[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faNCvw-7v17pPZmpM3VXqyCrBTwndYa2oujKJ8Wl6QDw":3},{"article":4,"iocs":54,"watch_terms":59,"solutions":60,"lesson":143},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":33,"category":34,"article_tags":38},"f6707977-844e-4a8b-b7bb-f28a9859a742","Abbott Laboratories probes two cyber incidents amid extortion claims","abbott-laboratories-probes-two-cyber-incidents-amid-extortion-claims-84a8a0","Abbott Laboratories is investigating two separate cybersecurity incidents after confirming unauthorized access to internal legacy Exact Sciences systems in its Cancer Diagnostics business, while also investigating a separate claim that attackers breached its LabCentral portal and stole company data. [...]","Abbott Laboratories is investigating two separate cybersecurity incidents affecting different business units. ShinyHunters claims to have breached the Cancer Diagnostics business through a vishing attack targeting employees' Microsoft Entra SSO accounts, allegedly stealing 30+ million customer records and sensitive medical data. A separate threat actor, ShadowByt3$, claims to have compromised the Core Laboratory's LabCentral customer portal using weak credentials.","Abbott Laboratories investigates two cyber incidents: ShinyHunters breaches Cancer Diagnostics via vishing, ShadowByt3$","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fabbott-laboratories-probes-two-cyber-incidents-amid-extortion-claims\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F07\u002F17\u002Fabbott-logo.jpg","2026-07-17T20:45:52+00:00","2026-07-17T22:00:29.051058+00:00",9,[17,20,23,25,28,31],{"name":18,"type":19},"Abbott Laboratories","vendor",{"name":21,"type":22},"Exact Sciences Cancer Diagnostics","product",{"name":24,"type":22},"LabCentral",{"name":26,"type":27},"Microsoft Entra","technology",{"name":29,"type":30},"ShinyHunters","threat_actor",{"name":32,"type":30},"ShadowByt3$","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":33,"icon":35,"name":36,"slug":37},null,"Breaches","breaches",[39,44,49],{"category":40},{"id":41,"icon":35,"name":42,"slug":43},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":45},{"id":46,"icon":35,"name":47,"slug":48},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":50},{"id":51,"icon":35,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55],{"type":56,"value":57,"context":58},"malware","Microsoft Entra SSO compromise","Vishing attack targeting SSO account for lateral movement into internal systems",[18,21,24],{"controls":61,"vendors":142},[62,91,117],{"slug":63,"name":64,"problem":65,"products":66},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[67,75,83],{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"slug":92,"name":93,"problem":94,"products":95},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[96,104,112],{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":113,"product_name":114,"url":115,"description":116},"defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"slug":118,"name":119,"problem":120,"products":121},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[122,129,136],{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":123,"product_name":126,"url":127,"description":128},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":118,"product_name":133,"url":134,"description":135},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":137,"vendor_name":138,"vendor_logo":139,"product_slug":137,"product_name":138,"url":140,"description":141},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",[],{"slug":144,"title":145,"body":146,"framework_refs":147,"framework_notes":166},"vishing-attack-and-weak-credentials-expose-abbott-laboratories-to-dual-breaches","Vishing Attack and Weak Credentials Expose Abbott Laboratories to Dual Breaches","Abbott Laboratories is facing two simultaneous cybersecurity incidents stemming from fundamentally different but entirely preventable weaknesses. The first breach exploited human vulnerability through a vishing (voice phishing) attack that manipulated employees into compromising their Microsoft Entra SSO credentials, potentially exposing over 30 million sensitive medical records. The second incident leveraged weak credentials on a customer-facing portal, a basic configuration failure that should be caught by routine security audits. Together, these incidents highlight how attackers routinely combine social engineering and credential exploitation to bypass technical controls, and how medical data breaches carry outsized regulatory and reputational consequences under frameworks like HIPAA.",[148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165],"CIS Control 4 – Secure Configuration of Enterprise Assets","CIS Control 5 – Account Management","CIS Control 6 – Access Control Management","CIS Control 14 – Security Awareness and Skills Training","CIS Control 17 – Incident Response Management","NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 AC-17 (Remote Access)","NIST SP 800-53 IA-5 (Authenticator Management)","NIST SP 800-53 SI-4 (System Monitoring)","NIST SP 800-63B (Digital Identity Guidelines – Phishing-Resistant MFA)","HIPAA Security Rule § 164.312(a)(2)(i) – Unique User Identification","HIPAA Security Rule § 164.312(d) – Person or Entity Authentication","HIPAA Breach Notification Rule § 164.400-414","GDPR Article 32 – Security of Processing","GDPR Article 33 – Notification of a Personal Data Breach","ITIL – Problem Management (root cause elimination)","MITRE ATT&CK T1566.004 – Phishing via Voice (Vishing)","MITRE ATT&CK T1078 – Valid Accounts",{}]