Te Whatu Ora Health New Zealand revealed a five-month-old IT breach, where hackers accessed sensitive staff data, including medical assessments from 2020 to 2024. While there’s no evidence of data sharing online, the organization has not yet notified affected individuals. The Privacy Commissioner and NZ Police are involved, planning to charge the suspected hacker. Concerns arise as Te Whatu Ora downsizes, potentially increasing IT risks.

LummaStealer Exploits Windows Utility to Run Remote Code Disguised as .mp4 File
The Cybereason Global Security Operations Center (GSOC) has reported on the LummaStealer malware’s advanced evasion techniques. The Russian-developed malware uses the Microsoft HTML Application Host