🔴 IQVIA fined $7.8 million for failing to properly anonymize health data
Italy's Data Protection Authority (GPDP) has fined IQVIA €7 million ($7.8M) over poor data-processing practices that the agency says could have put roughly one million patients at risk of data exposure and de-anonymization.
IQVIA is a multinational company that provides healthcare data analysis, technology, and clinical research services. The company claims on its website that it operates in over 100 countries and handles 68 petabytes of data and 1.2 billion patient records.
Italian authorities investigated IQVIA's data-processing practices in April 2025, and last month decided that the company did not provide adequate health-data anonymization warranties, despite its claims.
Open-Source Utility Gives macOS 27 Users Control Over On-Device AI Footprint
A newly released open-source utility is giving Mac owners a way to disable a broad set of AI-powered features and recover disk capacity consumed by their associated local assets.
🔴 Chinese Hackers Impersonate US Officials for AI Cyber Espionage
Chinese hackers impersonated US policymakers in adversary-in-the-middle (AiTM) phishing campaigns aimed at stealing credentials from artificial intelligence (AI) experts working for US think tanks, universities, and legal organizations.
Researchers from Proofpoint discovered the campaign, which occurred in July, and attributed it to China-aligned threat actor TA419, according to a blog post published last week. The activity is believed to be part of a broader Chinese cyber espionage effort to gather intelligence on US AI policymaking and planning.
🔴 Proposed anti-Flock bills could spell trouble for license plate readers
Companies like Google and Microsoft are finding much bigger numbers of vulnerabilities in their own products as a result of AI. But the same technology is leading to public reporting programs becoming overwhelmed by the mass submission of speculative, duplicated, or hallucinated findings.
Now, Google’s announced it has temporarily stopped accepting submissions to its open source bug bounty program, OSS VRP.
🔴 Proposed anti-Flock bills could spell trouble for license plate readers
Automated license plate readers (ALPRs) are cameras that photograph passing vehicles, read their number plates, and typically log the time, location, and vehicle details. On their own, the images might be used to find a stolen car or locate a suspect.
But lately there have been a lot of concerns raised about the way they are used. The main worry is caused by what happens when many cameras feed data into a shared, searchable network: it can create a detailed record of where ordinary people travel.
🔴 Trump Creates "Super Intelligence Force": 120 Days to Tame AI
The White House has given the new panel 120 days to address the long-debated question of which AI- related risks should be managed by the market itself and which require government intervention. The commission will evaluate the threats, the technology's potential, and the role of federal authorities.
The group will be led by US Director of National Intelligence Jay Clayton. Donald Trump has dubbed the commission the " Super Intelligence Force," continuing his policy of renaming artificial intelligence "superintelligence." Clayton's deputies will be FTC Director Andrew Ferguson, Pentagon Research Director Emil Michael, and Office of Personnel Management Director Scott Kupor.
Automated Enumeration Campaign Compromises Personal Details Across Danish Society
Denmark is investigating a major security incident after unauthorized actors obtained personal information associated with approximately 8.8 million people from the country's Central Person Register (CPR).
🔴 South Korea probes bank breaches amid suspected AI-powered attacks
South Korea's Financial Services Commission (FSC) held an emergency meeting following a series of cyberattacks targeting financial institutions in the country.
During the meeting, officials confirmed a data breach at Shinhan Bank and said other cybersecurity incidents affected other South Korean banks, including Kookmin Bank.
Shinhan Bank and KB Kookmin Bank are large private South Korean commercial banks, each holding more than $400 billion in assets.
pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string tokens in a font /ToUnicode mapping, causing pypdf/_cmap.py parse_bfchar to decode and retain oversized values during operations such as text extraction and consume excessive memory. This is a second follow-up to earlier /ToUnicode resource-consumption fixes and is limited to the remaining token-length path. This issue is fixed in version 6.18.1.
🔴 Alleged dev of Ploutus ATM malware appears in US court after arrest
The U.S. Department of Justice has announced the arrest of the alleged developer of Ploutus malware, used to steal millions of dollars in ATM jackpotting attacks across the United States.
Also known as "Prometheus" and "The Engineer," 50-year-old Anibal Alexander Canelon Aguirre was the first cybercriminal added to the FBI's "Top 10 Most Wanted Fugitives" list in March 2026.
According to court documents, Canelon Aguirre and his accomplices deployed Ploutus malware and emptied bank and credit union automated teller machines (ATMs) in jackpotting attacks between February 2024 and December 2025.
🔴 250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms
Healthcare organizations Clover Health Investments and AngMar Management Services are notifying more than 250,000 people that their information was stolen in separate data breaches.
Jersey City, New Jersey-based Clover Health Investments was hacked in early July, after attackers used social engineering to compromise three non-managerial health plan employee accounts.
The incident resulted in the theft of personally identifiable information (PII) and protected health information (PHI), the company said in an SEC filing in July.
🔴 Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck.
The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) that can lead to a predictable key, which an attacker can then use to gain unauthorized access and seize control of affected systems.
"Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the same generator to unauthenticated clients during login," according to an advisory for the flaw.
🔴 GlassWorm Supply Chain Attack Hides Malware Inside VS Code Color Themes
A GlassWorm-linked software supply chain campaign has abused seemingly harmless Visual Studio Code color themes to distribute malicious loaders across the Visual Studio Marketplace and Open VSX Registry.
The activity demonstrates how extensions designed only to change editor colors can become high-impact initial-access vectors when they include unnecessary executable JavaScript.
Both extensions presented themselves as polished visual customizations, yet shipped executable code despite themes ordinarily requiring only declarative configuration files.
🔴 OpenAI loses ground on security as race to superintelligence accelerates
It emerged last week that David Robinson left OpenAI. At OpenAI, Robinson led the Safety Systems team, responsible for AI safety issues. This was another blow to the company's security posture, having recently fired three OpenAI employees for leaking confidential information to outside companies.
Robinson was responsible for ensuring transparency around security at OpenAI. Specifically, he participated in the development and publication of system cards, which provide information about the company's AI models. Previously, Robinson oversaw corporate policy planning.
A threat actor on an underground forum claims to be selling the full database of Lak Connect (lakconnect[.]com), a Kochi-based digital gateway and logistics platform for the Union Territory of Lakshadweep, covering passenger ship schedules, travel information and courier services.
The actor claims:
* Full database (claimed) * Recent breach, dated 03-10-2026 in the listing (claimed) * Asking price: $500, negotiable (claimed)
🔺 Ahead of the anniversary of Operation Al-Aqsa Flood, thousands of people marched in downtown Geneva in support of the Palestinian people, calling for an end to the Zionist regime's military aggression against Gaza.
Saif al-Din Khader, an alleged key member of ShinyHunters who reportedly uses the handle "Rey," was detained by Jordanian authorities earlier this week, according to Reuters.
Two sources told Reuters that Khader is cooperating with the FBI and other law enforcement agencies to help identify and locate other members of the group.
The detention comes amid an FBI investigation into a recent intrusion allegedly involving ShinyHunters, which has claimed to have stolen extensive data belonging to FBI employees.
