Healthcare IT
AnMed Cyberattack Day 5: The Clinics Are Open, Imaging Isn't
On day five, 93 of AnMed's 107 listed locations are open. Almost every closure left on the board is a diagnostic service, and the pattern is the lesson.
Security
AI
OpenAI's Agent Escaped Through an Artifactory Zero-Day
JFrog confirmed OpenAI's models exploited zero-days in self-hosted Artifactory — the sealed evaluation's only network path — to escape and breach Hugging Face. The CVEs, the nine-day detection gap, and the patch.
Healthcare IT
DentaQuest Breach: 15 Million Notified, 2.6 Million Leaked
DentaQuest is notifying more than 15 million people after a three-day intrusion in May. The dataset ShinyHunters published covers 2.6 million.
AI
The AI Kill Switch Act Formalizes the Power Commerce Improvised
A bipartisan House bill would make frontier AI developers keep a working off switch and let DHS order it thrown. Two incidents this summer explain why.
AI
GPT-5.6 Found a $500K WordPress Zero-Day for $25
A security researcher pointed GPT-5.6 Sol Ultra at the WordPress codebase and got back a pre-authentication remote-code-execution chain affecting 500 million sites — for about $25 in subscription tokens. The patch is out, exploitation has started, and the economics of vulnerability research just changed.
Technology
Microsoft's July 2026 Patch Tuesday: 570 Flaws, 3 Zero-Days
Microsoft's July Patch Tuesday ships 570 fixes by BleepingComputer's count, 621 by ZDI's — two exploited zero-days in AD FS and SharePoint included. June's all-time record lasted exactly one month, and Microsoft spent the preceding week explaining why: an AI discovery harness now feeds the pipeline, and volumes go up from here.
Technology
iOS 26.5.2: Apple Ships Security Fixes Early, Citing AI Threats
Apple shipped iOS 26.5.2 on June 29 with more than two dozen security fixes and no actively exploited zero-day. The real story is the timing: Apple is now pushing patches out ahead of the next major release, and told Reuters that AI-accelerated hacking is why.
Technology
FortiBleed Leak Hits 74,000 Fortinet Firewalls: What to Do
A leaked database of working Fortinet VPN and admin credentials — CISA counts roughly 74,000 affected devices — is being used to break into networks. Upgrading FortiOS doesn't retroactively fix the weak password hashes; here's what to check and do.
Technology
RoguePlanet Gives SYSTEM on Patched Windows. The Bigger Story Is Why.
A researcher dropped a seventh Windows zero-day hours after Patch Tuesday: RoguePlanet spawns a SYSTEM shell on fully-patched Windows 10 and 11, with no CVE and no fix. The exploit is narrower than it sounds — but the disclosure war that produced it is the part worth watching.
Technology
Microsoft's June 2026 Patch Tuesday: A Record 200 Flaws, 3 Zero-Days
The largest Patch Tuesday ever shipped: roughly 200 vulnerabilities, 33 Critical, three publicly disclosed zero-days, and a CVSS 9.8 in Nuance PowerScribe that radiology shops should not sit on. The Secure Boot certificate deadline is 17 days out — this is the last Patch Tuesday before it.