Hackers are exploiting a vulnerability in NextGen Healthcare’s Mirth Connect product, a widely-used data integration platform, seven months after it was publicly disclosed and a patch was made available, according to a CISA alert. The vulnerability in the open-source platform allows attackers to launch unauthenticated remote code execution attacks, compromising the server and possibly accessing sensitive healthcare data.

Chinese APT IronHusky Deploys Updated MysterySnail RAT on Russia
After a long period of silence, the MysterySnail RAT malware, first linked to Chinese-speaking threat group IronHusky APT in 2017, is now actively attacking in