UNM Health Shuts Clinics and Diverts Patients During Security Incident

2026-11-05T20:51:39Z•ddb785fca235bced42365d4ac09fad9026409bde2286b1dd19e0b2fbc195b01e
CVE-2024-27834CVE-2026-111560CVE-2026-116606CVE-2026-119977CVE-2026-58868APT29AndroidAppleBarracuda ESGCISA KEVCozy BearSynology NASWordPressauthentication bypasscritical infrastructurecryptocurrency miningcybersecurity incidentshealthcareiOSindustrial control systemsmobile securityransomwareremote code executionsocial engineeringwatering hole

What happened

SecurityAffairs reports a broad set of cybersecurity developments, including disruptive healthcare and blood-bank incidents, APT29 watering-hole attacks against mobile users, ransomware targeting outdated Synology NAS devices, major social-engineering and credential-abuse activity affecting Binance, and multiple actively exploited or critical vulnerabilities in Apple, WordPress, Barracuda ESG, and Android products. The most urgent items are the Barracuda ESG flaws enabling unauthenticated configuration changes and chained root access, the actively exploited WordPress and Apple vulnerabilities,

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
ddb785fca235bced42365d4ac09fad9026409bde2286b1dd19e0b2fbc195b01e
Enrichment time
2026-11-05T20:51:39Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.