Vali Cyber released ZeroLock 5, a major update designed to address critical hypervisor security vulnerabilities by implementing multi-factor authentication at the ESX and Linux command line level. The release targets two primary attack vectors: insider threats and compromised credentials on hypervisor hosts, reflecting a broader industry shift where ransomware operators and nation-state actors are increasingly targeting virtualization infrastructure rather than individual endpoints.
Read full article at Help Net Security ↗Some security researchers have observed an uptick in insider-assisted ransomware attacks, but malicious insiders pose other threats that cost companies millions.
A ransomware gang has claimed responsibility for a breach of Nutex Health, with hackers gaining access to patient, employee, provider, business, and financial information. The company has filed notification with the SEC regarding the incident, disclosing the scope of compromised data across multiple categories.
Berlin has refused to pay a ransom demand following a cyberattack discovered in mid-August that resulted in the theft of government data, according to Governing Mayor Kai Wegner. The city's decision to reject the extortion demand represents a firm stance against capitulating to cybercriminals despite the breach of sensitive municipal information.
McKesson, a major pharmaceutical and healthcare technology company, has warned of service degradation following a cyberattack and notified regulators of the incident. The company is still in early investigation stages regarding a cybersecurity compromise involving an unidentified third-party application. The ongoing impact to McKesson's services underscores the operational risks posed by vulnerabilities in third-party software within critical healthcare infrastructure.