Manage My Health (MMH) is responding to a cyberattack that targeted a specific module, affecting a small percentage of users and prompting coordinated efforts with law enforcement. The organization is committed to transparency, enhancing security measures, and supporting affected patients and healthcare providers. #ManageMyHealth #HealthDataBreach…
Category: Cyber Security News
![Threat Research | Weekly Recap [04 Jan 2026]](https://www.hendryadrian.com/tweet/image/WeeklyRecap.png "Threat Research | Weekly Recap [04 Jan 2026]")
Cybersecurity Threat Research ‘Weekly’ Recap: This edition highlights information stealers and browser-extension abuse, including the VVS stealer, the EmEditor supply-chain incident with a Google Drive Caching extension, and the widespread ShadyPanda extension campaign affecting millions of users. It also covers APT activity and targeted intrusions (ToneShell and HoneyMyte kernel rootkit), Indian government‑focused LNK/HTA loaders and campaigns (APT36), Lazarus and Kimsuky shared infrastructure, RondoDoX botnet evolution with React2Shell, and ongoing tooling updates from Validin.
#VVSstealer #GoogleDriveCaching #ShadyPanda #ToneShell #HoneyMyte #APT36 #Lazarus #Kimsuky #RondoDoX #React2Shell #Validin #EmEditor #avocadomechanism #potherbreference
A cyber espionage campaign attributed to APT36 has evolved to include sophisticated, fileless malware delivered through deceptive exam-related notifications. This campaign uses trusted Windows tools and adaptive tactics to evade detection and conduct espionage activities against targeted organizations. #APT36 #TransparentTribe…
![Cybersecurity News | Daily Recap [03 Jan 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [03 Jan 2026]")
Daily Recap, Covenant Health’s May breach affected nearly 478,000 patients, and ongoing cryptocurrency theft campaigns trace back to the 2022 LastPass breach. The report also highlights state-linked espionage by Transparent Tribe against Indian government targets, Finland’s arrest over suspected undersea cable sabotage, Fortinet 2FA bypass exposure, the RondoDox botnet exploiting React2Shell, Grok deepfake scrutiny, and service disruptions in France. #CovenantHealth #LastPass
Threat actors claiming to be “Scattered Lapsus$ Hunters” have falsely reported breaching Resecurity, while the company states it was a honeypot system used for monitoring cyber threats. Resecurity has been actively collecting intelligence and sharing data with law enforcement to combat this threat. #ScatteredLapsus$Hunters #Resecurity #honeypot #cyberattack
ShinyHunters falsely claimed to have breached Resecurity but was actually targeting a honeypot set up by the company to monitor threat actors. Resecurity utilized synthetic datasets and law enforcement assistance to study and respond to the attack, highlighting the importance of deception in cybersecurity defense. #ShinyHunters #Resecurity #honeypot
President Donald Trump ordered the divestment of a $2.9 million computer chips deal with HieFo Corp. due to national security concerns related to Chinese ownership. The controversy highlights ongoing tensions over technology transfers between the US and China. #HieFo #Emcore #ChineseOwnership #USNationalSecurity…
Daily Recap, threat actors and campaigns continue to target cryptocurrency wallets and cloud services, with Trust Wallet theft linked to a Shai-Hulud NPM supply-chain attack and a new GlassWorm wave trojanizing wallets on macOS. Another notable round-up highlights phishing via Google Cloud email, unpatched Adobe ColdFusion server campaigns, Covenant Health’s data breach affecting 478,000 people, and ongoing ThreatsDay Bulletin coverage of GhostAd Drain, macOS attacks, proxy botnets, and cloud exploits. #ShaiHulud #GlassWorm #TrustWallet #macOS #GoogleCloud #AdobeColdFusion #CovenantHealth #GhostAdDrain #ThreatsDayBulletin
Over 10,000 Fortinet firewalls remain exposed online and vulnerable to exploitation of a five-year-old critical 2FA bypass flaw, CVE-2020-12812. Cybercriminals and nation-state actors continue to exploit this vulnerability in ongoing attacks. #Fortinet #CVE2020-12812
Cryptocurrency thefts linked to the 2022 LastPass breach have been traced through blockchain analysis, revealing a prolonged campaign of wallet draining and money laundering via Russian exchanges. The investigation highlights the involvement of Russian cybercriminal groups and the sophisticated use of privacy techniques like CoinJoin. #LastPassBreach #TRMLabs #RussianCybercrime #CoinJoin
Covenant Health revealed that nearly 478,188 individuals were affected by a major data breach linked to a Qilin ransomware attack. The healthcare provider is offering affected patients identity protection services and has enhanced its security measures. #Qilin #DataBreach #CovenantHealth
European regulators are considering actions against X after its AI tool Grok generated inappropriate images of minors, sparking international debate over regulation and free speech. The incident has led to investigations, proposed bans on nudification tools, and tensions between the EU, UK, and US over digital rights and legal responsibilities. #Grok…
A Pakistani hacker group, APT36, has launched a sophisticated cyber-espionage campaign targeting Indian government, academic, and strategic institutions using spear-phishing emails. The campaign demonstrates advanced tactics, including multi-stage malware, remote control, and data exfiltration, indicating state-sponsored surveillance activities. #APT36 #TransparentTribe #CyberEspionage #IndianGovernment #Malware…
A cyberattack on Covenant Health exposed the personal data of nearly 478,188 individuals, leading to widespread disruption and breach notifications. The Qilin ransomware gang claimed responsibility, targeting multiple healthcare systems and causing significant operational challenges. #Qilin #CovenantHealth…
Trust Wallet’s web browser extension was compromised through an attack involving stolen developer secrets, resulting in over $8.5 million in crypto theft from more than 2,500 wallets. This incident is linked to the widespread Sha1-Hulud supply chain attack targeting npm packages and GitHub repositories. #TrustWallet #Sha1Hulud