DEV Community: BeyondMachines

UCLA Health Reports Data Breach Affecting 6,050 Individuals

BeyondMachines — Wed, 30 Sep 2026 13:01:14 +0000

Summary

UCLA Health reported a data breach affecting 6,050 individuals after attackers gained access to electronic medical records.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Gallagher Transport International Reports Data Breach Following Ransomware Attack

BeyondMachines — Wed, 30 Sep 2026 12:01:14 +0000

Summary

Gallagher Transport International suffered a ransomware attack by the Sinobi group that compromised the personal and financial data of over 1,100 individuals.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Apple Patches Actively Exploited Zero-Day in iOS 26, iPadOS 26 and macOS

BeyondMachines — Wed, 30 Sep 2026 11:01:13 +0000

Summary

Apple patched a zero-click vulnerability (CVE-2026-86950) in iOS 26 and macOS 26 that allow remote code execution and data theft, and has been exploited

Take Action:

If you use an iPhone, iPad or Mac, update it right now to iOS/iPadOS 26.7.1, macOS Tahoe 26.7.1 or macOS Sequoia 15.8.1. Alterantively, where possible, move to iOS 27. Attackers are already using this flaw to take over devices and steal personal data. If you're a likely target, such as a journalist, activist or executive, consider turning on Lockdown Mode for extra protection.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Kiteworks Patches Critical Vulnerability Following Federal Threat Warning

BeyondMachines — Wed, 30 Sep 2026 10:01:13 +0000

Summary

Kiteworks initiated a global system shutdown after federal authorities warned of an imminent cyberattack, leading to the discovery and patching of a critical vulnerability in its Advanced Forms feature.

Take Action:

If you use Kiteworks, you can bring your systems back online after the advisory, but make sure they are updated to the latest release (9.5.1). If you run the Advanced Forms feature on your own servers, contact Kiteworks Support right away for the fix, and review access logs from the past few weeks for any unusual file downloads.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Japanese Tokyo Metro and Times Car Hit by Cluster of Cyber Attacks

BeyondMachines — Wed, 30 Sep 2026 09:01:14 +0000

Summary

Two Japanese transport operators suffered a series of cyber attacks, including a breach of loyalty systems of Tokyo Metro and a massive data breach at Times Car affecting 6.6 million accounts. The railway operations are secure due to effective network segmentation.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

WatchGuard Patches API Flaws in Wireless Access Points

BeyondMachines — Wed, 30 Sep 2026 08:01:13 +0000

Summary

WatchGuard Technologies patched three vulnerabilities in its wireless access points, including two critical flaws that allow unauthenticated attackers to execute commands and bypass access controls.

Take Action:

If you use WatchGuard wireless access points, make sure their management interfaces aren't reachable from the internet and can only be accessed from trusted admin networks. Update every access point to firmware 3.4.8 right away, and if a device was exposed, treat it as possibly compromised and factory reset it and rotate any credentials that were related to the device.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

WatchGuard Patches Critical Authentication Bypass and Command Injection Flaws in Access Points

BeyondMachines — Tue, 29 Sep 2026 14:01:13 +0000

Summary

WatchGuard patched three vulnerabilities in its Access Point firmware, including two critical flaws that can be exploited by attackers with network access to affected devices. The vulnerabilities can allow authentication bypass and arbitrary command execution.

Take Action:

Update affected WatchGuard Access Points to firmware version 3.4.8 or later. Until the update is applied, limit network access to affected access point services to trusted networks, as the two critical vulnerabilities can be exploited without authentication.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Modoc Medical Center Data Breach Exposes Patient Information Following WorldLeaks Claim

BeyondMachines — Tue, 29 Sep 2026 12:01:13 +0000

Summary

Modoc Medical Center disclosed a data breach after an unauthorized actor accessed its network and downloaded files containing personal and protected health information. The WorldLeaks extortion group claimed responsibility for the incident. The organization is offering affected individuals 12 or 24 months of credit monitoring and identity restoration services.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Vista Del Mar Child and Family Services Reports Data Breach Involving Personal and Health Information

BeyondMachines — Tue, 29 Sep 2026 11:01:14 +0000

Summary

Vista Del Mar Child and Family Services disclosed a data breach after an unauthorized actor accessed systems containing personal and protected health information. The organization took its network offline, engaged cybersecurity experts, and is reviewing affected files to identify and notify potentially impacted individuals.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Park Place Behavioral Healthcare Data Breach Exposes Personal, Health, and Financial Information

BeyondMachines — Tue, 29 Sep 2026 10:01:14 +0000

Summary

Park Place Behavioral Healthcare disclosed a data breach after an unauthorized party accessed its systems and copied files containing personal, health, and financial information. The organization reset account credentials and strengthened remote access controls. Park Place Behavioral Healthcare is offering complimentary credit monitoring and identity theft restoration services to affected individuals.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Millstone Medical Outsourcing Data Breach Exposes Health and Financial Information

BeyondMachines — Tue, 29 Sep 2026 09:01:15 +0000

Summary

Millstone Medical Outsourcing disclosed a data breach involving unauthorized access to sensitive personal, financial, and health information between December 15 and 19, 2025. The company is offering 24 months of complimentary credit monitoring and identity protection.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

State of (in)security - Week 39, 2026

BeyondMachines — Mon, 28 Sep 2026 17:01:13 +0000

Summary

In week 39 of 2026 (Sept. 21–28), security events declined week over week to 16 advisories and 23 incidents affecting about 13.2 million known individuals. The largest was a ransomware attack that halted trading on the Nepal Stock Exchange (8 million exposed). Third-party compromise and unauthorized access were the leading causes. Finance is the most-hit sector. Actively exploited zero-days in Check Point, Citrix, F5, SharePoint and WordPress.

Take Action:

Patch the actively exploited systems ASAP (Citrix NetScaler ADC and Gateway, Check Point gateways and management servers, VeloCloud Orchestrator, on-prem SharePoint, Zyxel GS1900 switches and WordPress). As usual, block internet access to their admin and management interfaces so only trusted internal IPs can reach them. Update Chrome and if you manage GitLab, reset your incoming email token and remove any "email to project" addresses you've posted publicly, because anyone who has that address can act as you.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines