500 Million Websites at Risk 🌐 and 30 Million Medical Records Stolen 🏥

Two stories this week hit close to home for almost everyone online: a single flaw threatens roughly half a billion websites, and a healthcare breach exposed tens of millions of people's most sensitive records. Here's what happened and why it matters.

🌐 The WordPress Flaw That Could Hijack Half the Web

Researchers at Searchlight Cyber uncovered a serious vulnerability in WordPress Core — the software that powers an estimated 500 million websites. The scary part: an attacker doesn't need a password, a plugin, or any special access. On a stock WordPress site running the affected versions (6.9.0–6.9.4 and 7.0.0–7.0.1), a complete stranger on the internet could potentially take over the site remotely.

Because so much of the web runs on WordPress — from small business sites to major blogs — this affects a huge swath of the internet. The researchers held back the technical details to give site owners time to patch. If you run a WordPress site, update to version 7.0.2 (or 6.9.5) right now. This is the kind of bug attackers race to exploit the moment it becomes public.

Read more

🏥 A Healthcare Breach Exposing 30+ Million Records

Medical giant Abbott confirmed it's investigating two cyber incidents after hackers claimed to have stolen a staggering amount of data. One group says it broke into legacy systems through a "vishing" (voice phishing) scam — tricking an employee over the phone — and made off with over 30 million rows of customer personal information, including more than a million Social Security numbers and tens of millions of medical records.

This is a reminder that the weakest link is often a phone call, not a firewall. Your medical and financial data is a goldmine for criminals, and even the biggest companies get caught by a convincing con. Abbott says it has launched incident response, brought in outside experts, and notified law enforcement. If you're a customer, watch for suspicious emails and consider monitoring your credit.

Read more

Stay ahead of threats with GOCO Security at gocosecurity.com.