A critical vulnerability in the Ultimate Member plugin puts 200,000 WordPress websites at risk, allowing attackers to create hidden admin accounts for complete control. Additionally, a new variant of the RustBucket malware targets macOS systems, staying hidden and bypassing security software.

Plugin Exploited,Proxyjacking:SSH Exploitation,RustBucket Malware - Cybersecurity News[03 July 2023]

The HEAL Security Dispatch Daily Digest is your trusted source for up-to-date cybersecurity news, focusing on healthcare and technology. Hosted by Richard Simmons from London, the show provides expert insights into critical security topics. In this episode for Friday, November 8th, 2024, we explore key stories: mysterious reboots of securely stored iPhones running iOS 18 are complicating forensic access, with officials recommending isolation precautions. Mazda also faces scrutiny as unpatched vulnerabilities in its infotainment systems expose vehicles to unauthorized control, with a software update still pending.

We also cover a recent cyberattack dubbed 'Salt Typhoon,' allegedly orchestrated by Chinese hackers against a U.S. government agency, urging employees to limit phone use. Additionally, North Korea's BlueNoroff group is targeting cryptocurrency businesses on macOS through phishing, exploiting new malware to maintain control over infected systems. Lastly, AndroxGh0st malware has combined with the Mozi botnet to intensify threats to IoT and cloud devices, signaling the need for upgraded defenses. Stay informed on these stories and more at healsecurity.com.

HEAL Security Dispatch: iOS Forensic Reboots, Mazda Vulnerabilities, and New macOS Crypto Malware

In this episode, Richard Simmons discusses several critical cybersecurity issues affecting both individuals and organizations worldwide. He begins with a warning from Switzerland's Federal Office for Cybersecurity about a fake weather app that, through a malicious QR code, targets Android users to steal login credentials for numerous applications, including banking. The episode also delves into the surge of API attacks in the UK, highlighting the inadequacy of current security measures to protect sensitive data, along with a data breach at Thompson Coburn law firm, which exposed the personal information of 122 million people. The vulnerability of healthcare and legal sectors underscores the urgency for better data security practices.

Further, Simmons covers the Hive0145 cybercriminal group, which has been deploying malware in phishing campaigns across Europe, including Ukraine, where financially motivated attacks are on the rise. As the holiday season approaches, there’s a concerning spike in scam domain registrations aimed at retailers, emphasizing the importance of vigilance among consumers and businesses. Additionally, misconfigurations in Microsoft Power Pages have exposed NHS workers' personal data, and North Korean-developed macOS apps have bypassed Apple security. Medcrypt’s partnerships to secure medical devices and a Windows zero-day vulnerability primarily targeting Ukrainian entities round out this episode's coverage, illustrating the vast, evolving landscape of cybersecurity threats and the continuous need for vigilance and improvement.
www.healsecurity.com

From Awareness to Action: Cybersecurity Threats Facing Healthcare and Finance

HEAL Security Dispatch Daily Digest is your essential daily briefing on the latest cybersecurity trends, with a special focus on healthcare and critical infrastructure. Hosted by Richard Simmons from London, this podcast delivers expert insights into emerging threats, vulnerabilities, and security challenges shaping the digital world. In this episode, we cover critical issues including an expiring root certificate affecting Firefox functionality, widespread failures in 2nd generation Chromecast devices, and a major ransomware wave by the Medusa group targeting 300 organizations. We also examine Microsoft's discovery of a more advanced macOS malware variant, a phishing scam impersonating Booking.com, a newly exposed vulnerability in Juniper Networks' Junos OS, and the potential misuse of the DeepSeek AI model for cybercriminal activities. Stay informed with HEAL Security Dispatch Daily Digest, your trusted source for cybersecurity intelligence. 
https://healsecurity.com/

HEAL Security Dispatch: Firefox & Chromecast Crashes, Medusa Ransomware Surge, and AI Exploits

The HEAL Security Dispatch Daily Digest is a cybersecurity podcast hosted by Richard Simmons from London, delivering daily updates on the latest threats, trends, and expert insights—especially at the intersection of healthcare and cyber defense. In the May 27, 2025 episode, the podcast uncovers a wave of alarming cyber incidents: from fake Ledger apps targeting Mac users' cryptocurrency wallets, to the emergence of the sophisticated AppleProcessHub malware. It also reports on major corporate breaches, including incidents affecting Adidas, MathWorks, and Kettering Health, exploring the repercussions and response strategies. The episode highlights the growing vulnerability of connected medical devices within healthcare systems and examines new forms of malware hitting Docker environments and phishing campaigns impersonating OneNote to capture sensitive credentials. Through clear analysis and timely information, HEAL Security Dispatch equips listeners with the knowledge to navigate today’s digital threats. 
https://healsecurity.com/

Cybersecurity Roundup: Adidas and MathWorks Breaches, and Emerging Healthcare Threats

In this episode, Edd Hall covers a sweeping cyberattack that hit Louis Vuitton across multiple regions, a severe data breach affecting 6.5 million Co-op members, and a disruption to Air Serbia’s digital systems. He also explores BadBox 2.0 malware preinstalled on Android and IoT devices, a stealthy macOS threat abusing the Zoom SDK, and new phishing campaigns using SquidLoader in Hong Kong. Plus, we examine a critical privilege escalation flaw in Windows Server 2025 known as the Golden DMSA attack. Tune in for essential insights on emerging cyber risks and what they mean for security and infrastructure worldwide.

Malware Preloads, Luxury Breaches, and Airline Outages – Global Threats Unfold

Duocircle is a leading provider of cloud-based security solutions that can help protect companies from ransomware and malware attacks. Advanced threat defense for email links.Protection from a phishing scam,  spoofing, and impersonation detection.

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #MacOSMalware