Major Data Breaches, Critical Patches, and Healthcare Cybersecurity Legislation

Critical Incidents and Vulnerabilities

• Technical University of Denmark Breach Exposes Data of 200,000: The Technical University of Denmark (DTU) experienced a significant data breach affecting up to 200,000 individuals. Attackers compromised the central identity management system, DTUBasen, exfiltrating sensitive data including Danish civil registration (CPR) numbers, names, and addresses.
• Epic Systems Halts Development to Fix MyChart Security Flaws: Epic Systems, a major electronic health records vendor, has paused product development to address critical security vulnerabilities in its MyChart patient portal. These flaws could potentially allow unauthorized access to sensitive patient medical records.
• Fortra Patches Critical Flaws in BoKS Privileged Access Manager: Fortra has released updates for its Core Privileged Access Manager (BoKS) platform, addressing eight vulnerabilities, including three critical ones. The most severe flaw allows for authentication bypass, while others enable command execution and arbitrary code execution.

Industry and Policy Developments

• South Korean Financial Sector Hit by Coordinated Cyberattacks: Multiple South Korean financial institutions, including major banks, were targeted in a coordinated cyber campaign that resulted in the breach of customer and employee data. Investigations are underway to understand the sophisticated nature of the attacks.
• U.S. Senate Passes Bipartisan Healthcare Cybersecurity Act: The U.S. Senate has unanimously passed the Health Care Cybersecurity and Resiliency Act. This bipartisan bill aims to enhance the cybersecurity of the healthcare sector by authorizing grants, mandating training, and improving coordination between federal agencies.

Law Enforcement and Threat Actor Activity

• Suspected ShinyHunters Hacker 'Rey' Detained in Jordan: A suspected key member of the ShinyHunters hacking group, identified as Saif al-Din Khader (alias 'Rey'), has been detained in Jordan. The individual is reportedly cooperating with the FBI, potentially aiding in identifying other members of the cybercrime collective.