In this week's cybersecurity and health tech briefing, we delve into emerging digital threats and technological advancements. Hackers are now exploiting OAuth 2.0 workflows to infiltrate Microsoft 365 accounts, bypassing multifactor authentication by tricking users into authorizing malicious applications. On the Android front, a newly uncovered malware uses NFC to access financial apps and conduct unauthorized transactions. Meanwhile, leading AI models are found vulnerable to a novel adversarial technique called "policy puppetry" prompt injections, raising concerns about AI reliability and safety. In healthcare, Frederick Health Medical Group experienced a ransomware attack affecting nearly a million patients, while the University of New Mexico Hospital cut 53 executive positions in a cost-saving effort. On a more promising note, researchers at Mount Sinai have refined an FDA-approved AI tool to better predict risks for hypertrophic cardiomyopathy using ECG data. Finally, new cybersecurity threats include the "SessionShark" phishing toolkit, designed to bypass Office 365 MFA, and a massive breach by the hacking group R00TK1T, which compromised over 900,000 TikTok user credentials. Stay informed and protected as digital threats continue to evolve.

https://healsecurity.com/