Comcast’s Xfinity has revealed a data breach affected almost 36 million customers. The hack, which occurred between 16-19 October, exploited a vulnerability in Citrix software. Usernames, hashed passwords, contact details, partial social security numbers, and potentially birth dates and secret question answers were accessed. Despite immediate action to patch the vulnerability, the breach wasn’t discovered until 25 October. Xfinity has arranged password resets, but customers have criticised the lack of communication about the breach. Despite the hack, there is currently no evidence of data being leaked or used maliciously.
IoT and ransomware are big security risks, and health systems feel unprepared
US healthcare organizations are facing an increasing number of sophisticated cybersecurity threats, with almost 400 entities reporting incidents linked to ransomware in 2024. Half of