ZIP archives, which ultimately deploy PowerShell scripts and establish command-and-control connections. The phishing emails use convincing lures like e-signature requests and are distributed via mass-sending tools. The main topics covered are the phishing technique exploiting OAuth, the malware delivery and execution chain, and recommended security mitigations for organizations.
-
infosec 5Google has released security updates addressing 129 Android vulnerabilities, including an actively exploited zero-day flaw (CVE-2026-21385) in a Qualcomm graphics component. This high-severity vulnerability allows local attackers to trigger memory corruption and affects 235 Qualcomm chipsets. The updates also patch 10 critical vulnerabilities in system components that could enable remote code execution without user interaction. While Google Pixel devices receive updates immediately, other manufacturers may delay patches as they adapt them for specific hardware.
-
infosec 5Google disclosed a high-severity security flaw (CVE-2026-21385) in a Qualcomm graphics component for Android that is already being exploited in limited, targeted attacks. The March 2026 Android security update patches this and 128 other vulnerabilities, including a critical remote code execution bug. The main topics covered are the actively exploited vulnerability, the broader set of patches in the update, and the inclusion of the flaw in a U.S. government catalog mandating remediation.
-
infosec 5The SloppyLemming threat actor targeted government and critical infrastructure in Pakistan and Bangladesh from January 2025 to January 2026 using two attack chains. One delivered the BurrowShell backdoor via phishing emails with PDF lures, while the other used macro-enabled Excel documents to deploy a new Rust-based keylogger. The group showed evolved tactics, including a significant increase in its use of Cloudflare Workers infrastructure. The targeting aligns with regional strategic intelligence collection priorities.
-
infosec 5A newly identified open-source AI security testing platform called CyberStrikeAI was used by the same threat actor behind a campaign that breached hundreds of Fortinet FortiGate firewalls. The platform integrates numerous security tools with AI agents, enabling automated attacks and lowering the barrier for complex network exploitation. Researchers warn such AI-native orchestration engines could accelerate automated targeting of exposed edge devices. The developer of CyberStrikeAI has links to other AI-assisted security tools and has interacted with organizations previously linked to Chinese government–affiliated cyber operations.
-
infosec 6A critical vulnerability in the popular AI agent tool OpenClaw has been patched. The flaw allowed malicious websites to silently hijack a developer's AI agent and gain full control of their device by exploiting a trust assumption in local connections. This incident highlights the expanding security risks from rapidly adopted AI tools, as OpenClaw has faced a growing list of vulnerabilities and malicious extensions in its ecosystem. The main topics covered are the specific technical vulnerability, the rapid adoption and risks of the OpenClaw AI agent, and the broader security challenges in the AI tool ecosystem.
-
infosec 3The article describes a persistent conflict between application developers and security teams, centered on the clash between development speed and security risk management. This tension is exacerbated by AI-driven development acceleration, which creates massive firewall rule request backlogs that take weeks to process, leaving developers idle. The shift to cloud computing transferred control from security to developers, intensifying the challenge as traditional, IP-based firewall management struggles to keep pace with dynamic cloud environments. While some improvement is noted through a shift toward shared responsibility, the core conflict between rapid deployment needs and thorough security reviews remains.
-
infosec 5An international law enforcement operation called Project Compass has led to the arrest of 30 alleged members of the cybercriminal collective "The Com" and the identification of nearly 180 of its members. The operation, led by Europol and involving 28 countries, targets the group's activities, which include cybercrime, violent extremism, and the exploitation and sextortion of minors. The Com is described as a decentralized network that recruits young people online and operates through various sub-groups.
-
infosec 5A sophisticated phishing campaign uses a fake Google security page to trick users into installing a malicious Progressive Web App (PWA). This PWA steals one-time passcodes, cryptocurrency wallet addresses, and clipboard data, while also acting as a network proxy for the attacker. The campaign includes a companion Android app that requests extensive permissions to steal sensitive information and capture keystrokes. The main topics covered are the phishing attack method, the malicious PWA's capabilities, and the associated Android malware.
-
infosec 7Shipping through the Strait of Hormuz has nearly halted due to military strikes and a severe spike in GPS and AIS jamming attacks since the start of the U.S.-Israeli conflict with Iran. Over 1,100 ships have experienced disruptions, with many showing false locations inland at sites like airports and a nuclear power plant. Maritime officials warn of a "critical" risk, as the electronic interference creates dangerous navigation hazards and has already damaged several tankers. The main topics covered are the disruption of a key global oil shipping route, the escalation of electronic warfare targeting navigation systems, and the expanding regional conflict's impact on maritime safety.
-
infosec 5A now-patched high-severity vulnerability (CVE-2026-0628) in Google Chrome allowed malicious extensions to hijack the Gemini Live AI panel, leading to privilege escalation. This flaw, dubbed "Glic Jack," could have let attackers access a victim's camera, microphone, local files, and take screenshots. The incident highlights the new security risks introduced by integrating powerful AI agents with privileged access directly into web browsers, as these capabilities can be subverted. The vulnerability was rooted in insufficient policy enforcement within the WebView tag used for the Gemini panel and was fixed by Google in January 2026.
-
infosec 3Google is developing a new HTTPS certificate system based on Merkle Tree Certificates (MTCs) to secure the web against future quantum computing threats. This approach aims to minimize authentication data size, maintaining internet performance while adopting stronger post-quantum cryptography. Google plans a phased rollout of this system, with the final phase targeting the third quarter of 2027. The main topics covered are post-quantum security, the new MTC certificate technology, and Google's implementation timeline.
-
infosec 2Oil prices surged due to U.S. and Israeli attacks on Iran and escalating regional instability, particularly around the crucial Strait of Hormuz shipping route. The main topics covered are the immediate price increase, the strategic risk to global oil transit through the strait, and attacks on regional energy infrastructure. Analysts warn that further disruptions, such as a closure of the strait or damage to major facilities, could drive prices over $100 a barrel. The market's reaction is tempered by prior risk pricing, but uncertainty remains high due to the conflict's unfolding nature.