Health Net Federal Services (HNFS) and parent Centene Corporation have agreed to pay $11.3m to settle allegations that they falsely certified compliance with cybersecurity standards under a Defense Health Agency contract. The agreement doesn’t protect HNFS and Centene from further criminal liability, penalties, or actions if new evidence emerges. HNFS and Centene deny the allegations and maintain no data breaches or servicemember information loss occurred.
IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,
%20CISO%E2%80%99s%20Core%20Focus.webp?w=0&resize=0,0&ssl=1 "Identity and Access Management (IAM)")