The FTC has proposed an order forcing online mental healthcare provider Cerebral to stop sharing personal health data with third parties for advertising purposes, following allegations of misuse and improper cancellation policies. This follows a similar ruling against alcohol addiction treatment service Monument. If approved, Cerebral will have to refund nearly $5.1 million to its consumers and pay a $2 million civil fine, with the disclosure ban becoming permanent. A full data privacy security program is also required.

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers
Cybersecurity researchers have revealed details about Outlaw, an “auto-propagating” cryptocurrency mining botnet that targets SSH servers with weak credentials. The Romanian-origin malware performs SSH brute-force