The 2026 Ponemon Healthcare Cybersecurity Report, commissioned by Proofpoint, finds that cyberattacks on healthcare organizations are rising, costing more and increasingly harming patient care. The survey covered 705 IT and security practitioners. 97% of organizations suffered at least one attack in the past 12 months, averaging 51 attack…
The Wiz Customer Incident Response Team (CIRT) reports a growing number of intrusions in which an AI agent system ran the entire operation: finding entry points, harvesting credentials, pivoting across platforms and debugging its own scripts in real time. In one investigated case, the agent compromised a large multi-cloud organization (GC…
CISA warns that threat actors are exploiting CVE-2026-104935, a zero-day authentication bypass by spoofing in Ivanti Connect Secure that allows remote, unauthenticated execution of arbitrary commands. The activity is being used for credential theft and data exfiltration. On Oct. 13, 2026, CISA added it to its Known Exploited Vulnerabiliti…
Unit 42 reports a campaign, tracked as CL-UNK-1211, that targeted government entities and state-affiliated infrastructure between October 2025 and April 2026. The cluster has not been attributed to a nation-state or to cybercrime. The attackers focused on Linux servers for reconnaissance, persistence and intelligence collection, including…