Field notes from the edge.
What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.
AIData Breaches Announced by Open Arms Care; Elmwood Home Care
Two healthcare providers, Open Arms Care Corporation in Tennessee and Elmwood Home Care in Rhode Island/Massachusetts, have disclosed significant data breaches compromising patient information. Open Arms Care experienced unauthorized email account access from June to August 2025, while Elmwood Home Care suffered a suspected LockBit5 ransomware attack between January and February 2026. Both inciden
AI'Lorem Ipsum' Malware Pivots to ClickFix Delivery
A malware campaign utilizing compromised WordPress sites has shifted its delivery method to ClickFix techniques. Security researchers have identified potential connections between this campaign and Vice Society, a known ransomware and data extortion group, raising concerns about escalating threat sophistication.
AIClinical Registry Solutions; Jason R Egbert OD PC; VNC Health Announce Data Breaches
Three healthcare-related organizations have announced data breaches affecting patient information in early 2026. Clinical Registry Solutions experienced an Akira ransomware attack compromising patient and employee data, while First Sight Family Vision and VHC Health were impacted by breaches at their third-party vendors RXNT and Xsolis respectively, exposing sensitive patient information including
AIEuropol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs
Europol has successfully disrupted AudiA6, a major cryptocurrency laundering service that facilitated money laundering for ransomware gangs and cybercriminal networks. The operation eliminated a critical financial infrastructure that processed an estimated €336 million (~$389 million) in illicit proceeds, representing a significant blow to cybercriminal monetization capabilities.
AIThe Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm
The Gentlemen ransomware operation has claimed 478 victims and initially functioned as an affiliate conducting double extortion attacks using multiple ransomware-as-a-service (RaaS) platforms. The threat group leveraged resources from established RaaS schemes including LockBit, Qilin, and Medusa before evolving its operations. The ransomware notably possesses worm-like capabilities that enable it
AIPHI Compromised in Cyber Incidents at Medenet; United Medical Doctors; Stewart Home & School
Three healthcare-related organizations have disclosed cybersecurity incidents compromising protected health information (PHI). Medenet, a Florida revenue cycle management provider, United Medical Doctors in California, and Kentucky's Stewart Home & School all experienced unauthorized access to their systems, with incidents ranging from December 2025 to March 2026, affecting thousands of individual
AIWho Runs the Ransomware Group ‘The Gentlemen?’
The Gentlemen ransomware group has become the second most active ransomware operation by victim count, attracting affiliates with an unprecedented 90/10 revenue split. Security researchers have traced the group's administrator, known as Hastalamuerte/Zeta88, to Alexander Andreevich Yapaev, a 36-year-old from Izhevsk, Russia, who also works in B2B marketing for an electrical products company. The i
AICybersecurity Incidents Reported by Multiple Dental Practices
Multiple dental practices across the U.S. have reported cybersecurity incidents affecting thousands of patients, with breaches ranging from ransomware attacks to phishing-based email compromises. The incidents exposed sensitive patient data including Social Security numbers, medical records, and insurance information, with Bayside Dental's breach affecting over 10,000 patients and involving a rans
AICheck Point VPN and Google Chrome Vulnerabilities Under Active Exploitation
Check Point has disclosed a critical authentication bypass vulnerability (CVE-2026-50751, CVSS 9.3) in its VPN products that has been actively exploited since May 7, 2026, with attacks linked to Qilin ransomware affiliates. The flaw affects deployments using the deprecated IKEv1 protocol, allowing unauthenticated attackers to establish VPN connections without valid credentials. Separately, Google
AISilent Ransom Group Hits US Law Firms in Escalating Extortion Attacks
A financially motivated threat group dubbed Silent Ransom is targeting US law firms through sophisticated multi-vector attacks that combine voice phishing (vishing), IT staff impersonation, and physical office intrusions. The group's primary objective is data theft followed by extortion, representing an escalation in tactics beyond traditional ransomware deployment. These attacks highlight the gro
AICheck Point VPN Flaw Exploited Since Early May
A critical zero-day vulnerability in Check Point VPN has been actively exploited since early May, with attackers leveraging the flaw to gain unauthorized access. At least one attack has been attributed to a Qilin ransomware affiliate, highlighting the severity of the threat to enterprise networks.
AIHacking Group Claims Responsibility for Multi-Million-Record DentaQuest Data Breach
DentaQuest, a dental benefits administrator serving 32 million Americans, has suffered a significant data breach claimed by the ShinyHunters extortion group. The breach exposed 234 GB of data including 2.6 million unique email addresses along with personal information such as names, addresses, phone numbers, and dates of birth, though Social Security numbers were not compromised. The incident repr
AIClarinda Regional Health Center Reports Data Breach Affecting 24K Patients
Four healthcare organizations have reported significant data breaches affecting tens of thousands of patients. Clarinda Regional Health Center in Iowa experienced the largest breach, affecting 24,341 individuals through a LockBit5 ransomware attack that exposed comprehensive personal and medical data including Social Security numbers, financial information, and health records. The incidents highli
AI$3.3M Settlement Resolves Data Breach Lawsuit Against Mt. Baker Imaging & Northwest Radiologists
Mt. Baker Imaging and Northwest Radiologists have agreed to a $3.3 million settlement following a January 2025 ransomware attack that compromised sensitive data of over 362,000 patients. The breach, which occurred between January 20-25, 2025, exposed names, Social Security numbers, health information, and other personal data, triggering multiple consolidated class action lawsuits alleging inadequa
AIMission Community Hospital Pays $1.55M to Settle Data Breach Lawsuit
Mission Community Hospital, operated by Deanco Healthcare, has agreed to pay $1.55 million to settle a class action lawsuit following a May 2023 ransomware attack by the Ransomhouse group that compromised data of 269,547 patients. The breach exposed sensitive information including Social Security numbers, financial account data, and personal identifiers, with attackers claiming to have exfiltrated