Atrium Health is a major health services provider for primary care and specialty care at Wake Forest in North Carolina. The service provides care to thousands of individuals and manages data for all those people. Some of that data was recently lost to a data breach that's left patients, doctors, and staff members uncertain and concerned. The breach occurred quickly and created some issues that anyone relying on Atrium Health should be aware of.

Ever wondered what lurks in the mysterious corners of the internet? Welcome to the dark web: an uncharted digital territory that’s inaccessible through regular search engines and is notorious for its association with illegal activities, like drug trafficking, firearm sales, and stolen data trading. How did this underworld come to be, and what risks does it pose to you and your business? Step into the shadows of the dark web, where anonymity reigns and practically anything is for sale.

In the December of last year, we reported CVE-2022-1471 to you. This unsafe deserialization problem could easily lead to arbitrary code execution under the right circumstances. In the deep-dive blog post “Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)”, I explained the problems in this library and how it could be executed. The gist of the problem was that by default SnakeYaml parsed the incoming yaml to the generic object type.

Becoming aware that your company has suffered a data breach can be unsettling. However, due to the nature of cybercriminal activity, it is crucial to react quickly and correctly to contain the incident, minimize any further damages, and protect your business from legal troubles. Data breaches are affecting millions of people across the globe, with over 340 million records already compromised in 2023 headline cases and new incidents surfacing every week.

When the Public Sector wins, we all win. Rooting for the security of Public Sector software is something that comes naturally to Veracode. Federal agencies are tackling an incredibly difficult job, and the road to success is meaningful to us all – regardless of our sector or industry. The push for software security came strongly via specific requirements in the Executive Order on Improving the Nation’s Cybersecurity in 2021.