Millions of Patients Affected in Double-Extortion Attack
Source: Data Breach Today
Hackers carried out a double-extortion ransomware attack on medical software company ESO Solutions, exposing personal details and healthcare information of 2.7 million U.S. patients and encrypting some of the company's systems.
Cyberattack Disrupts Operations of First American, Subsidiaries
Source: Security Week
The systems and operations of First American Financial Corporation and several of its subsidiaries appear to have been significantly disrupted by a cyberattack. First American provides title insurance and settlement services to the real estate and mortgage industries. It’s one of the largest title insurance companies in the United States. The company revealed on December 21 that it had taken certain systems offline as a result of a “cybersecurity incident”.
Stolen Booking.com Credentials Fuel Social Engineering Scams
Source: Data Breach Today
Hotels that use the popular online travel site Booking.com - without enabling two-factor authentication - and their customers are continuing to get hit by fraudsters, experts warn.
CISA Warns of FXC Router, QNAP NVR Vulnerabilities Exploited in the Wild
Source: Security Week
The US cybersecurity agency CISA on Thursday released industrial control system (ICS) advisories for vulnerabilities affecting Future X Communications (FXC) routers and QNAP network video recorder (NVR) devices, and warned organizations that they have been exploited in the wild.
Report Warns of 'Catastrophic' Medical Device Security Risks
Source: Data Breach Today
A majority of medical devices in the U.S. carry critical vulnerabilities that can result in "potential catastrophic impact to hospital operations and patient care," according to a new Government Accountability Office report.