Verizon DBIR: Healthcare Fends Off Increased Social Engineering Attacks
2026-05-22T14:51:41Z•af1e36336735ab9e2fe35c3895b4aec3a5bcdeafc5a21c116cdc065de1a51019
ai-bomapi-keysaptbrand-hijackingcisco-sd-wanexchange-owagithub-breachmacos-malwaremobile-fraudot-icsransomwaresocial-engineeringsupply-chainvulnerabilitieszero-day
What happened
DarkReading headlines show a packed week of high-risk activity: multiple zero-days and high-severity vulnerabilities are being exploited in the wild (notably Microsoft Exchange CVE-2026-42897 and a CVSS 10.0 Cisco SD‑WAN bug), alongside critical OT/robotics flaws and widespread ransomware targeting manufacturing. Nation‑state APT campaigns (China-linked groups, 'FrostyNeighbor', 'Showboat') and criminal operations continue to use novel vectors (Discord/Microsoft Graphs, SoftEther SOCKS proxies, domain fronting via 'Underminr'), while cloud and developer security issues (active Google API keys,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- af1e36336735ab9e2fe35c3895b4aec3a5bcdeafc5a21c116cdc065de1a51019
- Enrichment time
- 2026-05-22T14:51:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.