Hive on DanSec Daily

Cybersecurity Brief – 2026-10-29

Thu, 29 Oct 2026 00:00:00 +0000

Major Incidents or Breaches

Sony Network Communications, a subsidiary ISP, confirmed a data breach exposing approximately 2.5 to 2.6 million customer records, including personal information, 54,401 email account passwords, and 16 bank account records ^[22]^[29].
Over 41,000 US Department of Homeland Security (DHS) employee records, including undercover ICE agents, were leaked online by a hacktivist group, exposing names, offices, contact details, and assignments. The data was reportedly stolen from an Okta single sign-on system earlier in 2026 and published by DDoSecrets ^[28]^[43]^[66]^[72].
The Belgian Federal Public Service Finance temporarily suspended tax services following a cyberattack, which occurred just before a filing deadline ^[45].
Japan Airlines disclosed a breach affecting about 2,000 customers, with stolen passport numbers, frequent flyer numbers, email addresses, and phone numbers ^[48].
The University of New Mexico restored hospital systems after a cyberattack that forced ambulance diversions and class cancellations at its medical school ^[46].

Newly Discovered Vulnerabilities

A critical vulnerability in UEFI firmware, widely used in servers and data centers, allows attackers to execute code early in the boot process, impacting most servers globally ^[42].
Cisco released patches for a high-severity flaw in ASA and FTD VPN software that has been actively exploited to crash firewalls via remote, unauthenticated access. This marks the second exploited Cisco firewall VPN zero-day since August ^[6]^[19]^[31].
A flaw in Telegram for Android allowed attackers to execute code on a victim’s device when answering a voice call. Only an ordinary phone number was needed for exploitation ^[3].
Attackers attempted to exploit a critical GitLab vulnerability (CVE-2026-9783) on Alpine Linux’s GitLab server shortly after a patch was released ^[8].
Adobe, Veeam, and Juniper Networks issued patches for critical vulnerabilities that could lead to arbitrary code execution, authorization bypass, and privilege escalation ^[26].
Oracle E-Business Suite flaw CVE-2026-101767 is under active exploitation attempts, with decoys recording exploratory exploits ^[63]^[52].
Apple released a security update for older iPhones and iPads, backporting a fix for a CoreGraphics flaw reportedly exploited in targeted attacks ^[90].
Researchers demonstrated that logic bugs alone, without memory corruption, can be chained to escape the Microsoft Edge sandbox and execute code on Windows systems ^[14].
Researchers found vulnerabilities in the browsers built into several AI coding assistants (VS Code, Cursor, Copilot, Codex, Claude Desktop), allowing web pages to break out of the assistant’s browser sandbox ^[61].

Notable Threat Actor Activity

The China-linked APT group Volt Typhoon used a covert, ephemeral access network known as “Silent Train,” built from rapidly rotating chains of compromised devices, to conduct zero-day exploitation and strategic intrusions targeting hundreds of critical infrastructure networks ^[12]^[23]^[62]^[74]^[30].
Volt Typhoon also exploited a Cisco Catalyst SD-WAN flaw to deploy custom malware (KeyDrift) designed to steal encryption keys, with infrastructure overlapping the Silent Train network ^[9]^[30]^[87].
Chinese state-sponsored actors exploited a VMware ESX zero-day logging flaw (CVE-2026-41709) to reduce audit trail visibility, allowing operations by attackers with administrative privileges to go unlogged ^[10]^[33].
A suspected China-nexus threat actor leveraged PHP2Shell vulnerabilities to root 25 servers and breach a US government-affiliated network, including chaining with a high-severity Fragnesia Linux kernel privilege escalation bug ^[11]^[15]^[17].
The GOLD OGRE threat group used AI in the development, orchestration, and execution of Aur0ra ransomware operations ^[84].
A Ukrainian affiliate of Hive and Nefilim ransomware gangs was sentenced to 70 months in US prison for attacks targeting businesses and hospitals ^[34]^[53].
Attackers used fake ChatGPT and Claude projects to distribute Yoba malware, hiding malicious code behind signed binaries ^[60].
Malicious Firefox extensions impersonated popular crypto wallets to steal recovery phrases and private keys ^[89].
A threat actor impersonated AI bots from OpenAI, Anthropic, and Meta to scan for exposed credentials ^[39].
Attackers abused legitimate Mobile Device Management (MDM) platforms to deploy rogue remote management tools, turning device management into a pathway for remote access and persistence ^[93].
GitHub issues were weaponized in a supply chain attack campaign targeting 61 public repositories in less than an hour, exploiting vulnerable workflows ^[50].

Trends, Tools, or Tactics of Interest

AI is increasingly used both offensively and defensively in cybersecurity. Google introduced Gemini 4 Carbon, a frontier AI model outperforming predecessors in vulnerability discovery, exploitation, and patching ^[1]^[64].
Cisco open sourced Project Quarry, a rules language to detect AI agent attacks that emerge across sequences of benign actions ^[25].
Cisco Talos observed a new AI-enabled command-and-control framework in the wild, dubbed NIK C2 ^[86].
AI agents are now capable of controlling authenticated browsers, interacting with corporate applications, and accessing sensitive data while mimicking legitimate users ^[16].
The supply chain attack campaign “GhostAction” shifted toward targeting developer endpoints and cloud access, indicating evolving tactics among cybercrime groups ^[37].
Online scam volumes have doubled and now outpace phishing, with over six million scam detections in Q2 2026 ^[55].
Phishing remains the leading initial access technique, while ransomware and pre-ransomware cases have increased, with finance and public administration being the top-targeted industries ^[85].
Attackers are increasingly hiding malware behind signed binaries of AI tools to evade detection ^[60].
Credential exposure continues to be a significant risk, with 26,400 valid cloud and AI credentials found in public Gitee repositories ^[5].
Attackers are turning GitHub issues into attack vectors for supply chain campaigns, automating exploitation of vulnerable workflows ^[50].
The use of AI-enabled tools such as Gemini 4 Carbon and NIK C2, as well as AI-assisted attack orchestration by groups like GOLD OGRE, demonstrates the growing sophistication of threat actors ^[1]^[64]^[84]^[86].

Regulatory or Policy Developments Affecting the Security Industry

The UK released a shortlist of age verification methods for its upcoming under-16 social media ban, noting that some adults will also require verification ^[49].
The UK Information Commissioner’s Office (ICO) reprimanded Staffordshire Police following a serious breach of personal information related to domestic abuse cases ^[56].
CREST published a framework advocating a whole-ecosystem approach to strengthening cyber resilience across the financial services sector ^[54].
The US National Institute of Standards and Technology (NIST) published guidance for federal agencies on prioritizing post-quantum cryptography adoption to meet the 2031 transition deadline ^[57].
Microsoft again urged Entra ID administrators to migrate users to phishing-resistant authentication methods ahead of the planned retirement of SMS and voice authentication in February 2027 ^[24].
A federal appellate court ruled that West Virginia’s law barring disclosure of public officials’ personal data is unconstitutional ^[47].
US law enforcement seized the primary domain of Virtualine, a major bulletproof hosting provider used to facilitate cybercrime and ransomware operations ^[20]^[71].

Sources

Sony ISP subsidiary data breach exposes 2.5 million customer records - bleepingcomputer.com
Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net - securityweek.com
Over 41,000 DHS Employee Records Leaked Online - securityweek.com
Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents - wired.com
Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents - helpnetsecurity.com
Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists - cyberscoop.com
Cyberattack disrupts Belgian tax services before filing deadline - therecord.media
Japan Airlines warns of data breach as country grapples with multiple cyber incidents - therecord.media
University of New Mexico restores hospital systems, urges no contact with hackers - therecord.media
Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw - wired.com
Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls - thehackernews.com
New Cisco firewall zero-day exploited to crash SSL VPN devices - bleepingcomputer.com
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August - securityweek.com
Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls - thehackernews.com
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open - thehackernews.com
Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities - securityweek.com
Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767) - helpnetsecurity.com
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble - theregister.com
Have an older iPhone or iPad? Apple has a security update for you - malwarebytes.com
Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win - thehackernews.com
Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop - helpnetsecurity.com
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns - thehackernews.com
Volt Typhoon hides zero-day attacks using 'Silent Train' framework - bleepingcomputer.com
Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network - helpnetsecurity.com
Researchers uncover Volt Typhoon’s covert, ephemeral network - cyberscoop.com
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network - securityweek.com
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys - thehackernews.com
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN - blog.talosintelligence.com
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility - thehackernews.com
Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day - securityweek.com
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces - thehackernews.com
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network - thehackernews.com
CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks - bleepingcomputer.com
AI used in Aur0ra ransomware testing and execution - sophos.com
Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison - securityweek.com
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles - theregister.com
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries - infosecurity-magazine.com
Malicious Firefox extensions impersonate popular crypto wallets - malwarebytes.com
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots - darkreading.com
Managed for Malice: How Attackers Turn MDM into Remote Access - huntress.com
Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour - theregister.com
Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities - thehackernews.com
Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws - helpnetsecurity.com
Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps - securityweek.com
NIK C2: The new AI-enabled command-and-control framework - blog.talosintelligence.com
3 Ways AI Agents Already Operate in Your Browser - bleepingcomputer.com
GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub - darkreading.com
Online Scam Volumes Double to Overtake Phishing - infosecurity-magazine.com
IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases - blog.talosintelligence.com
26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories - thehackernews.com
Shortlist of age checks for the UK's under-16 social media ban is out, 'some' adults will need verifying - theregister.com
ICO Reprimands Staffordshire Police After Domestic Abuse Breach - infosecurity-magazine.com
CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience - infosecurity-magazine.com
NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines - infosecurity-magazine.com
Microsoft urges Entra ID admins to migrate users to passkeys - bleepingcomputer.com
Court strikes down West Virginia law barring disclosure of public officials’ personal data - therecord.media
Police seize Virtualine bulletproof service tied to ransowmare, cybercrime - bleepingcomputer.com
Officials seize domain of top bulletproof hosting provider Virtualine - cyberscoop.com

Cybersecurity Brief – 2026-10-28

Wed, 28 Oct 2026 00:00:00 +0000

Major Incidents or Breaches

Sony-owned So-net, a Japanese internet provider, suffered a data breach exposing personal information of over 2.58 million current and former customers, including email passwords for more than 54,000 users ^[58].
The University of New Mexico Health Sciences Center experienced a ransomware attack causing system outages, disruption to patient care, and the diversion of ambulances. Outpatient surgeries and academic activities were suspended ^[20]^[46]^[50].
Japanese internet giant GMO Group instructed customers to disconnect and shut down PCs following a breach of its Onamae Desktop Cloud service and a subsequent ransomware threat. The company is offering up to $1 million for information leading to the identification of the attackers ^[8]^[18]^[69].
Moldova was forced to take down over 80 public services following a cyberattack ^[67].
Bithumb, a South Korean cryptocurrency exchange, disclosed a data leak after a breach of its internal mobile system ^[68].
Warp, a development environment provider, disclosed a breach that exposed AI agent decision logs and user telemetry data due to a third-party vendor compromise ^[23].
123 Reg, a UK-based hosting provider, reported an “AI cyberattack” on customer data and suspects a China-linked threat actor, possibly related to the ARTEX group ^[48].
British police data has been breached multiple times through third-party IT suppliers, according to a report from His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services ^[45].
Attackers hijacked a Convertr analytics script, leading to the theft of payment card data from e-commerce shoppers ^[21].

Newly Discovered Vulnerabilities

A critical unauthenticated SQL injection vulnerability (CVE-2026-101767) in Oracle E-Business Suite is being actively scanned and probed by attackers for remote code execution ^[1]^[15]^[31].
The critical Oracle PeopleSoft zero-day exploited by ShinyHunters consists of three chained vulnerabilities, all now patched ^[10].
Tailscale patched multiple SSH server vulnerabilities that could allow lateral movement and root access on other servers within tailnets. The flaws were disclosed publicly before fixes were available ^[9]^[33]^[55].
Adobe released patches for eight critical vulnerabilities in Campaign Classic, which could enable arbitrary code execution, security bypass, and privilege escalation ^[4].
Google Chrome and Mozilla Firefox released updates addressing over 200 vulnerabilities combined, including serious security flaws ^[25]^[82].
A 16-year-old flaw in EDK II, used in UEFI firmware, allows code execution before secure boot on network-booting servers ^[2].
TLS flaws in the GoAhead web server, used in hundreds of millions of devices, could allow revoked certificates or eavesdropping on encrypted sessions ^[26].
Four long-hidden vulnerabilities in EPICS Base, a control software used in research facilities, were patched after discovery by an autonomous system. The flaws could let attackers crash processes at particle accelerators and fusion labs ^[28]^[49].
Two critical PHP vulnerabilities, collectively known as “PHP2Shell,” are being actively exploited to compromise web management interfaces of firewalls, VPNs, and application delivery controllers ^[13]^[14]^[27]^[51].
Node2Shell, a critical Brotli vulnerability affecting Adobe Commerce, Magento, and Google’s Brotli decoder, is under active exploitation and has been added to CISA’s Known Exploited Vulnerabilities catalog ^[11]^[16]^[32].

Notable Threat Actor Activity

China-linked hackers have exploited PHP2Shell and Fragnesia vulnerabilities to gain root access to firewalls, including attacks on US government-affiliated organizations ^[27].
ShinyHunters exploited chained Oracle PeopleSoft vulnerabilities for attacks since May ^[10].
A credit card skimming group compromised Convertr analytics scripts to steal payment card data ^[21].
CyberStrikeAI used 44 AI agents in three cyberattacks targeting organizations in Japan, with AI playing a central role in attack execution or support ^[12].
A Ukrainian national, Artem Stryzhak, was sentenced to 70 months in prison for his involvement in Nefilim and Hive ransomware attacks targeting hospitals, government entities, law firms, and businesses worldwide, causing over $100 million in losses. The US is offering an $11 million reward for information on a co-conspirator ^[17]^[43]^[56]^[65]^[73].
The FBI seized the domain of bulletproof hosting provider Virtualine, which was used for criminal hosting, money laundering, and facilitating the distribution of child sexual abuse material ^[7]^[42]^[57].
123 Reg suspects a China-based group in its AI-enabled cyberattack, possibly linked to the ARTEX group known for targeting South Korean financial institutions ^[48].

Trends, Tools, or Tactics of Interest

Threat actors are increasingly chaining multiple vulnerabilities for exploitation, as seen in the Oracle PeopleSoft and PHP2Shell cases ^[10]^[27].
Attackers are abusing legitimate cloud services, authentication mechanisms, and trusted business infrastructure in phishing campaigns, moving beyond traditional credential theft ^[5]^[78].
A significant increase in phishing campaigns leveraging legitimate platforms has been observed, with over 25 services abused in the past year ^[78].
AI-driven attacks are on the rise, with examples including CyberStrikeAI’s multi-agent operations in Japan and the use of unreleased AI models to chain vulnerabilities across Chrome, Safari, Windows, and Linux into working exploits ^[6]^[12].
Malware such as “Aokigahara” stealer is targeting developer keyrings and AI assistants, expanding the focus of infostealers to sensitive business and AI data ^[39].
Mail bombing and social engineering via external Teams chats are being used for malware delivery, possibly linked to the Black Basta ransomware gang ^[36].
Attackers are leveraging mobile device management (MDM) platforms to deploy rogue remote monitoring and management (RMM) tools for persistent remote access ^[85].
Cisco open-sourced Project Quarry, a tool for detecting AI agents engaged in hacking operations ^[47].
CISA released updated versions of ScubaGear and ScubaGoggles, open-source tools for auditing Microsoft 365 and Google Workspace security settings ^[59].
AbuseBox, a new open-source tool, enables monitoring of IP and domain reputation, DNS, SSL, and email records ^[61].

Regulatory or Policy Developments Affecting the Security Industry

The US National Institute of Standards and Technology (NIST) released a roadmap for migration to post-quantum cryptography, with accelerated deadlines for sensitive federal systems ^[62].
Microsoft released out-of-band Windows updates to distrust certificates tied to compromised eMudhra certificate authority keys ^[22].
CISA added the Node2Shell and PHP2Shell vulnerabilities to its Known Exploited Vulnerabilities catalog, mandating patching for federal agencies ^[11]^[16]^[32]^[51].
The UK’s His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services highlighted repeated breaches of British police data via third-party suppliers, raising concerns about supply chain security ^[45].
Austria is preparing to replace email and phone communications among doctors with an end-to-end encrypted instant messaging service for hospitals and clinics ^[52].

Sources

Data breach at Sony-owned internet provider compromises 2.6 million customer records - helpnetsecurity.com
UNM Health ransomware attack disrupts patient care, surgeries - bleepingcomputer.com
University of New Mexico hospital diverts ambulances after cyberattack - therecord.media
Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack - theregister.com
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach - thehackernews.com
Japan's GMO urges customers to shut down PCs amid ransomware threat - bleepingcomputer.com
Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat - databreaches.net
Risky Bulletin: Moldova takes down 80+ public services after cyberattack - news.risky.biz
KR: Bithumb discloses data leak after internal system breach; One of three financial firm breaches reported that day - databreaches.net
Warp discloses breach exposing AI agent logs, user telemetry data - bleepingcomputer.com
123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus - theregister.com
Hackers repeatedly breached suppliers holding UK police data, watchdog finds - therecord.media
Hackers hijack Convertr analytics script to steal payment card data - bleepingcomputer.com
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch - thehackernews.com
Hackers now scanning systems for recently-patched Oracle flaw - bleepingcomputer.com
Hackers Start Probing Fresh Oracle EBS Vulnerability - securityweek.com
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws - thehackernews.com
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers - thehackernews.com
Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws - securityweek.com
Tailscale fixes SSH flaws allowing lateral movement within tailnets - helpnetsecurity.com
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass - thehackernews.com
Chrome and Firefox Updates Patch Over 200 Vulnerabilities - securityweek.com
Chrome and Firefox updates fix serious security flaws. Install them now - malwarebytes.com
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers - thehackernews.com
TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices - securityweek.com
Long-Hidden Flaws Patched in EPICS Research Facility Control Software - securityweek.com
AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours - theregister.com
InfraTrust report warns of exploited flaws in critical network infrastructure - bleepingcomputer.com
Even after PHP2Shell, blast radius matters more than a CVSS score - bleepingcomputer.com
China-Linked Hackers Exploit PHP2Shell to Root Firewalls - securityweek.com
CISA confirms PHP2Shell under attack as researchers clock successful exploits - theregister.com
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges - thehackernews.com
CISA warns of hackers now exploiting critical Node2Shell flaw - bleepingcomputer.com
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts - securityweek.com
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets - thehackernews.com
Nefilim and Hive ransomware affiliate gets 70 months in prison - bleepingcomputer.com
Nefilim, Hive ransomware operator given five-year-plus sentence after guilty plea - therecord.media
Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator - helpnetsecurity.com
Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison - cyberscoop.com
Ukrainian National Sentenced for Role in Hacking Hospitals, Businesses, and Governments as Part of Ransomware Conspiracies Causing Over $100 Million in Losses - databreaches.net
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering - thehackernews.com
FBI seizes ‘bulletproof’ hosting site accused of facilitating child abuse, money laundering - therecord.media
FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police - helpnetsecurity.com
American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed - thehackernews.com
Attackers Abuse Legitimate Infrastructure to Distribute Phishing Emails - blog.knowbe4.com
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits - thehackernews.com
'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants - darkreading.com
External Teams Chats Anchor 15-Minute Malware Delivery - darkreading.com
Managed for Malice: How Attackers Turn MDM into Remote Access - huntress.com
Cisco open sources tool for detecting AI agents on hacking sprees - theregister.com
CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster - helpnetsecurity.com
AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records - helpnetsecurity.com
NIST starts the countdown to retire quantum-vulnerable encryption - helpnetsecurity.com
Microsoft releases Windows OOB updates to distrust eMudhra certificates - bleepingcomputer.com
Austrian doctors to swap emails and phone calls for encrypted messages - computerweekly.com