Breach

Malicious actors could abuse a high-severity flaw in the widely-used Fastjson library to enable remote code execution, reports The Hacker News.

The ransomware attack and data compromise of the electronic health record and practice management vendor is now nearly the largest healthcare data breach reported so far this year, with at least 20 covered entities issuing notices from the December incident.

The Hacker News reports that threat actors could exploit a high-severity Zimbra email suite flaw to facilitate the theft of user passwords in cleartext.

New York-based cybersecurity threat detection and analysis firm Miburo is set to be acquired by Microsoft, according to SecurityWeek.

This week’s breach roundup includes multiple email account hacks and is led by a ransomware attack on Yuma Regional Medical Center, which enabled the theft of patient data.

Hello XD ransomware has been updated to include a new encryptor with algorithm modifications and custom packing to further evade detection, according to BleepingComputer

Proofpoint researchers found that threat actors have been leveraging various phishing attack techniques to facilitate cryptocurrency theft, ZDNet reports.

The Hacker News reports that the popular Carrier LenelS2 HID Mercury access control system has been discovered by Trellix researchers to be impacted by up to four critical zero-day flaws, which could be exploited to obtain complete system control.