Remote profile

Massachusetts ambulance firm's $1 million settlement mandates data destruction, as it seeks to resolve allegations of Medicaid billing fraud, plus violations of HIPAA and state data security regulations.
https://www.databreachtoday.com/ambulance-firms-1m-settlement-mandates-data-destruction-a-33180

Words not speeds: Starlink access for Ukraine limited after Trump’s claims satellite service restored, officials say
https://www.theguardian.com/world/live/2026/oct/23/starlink-ukraine-musk-trump-russia-black-sea-strikes-france-milan-europe-protests-latest-news-updates

How PHP's coordinated disclosure process went belly up: Leaks, an accidental release, a decision to push an updated binary early, shifting embargo dates/times for a massive coordinated vulnerability disclosure. Oh and the open-source PHP team also admits to decision paralysis after it found one of the flaws in 2024.
https://www.databreachtoday.com/how-phps-coordinated-disclosure-process-went-belly-up-a-33176

Attackers are exploiting zero-day flaws in widely used PHP. Patches are due out later today. The attacks are a concern because so many websites, from Wikipedia, to WordPress, to numerous e-commerce stores, run PHP.
What's happening:
—Details on 2x zero days leaked Tuesday in advance of Thursday scheduled patch release
—Cloudflare now reports seeing active attacks; it's updated web application firewall to help block known exploits
—Total fallout could lead to "a lot of smoking websites" and extend to Internet of Things devices that run PHP for their web interface, one cybersecurity expert warns
—Britain's National Cyber Security Centre advises all PHP-using organizations to find out where, and immediately patch internet-facing systems once patches are released, or take the systems offline
—Dutch cybersecurity agency has proactively taken its own website offline, pending patches
—Exactly which PHP versions are vulnerable and which ones are getting patches remains to be seen; outdated versions of PHP remain in wide use

Full report: https://www.databreachtoday.com/attackers-exploit-leaked-zero-day-flaws-in-widely-used-php-a-33161

Fraudsters on the phone: telephone-savvy criminals are tricking targets into calling their bogus bank call center, then using cloned versions of banks' customer support sites to better trick victims into downloading malicious code, researchers warn. https://www.databreachtoday.com/fraudsters-clone-bank-support-pages-urge-victims-to-call-a-33149

Chinese AI in the USA: Federal civilian agencies must remove DeepSeek from their networks (if it's even there in the first place?!)
https://www.govinfosecurity.com/dhs-bans-deepseek-from-federal-civilian-agencies-a-33146

Autonomous computer company Simular found a way to run computer agents more cheaply, using a method typically used to improve accuracy. The company applied a hybrid of neuro-symbolic AI so its computer-use agent, Sai, discovers workflows and follows those same steps at each run to cut token costs.
https://www.databreachtoday.com/neuro-symbolic-ai-could-make-computer-agents-cheaper-a-33143

A pediatric practice in New York and Connecticut and one of its former IT services vendors will collectively pay those two states financial penalties of $2.7 million for a 2024 hacking incident that affected nearly 900,000 people. Ransomware gang BianLian claimed responsibility for the attack.
https://www.databreachtoday.com/states-fine-pediatric-practice-vendor-27m-over-hack-a-33144

ConnectWise suspends its Cloud Backup services as it probes hack.
—Appears to involve a stolen API secret for the vendor's Microsoft 365 apps for backing up and restoring data
—Attackers exploited flaw to access tenant environments.
—How many got popped, what attackers stole isn't clear
—Partial view: Huntress saw attackers attempted to exploit nearly 1,000 of its own customers that use ConnectWise
—It found signs of unauthorized access to 300 of those organizations
https://www.databreachtoday.com/connectwise-suspends-cloud-backup-services-as-probes-hack-a-33142