Researchers at cybersecurity firm Qualys have identified a critical vulnerability in the widely used OpenSSH secure communications protocol, named "regreSSHion". This flaw, affecting nearly 14 million instances, could allow attackers to gain full access to systems and bypass firewalls, though it is challenging to exploit under typical conditions. The vulnerability, CVE-2024-6387, was re-introduced in 2020 after being fixed nearly a decade ago. While experts caution against overhyping the severity, they emphasize the importance of zero trust and mitigating risks. The bug primarily impacts older, 32-bit Linux systems and highlights the need for continued efforts toward using memory-safe languages to secure open-source ecosystems.

Researchers uncover rare, difficult-to-exploit OpenSSH vulnerability cyberscoop

Geisinger Health System experienced a significant data breach affecting over 1.2 million patient records, involving unauthorized access by a terminated employee of Nuance Communications, a Microsoft subsidiary. The breach, discovered after the employee's dismissal in November 2023, prompted a delayed notification to patients due to a federal investigation. Stolen data includes personal information but not care details or social security numbers. Geisinger is offering identity protection services and is cooperating with authorities as the former employee faces federal charges. Geisinger emphasizes the importance of patient privacy and continues to address the incident.

Former Microsoft employee arrested for stealing 1.2M patient records HealthExec

Healthcare technology startup Fabric has acquired Walmart's telehealth business, MeMD, as Walmart closes its primary care clinics. This acquisition significantly expands Fabric's reach in the employer market, enhancing its virtual care platform and incorporating MeMD's network of 30,000 employers and 5 million employees. Fabric will leverage its advanced AI and automation technologies to improve operational efficiency and patient experience across both virtual and in-person care settings. The deal also includes MeMD's clinicians, enriching Fabric's clinical capacity and adding virtual behavioral health services. Financial details were not disclosed, but the acquisition aligns with Fabric's strategy to integrate and enhance its telehealth services amidst shifts in the virtual care market.

Healthcare startup Fabric buys Walmart's telehealth business Fierce Healthcare

The evolving needs of the workplace are driving companies to reimagine the traditional internet browser for enterprise use. Originally designed for consumers, existing browsers require complex and costly measures to ensure security and functionality for business applications. To address these challenges, tech giants like Google and emerging startups such as Island and Here are developing enterprise-specific browsers with built-in security controls and improved app integration. These new tools aim to enhance productivity while reducing the need for additional security layers, with projections indicating widespread adoption by 2030. Companies like Pfizer have started integrating these solutions, citing benefits like cost savings and improved data control.

Internet Browsers Are Getting a Makeover for the Workplace - WSJ Wall Street Journal