The cybersecurity agency said there is evidence that malicious hackers were able to reverse engineer an update fixing two of the vulnerabilities within 48 hours to create an exploit for unpatched systems.

A judge has dismissed a breach lawsuit against Northeast Radiology and its vendor Alliance Healthcare Services, as the patients did not provide evidence of concrete harm, as required by a June 2021 Supreme Court ruling.

Sixty-five percent of IT help desk teams across the U.S. have reported experiencing excessive stress and burnout, while 94% noted that skills shortfall, as well as hiring and retention concerns during the past year have adversely affected their duties, according to TechRepublic.

The New York Assembly has unanimously approved legislation that would strengthen the cybersecurity defenses of its energy supply amid increasingly prevalent cyberattacks against power grids across the U.S., Government Technology reports.

The Cybersecurity and Infrastructure Security Agency has temporarily omitted the Windows Local Security Authority Spoofing flaw, tracked as CVE-2022-26925, from its Known Exploited Vulnerability Catalog following a problematic fix issued by Microsoft, reports ZDNet.

BleepingComputer reports that nearly 3% of 2.8 million pages included in the 100,000 top ranking websites worldwide have been found to leak information entered in site forms including usernames, email addresses, passwords, and personal identifiers to third-party trackers prior to submission.

Malware could be loaded into the Bluetooth chips of iPhones and could be executed even if the devices are turned off through a new attack surface discovered by researchers at the Technical University of Darmstadt's Secure Mobile Networking Lab, according to The Hacker News.