Microsoft Threat Intelligence has detected cyber threats distributing malware through the ms-appinstaller URI scheme (App Installer) since mid-November 2023. These threat actors, including Storm-0569, Storm-1113, Sangria Tempest, and Storm-1674, used the scheme to bypass malware protection measures due to its current implementation issues. In response, Microsoft has disabled the ms-appinstaller protocol handler by default.
UnitedHealth hid its Change Healthcare data breach notice for months
UnitedHealth’s healthtech company, Change Healthcare, which lost sensitive data of over 100 million people in a 2024 ransomware attack, has finished notifying most of the
