ColorTokens Threat Advisory
Healthcare Data Breaches, Developer Tool Abuse, and Supply Chain Ransomware Risks Rise
A Virginia radiology practice is notifying 266,183 people after another major healthcare data breach. GitHub confirmed unauthorized access to at least 3,800 internal repositories after a developer used a malicious VS Code ...
Ransomware, Critical Vulnerabilities, and the Security Gap No One Is Closing Fast Enough
Somewhere between a five-month investigation gap at a Minnesota hospital and 17 million vehicle records sitting on a contractor’s FTP server, a familiar story started taking shape again. Attackers didn’t need to ...
The Breach Did Not Knock on the Front Door
Attackers are getting in. Security teams have long accepted that premise. What is unsettling is where they are entering from. They are coming through software packages that development teams trust by default, ...
When the Kill Switch Is Already Installed
At some point in the last fortnight, a security team at Stryker Corporation watched data disappear from over 200,000 devices across 79 countries at once. Not because an attacker found a gap ...
When Trusted Systems Become Attack Paths
A hospital in Chicago is still dealing with stolen patient data. A major U.S. medical manufacturer is restoring order processing, manufacturing, and shipments after a destructive attack. A Washington-based employee benefits administrator ...
One Foothold, 25 Million Victims: The Risk Inside Modern Breaches
In last month’s reporting cycle, we saw one of the largest healthcare data breaches in U.S. history, ransomware groups tied to North Korea targeting hospitals, and firewall vulnerabilities that allowed attackers to ...
Healthcare Networks, Financial Regulators, and Industrial Systems on the Same Target List
More than 25 million individuals are now tied to the Conduent Business Services breach as investigations continue to expand its scope. In Canada, approximately 750,000 investors were affected in the CIRO data ...
Healthcare Networks, Financial Regulators, and Industrial Systems on the Same Target List
More than 25 million individuals are now tied to the Conduent Business Services breach as investigations continue to expand its scope. In Canada, approximately 750,000 investors were affected in the CIRO data ...
When Hospitals Go Dark and Browsers Turn Rogue
At 6:32 a.m., a hospital in Belgium pulled the plug on its own servers. Something was already inside the network, and no one could say how far it had spread. By mid-morning, ...
When One Vulnerability Breaks the Internet and Millions of Devices Join In
The final weeks of 2025 did not arrive quietly. A single software flaw rippled across the internet, healthcare providers disclosed deeply personal data exposures, and millions of everyday devices quietly joined large scale attacks ...
