MEDIUMVulnerability
Global

Atrium Health to Pay $1.8M to Settle Web Tracker Lawsuit

·Source: Bank Info Security

Updated:

Executive Summary

NC Nonprofit Is Latest Organization to Resolve Claims Involving Online Trackers Atrium Health has agreed to pay $1.8 million to settle class action litigation stemming from its previous use of pixel tracking codes on

Analysis

NC Nonprofit Is Latest Organization to Resolve Claims Involving Online Trackers Atrium Health has agreed to pay $1.8 million to settle class action litigation stemming from its previous use of pixel tracking codes on its patient portal, which allegedly unlawfully shared sensitive patient information with third-party firms including Meta and Google for marketing purposes.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/atrium-health-will-pay-18m-to-resolve-web-tracker-lawsuit-image_small-8-a-32170.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on Jul 7, 2026.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-59706 — mem0 contains unauthenticated config API endpoints that expose LLM API keys in p...

mem0 contains unauthenticated config API endpoints that expose LLM API keys in plaintext and allow server-side request forgery via attacker-controlled ollama_base_url parameter. Unauthenticated attackers can retrieve stored secrets like OpenAI API keys via GET /api/v1/config/ or trigger SSRF attacks by setting ollama_base_url to internal addresses like cloud IMDS via PUT /api/v1/config/mem0/llm en

CVE-2026-59706
NIST NVD
MEDIUMVulnerability

Spain arrests suspected hacker linked to Russian hacktivist campaign

Authorities didn’t name the man or file formal charges, but accuse him of participating in attacks linked to Cyber Army of Russia Reborn and NoName. The post Spain arrests suspected hacker linked to Russian hacktivist campaign appeared first on CyberScoop .

CyberScoop
HIGHVulnerability

NVD HIGH: CVE-2026-59707 — LocalAI contains an unauthenticated server-side request forgery vulnerability in...

LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows attackers to fetch arbitrary internal URLs. The endpoint passes unsanitized gallery URL fields directly to gallery.GetGalleryConfigFromURLWithContext without proper validation, enabling attackers to force the server to issue HTTP GET requests to private and loopback ranges w

CVE-2026-59707
NIST NVD