DEV Community: BeyondMachines

Integrated Pain Associates Data Breach Exposes Patient Social Security Numbers and Medical Records

BeyondMachines — Sun, 03 May 2026 09:01:28 +0000

Summary

Integrated Pain Associates disclosed a data breach occurring in February 2026 that exposed sensitive patient information, including Social Security numbers and medical records.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Zcash Foundation Releases Zebra 4.4.0 to Patch Consensus and DoS Flaws

BeyondMachines — Sun, 03 May 2026 08:01:28 +0000

Summary

Zcash Foundation released Zebra 4.4.0 to address critical consensus-level vulnerabilities and denial-of-service flaws that could lead to chain forks and permanent node halts.

Take Action:

If you operate a Zebra node, upgrade to version 4.4.0 ASAP, as there are no workarounds for the consensus-level flaws that could push your node onto an invalid chain. After upgrading, verify that your RPC cookie file has 0600 permissions to block unauthorized local access.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

DermCare Management Data Breach Exposes Sensitive Patient Records

BeyondMachines — Sat, 02 May 2026 20:01:29 +0000

Summary

DermCare Management, Inc. suffered a data breach in February 2025 that exposed the sensitive medical and financial information of thousands of patients across multiple states.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Trellix Confirms Unauthorized Access to Source Code Repository

BeyondMachines — Sat, 02 May 2026 19:01:29 +0000

Summary

Cybersecurity firm Trellix confirmed that unauthorized actors accessed a portion of its source code repository. The company reports no evidence of impact on its software distribution or product integrity.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Canonical and Ubuntu Infrastructure Hit by Sustained Cross-Border DDoS Attack

BeyondMachines — Sat, 02 May 2026 18:01:28 +0000

Summary

Canonical and Ubuntu infrastructure suffered a sustained, cross-border DDoS attack claimed by a pro-Iran group, resulting in a nearly two-day outage of web services and primary update servers.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Critical Authentication Bypass in cPanel and WHM Actively Exploited

BeyondMachines — Sat, 02 May 2026 08:01:29 +0000

Summary

A critical authentication bypass vulnerability (CVE-2026-41940, CVSS 9.8) in cPanel and WHM is being actively exploited to grant attackers full root access to web servers.

Take Action:

If you use cPanel or WHM on your servers, this is urgent, you are being hacked. Immediately run /scripts/upcp --force to apply the emergency patch, then verify the version with /usr/local/cpanel/cpanel -V. Until you've confirmed the update, block external access to ports 2083 and 2087. If you are using cPanel as a customer, reach to your hosting provider to confirm that they have updated cPanel.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Prime Properties Targeted by Emerging M3rx Ransomware Group

BeyondMachines — Fri, 01 May 2026 18:01:29 +0000

Summary

Sydney-based Prime Properties was listed on the M3rx ransomware leak site with claims of significant amount of stolen data.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Churchill Claims Services Ransomware Attack Exposes SSNs of 2,610 Individuals

BeyondMachines — Fri, 01 May 2026 08:01:29 +0000

Summary

Churchill Claims Services suffered a ransomware attack by the Securotrop group that exposed the Social Security numbers and personal data of 2,610 individuals. The breach remained undetected for six months after the threat actors claimed to have stolen 240 GB of internal records.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Moldova National Health Insurance Company Suffers Massive Data Breach Affecting One-Third of Database

BeyondMachines — Thu, 30 Apr 2026 20:01:28 +0000

Summary

Moldova's National Health Insurance Company (CNAM) suffered a cyberattack that compromised approximately 30% of the national healthcare database, including personal and payment information. Authorities suspect the incident was a coordinated operation by Russian-linked actors aimed at data theft, not financial gain.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Sandhills Medical Foundation Discloses Ransomware Breach Affecting 170,000 Patients

BeyondMachines — Thu, 30 Apr 2026 15:01:30 +0000

Summary

Sandhills Medical Foundation disclosed a ransomware attack by the Inc Ransom group that compromised the personal and medical data of approximately 170,000 individuals. The breach resulted in the theft and subsequent leaking of Social Security numbers, financial records, and personal health information.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Celebrity Private Communications Exposed in Stalkerware Database Breach

BeyondMachines — Thu, 30 Apr 2026 14:01:30 +0000

Summary

A misconfigured database belonging to an individual using stalkerware exposed nearly 87,000 screenshots from a prominent celebrity's device, including private chats and sensitive documents. The breach highlights how spyware bypasses end-to-end encryption by capturing data directly from the device's screen.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Copy Fail: Linux Kernel Flaw Grants Root Access On All Major Distributions

BeyondMachines — Thu, 30 Apr 2026 11:01:29 +0000

Summary

A Linux kernel vulnerability called "Copy Fail" (CVE-2026-31431) allows unprivileged local users to gain root privileges with 100% reliability by corrupting the shared page cache. The flaw affects nearly all Linux distributions since 2017 and enables container escapes because the memory corruption does not modify files on disk.

Take Action:

If you run Linux servers, especially shared environments like Kubernetes clusters, CI/CD runners, or multi-tenant hosts, patch your kernel immediately to a version that includes the fix (mainline commit a664bf3d603d) for CVE-2026-31431. If you can't patch right away, disable the vulnerable module by running echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf followed by rmmod algif_aead, and for untrusted code environments block AF_ALG socket creation via seccomp as a long-term safeguard.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines