For providers

Five Ontario, Canada-based hospitals had their operations disrupted following a cyberattack against their shared service provider TransForm, which was co-founded by the impacted health providers for IT and supply chain management, reports BleepingComputer.

Reuters reports that major U.S. biotechnology and genetic testing firm 23andMe has begun notifying its customers regarding a breach involving its "DNA Relatives" feature, which enabled data sharing for users around the world, after millions of data stolen from the company were exposed by a threat actor.

Generative artificial intelligence-based phishing attacks have nearly reached parity with human-enabled intrusions, according to SiliconAngle.

CyberScoop reports that malicious cyber operations associated with the Israel-Hamas conflict, including an unverified cyberattack against Israel's Nevatim Air Force Base that was claimed by a pro-Palestinian group to have resulted in data compromise, have increased in prevalence over the past two weeks, with experts warning that more significant attacks could emerge.

Attacks with the Smokeloader malware targeted at Ukrainian government and financial organizations, particularly accounting departments, have been on the rise since May, reports The Record, a news site by cybersecurity firm Recorded Future.

Numerous industrial and government entities across Russia have been subjected to cyberattacks with an information-stealing backdoor since June, with the still-unknown threat actors deploying an updated version of the malware in mid-August, according to BleepingComputer.

Apple released iOS, iPadOS, macOS, tvOS, and Safari updates today. The iOS/macOS updates go back two "generations". This is particularly important for iOS 15, which now receives a patch for CVE-2023-32434, a vulnerability already exploited against earlier versions of iOS. This is also the only issue addressed for these earlier iOS versions.

The three companies claim no sensitive customer data was lost despite being targeted after breach of identity and access management firm.

The YoroTrooper group claims to be from Azerbaijan and even routes its phishing traffic through the former Soviet republic.

We have too much cybersecurity awareness. It's time to implement repeatable, real-world practice that ingrains positive habits and security behaviors.