Latest cybersecurity reporting from selected sources.

Kansas Plastic Surgeon's Patients Allege Privacy Abuses Over Worker's EHR AccessA physical therapist working at a Kansas medical center used his credentials to inappropriately access nude photos of hundreds of breast augmentation patients of an unrelated plastic surgery clinic over two years - until he was fired in 2023, a proposed class action lawsuit claims.

Millions of Customers Will Also Be Offered Monitoring of Genetic Data on Dark WebGenetics testing firm 23andMe will offer cash payments to millions of individuals whose sensitive data was compromised in a 2023 credential stuffing incident. Under the proposed $30 million lawsuit settlement, affected customers will also be offered dark web monitoring of their genetic data.

Device Bound Session Credentials Tie Authentication Cookies to Specific ComputersGoogle is prototyping a method to stymie hackers who get around multifactor security by stealing authentication cookies from desktops. Google says its proposal for cryptographically tying authentication tokens to computers will succeed where previous attempts such as Token Binding failed.

A proposed plan to charge users for the platform's coveted blue check mark has, unsurprisingly, inspired attackers to try to dupe people into giving up their credentials.