ShinyHunters Targets Healthcare via Vishing and SSO Hijacking, Health-ISAC Warns

·1 views

Health-ISAC issued a warning on July 29, 2026, about escalating data theft attacks by the threat group ShinyHunters, which is increasingly targeting healthcare organizations. The group uses vishing — voice-based social engineering — to impersonate employees or IT staff and manipulate help desks into resetting passwords, removing MFA, and registering attacker-controlled devices. Once they gain control of an SSO identity provider such as Microsoft Entra ID, Okta, or Google SSO, attackers move laterally across connected SaaS platforms including Microsoft 365, SharePoint, Salesforce, and Slack to steal data in bulk. The attacks leave minimal endpoint traces, making detection difficult without correlating identity provider logs with SaaS audit trails. Health-ISAC recommends enforcing FIDO2/WebAuthn authentication, requiring manager approval for high-risk account changes, and prohibiting authentication changes during the same support call.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

NSF launches pilot program offering 4-year PhDs with industry research placements

The U.S. National Science Foundation (NSF) has announced a pilot initiative pairing universities with industry partners to offer four-year PhD programs. The program is designed to integrate hands-on industry research experience into doctoral training. NSF is partnering with select universities to test this model, aiming to better prepare graduates for careers beyond academia. The initiative reflects a broader push to align advanced research education with real-world industry needs.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Developer solves AI image generation crashes by freeing RAM, not closing editor

A developer running a local FLUX 12B AI image generation pipeline on a 16GB M4 Mac repeatedly hit memory-triggered safety kills that halted output while keeping the machine stable. The core problem was that the model's weights alone consumed around 7–9GB at runtime, leaving no headroom when the dev environment and other apps were also running. After experimenting with lower quantization and isolating variables, the developer found that raising available free memory from 51% to 71% before starting generation — primarily by closing a heavy browser — was the decisive fix. Switching from 4-bit to 3-bit quantization offered an additional ~2.5GB peak reduction, though it proved optional once sufficient RAM was freed. The debugging process highlighted how resident model weights, not output size, drive memory usage in large AI workloads.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Rob Pike: The Engineer Behind UTF-8 and the Go Programming Language

Rob Pike, born in 1956, began his career at Bell Labs in 1980, where he collaborated with Unix and C creators Ken Thompson and Dennis Ritchie on influential systems including Plan 9 and Inferno OS. In September 1992, Pike and Thompson designed UTF-8 in a single evening at a New Jersey diner, with Thompson sketching the encoding scheme on a placemat; within days, Plan 9 ran on UTF-8 as a full system. Today, UTF-8 powers nearly 98% of the web, enabling billions of users to exchange text in non-Latin scripts without data corruption. After joining Google in 2002, Pike teamed up with Thompson and Robert Griesemer in September 2007 to design a new programming language while waiting for a slow build to complete. Go was open-sourced by Google in November 2009, with its concurrency model — goroutines and channels — tracing a direct lineage back to Pike's experimental language Newsqueak from 1989.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Two Queries on the Same Table Can Return Different Row Counts

Two queries run against the same Iceberg table can return different row counts without either failing — one querying the catalog and another scanning storage directly returned results differing by over 211,000 rows. The discrepancy arises because Delta and Iceberg tables separate physical storage from logical table state, meaning a folder scan sees all Parquet files while a catalog query reads only those tied to a specific snapshot or version. Additional objects in storage may belong to older table versions, abandoned writes, or files superseded by delete metadata, none of which affect a committed snapshot's row count. To diagnose such differences, analysts should first resolve the exact Delta version or Iceberg snapshot used, follow the metadata chain to identify active data and delete files, and only then compare row counts. A query returning results successfully does not guarantee it read the intended table state or that all referenced files were accessible.

0 comments Read more at DEV Community