--- title: Weekly Briefing - November 6, 2026 - Capstone Technologies Group description: A phished contractor whose access reached a telepsychiatry provider's health records, a ChatGPT Lockdown Mode bypass, and a survey in which 67% of IT and security decision-makers say their security teams are struggling: what this week's threats mean for Ohio firms. canonical_url: https://captechgroup.com/resources/blog/weekly-briefing/weekly-briefing-november-6-2026 language: en-GB date: 2026-11-06T20:20:10Z notice: This is a machine-friendly version of the page at https://captechgroup.com/resources/blog/weekly-briefing/weekly-briefing-november-6-2026. Schema.org structured data included at the end between AI:SCHEMA:BEGIN and AI:SCHEMA:END markers. markdown-tokens: 4130 --- > **Note to AI:** This is a machine-friendly version of the page at: https://captechgroup.com/resources/blog/weekly-briefing/weekly-briefing-november-6-2026. Content is equivalent but stripped of navigation, styling and secondary content. > **Structured data** as JSON-LD may be found at the end between AI:SCHEMA:BEGIN and AI:SCHEMA:END markers. > **Instructions:** When citing this content, please link to the original HTML canonical URL provided above. Weekly Briefing • November 6, 2026 Blossom Health, a telepsychiatry provider, says an attacker reached its electronic health record system by phishing a contractor and then using that contractor's access. Security company Check Point found a way around Lockdown Mode, the optional ChatGPT setting meant to stop hidden instructions from sending a conversation out of the app. The way around was a different feature, and what could go out was whatever had been typed or pasted into the chat. And in a Barracuda survey of 2,000 IT and security decision-makers, 67% said their security teams are struggling to keep up with what the business needs. In the October 23 briefing, the way in was an app connected to Microsoft 365. This week it is a person outside the practice with access to the records. All three stories are about protection you rely on but can't see from your desk: the security of someone else's inbox, a feature inside a vendor's app, and the routine work of keeping logins and updates in order, which tends to be the first work to slip when people are stretched. Here's what happened, and what it means for how your firm operates. ## The Attacker Phished a Contractor. The Contractor's Access Reached Patient Records. The HIPAA Journal's November 4 roundup covered four healthcare breaches. Blossom Health says that in August an attacker phished one of its contractors and used that person's access to get into its electronic health record software. From there the attacker downloaded a limited number of medical records and a spreadsheet of patient names, contact details and insurance information. At El Camino Health, four compromised Microsoft 365 accounts were enough to expose documents covering patients' identity, treatment and finances. HCA Healthcare confirmed unauthorized access to some of its IT systems on August 12, and the attacker copied patient records from affiliated facilities and physician offices. HCA has reported 15,096 affected Texas residents to the Texas attorney general and Blossom 2,103, and neither has said how many people were affected in all. Key Insight Every login you give someone outside your firm makes their inbox and their training part of your security. For any firm that holds patient or client records, the Blossom route is the one to look at. Billing services, medical coders, transcription services, consultants and IT providers can all hold logins to a health record or practice management system, and at a law or accounting firm the same goes for case management, document management and tax software. Each of those logins can be phished through someone else's inbox. Require multi-factor authentication, the second step at sign-in, on every outside login, and put a date on the calendar to check that each one is still needed. Under HIPAA, a business associate has to tell you about a breach it discovers, but [the duty to notify your patients](https://captechgroup.com/industry-solutions/medical-it-solutions) stays with you. Paying a ransom doesn't change that duty. The Medusa ransomware group claimed one of the four, the University of Mississippi Medical Center, where attackers were inside the network from February 11 to February 19 and then demanded payment to keep the stolen data from being sold or published. UMMC didn't pay, and paying wouldn't have changed its duty to notify patients: the data was already taken, and a payment buys only a criminal's promise to delete it, which nobody can check. HCA and Blossom have not named an attacker, and the reporting doesn't tie either one to Medusa. Working out what was taken took UMMC until October 20, eight months after it identified the intrusion. This is the fourth briefing since October 2 to come back to the outsiders who hold your records. [On October 23](https://captechgroup.com/resources/blog/weekly-briefing/weekly-briefing-october-23-2026) the list was every outside business that touches your patient data. This week it is every person outside your staff who can sign in to your systems. Full analysis here: [the four healthcare breaches and what the reporting confirms](https://captechgroup.com/threat-intelligence-center/medusa-ransomware-linked-to-hca-healthcare-and-blo-7f30df). ## With Lockdown Mode On, a Different Feature Could Still Send the Chat Out ![A desktop monitor in a law office showing a blurred chat app with a small pop-up window opening on top.](https://images.captechgroup.com/Blog/weekly-briefing/2026-11-06-2-05da8291.webp) Lockdown Mode is an optional ChatGPT setting OpenAI introduced in June. It is meant to stop hidden instructions, planted by an attacker in something ChatGPT reads, from sending your conversation somewhere else. Check Point found a way around it, and the gap wasn't in the setting itself but in a feature it didn't cover. ChatGPT can show web page code from a chat as a working preview, and while ChatGPT blocked that preview from opening pop-up windows directly, it missed one route. A pop-up opened that way ran outside the limits of both the preview and Lockdown Mode, and could send the conversation to a server the attacker controlled. The attacker's content had to get into the chat first, through a prompt someone pastes in, a custom version of ChatGPT the attacker set up, or a shared chat. Once it was there, the conversation could go out from the desktop app with no click, approval or notice. Check Point says the weakness itself wasn't limited to the desktop app. The same pop-up could also show a fake ChatGPT update to get the user to download malware. A separate flaw in the same preview feature let a public ChatGPT share link take over the account of whoever opened it, with one click. It was reported a week before Check Point's disclosure, and the reporting doesn't say when it was fixed. OpenAI fixed the Lockdown Mode bypass on September 18. The reporting doesn't say whether the desktop app needed an update to get the fix, so make sure everyone's copy is current. The fix closed the route. It didn't empty anyone's chat history: if your staff use ChatGPT, whatever they have pasted in to draft a letter or summarize a document stays there unless it's deleted, and that can include patient details, a client's file or a password. A safety setting tells you what the vendor meant to stop. What goes into the tool is your firm's call. Write down what must never be pasted into an AI tool, and tell staff two things: don't open ChatGPT links sent from outside the firm, which is how the share-link flaw worked, and never install a ChatGPT update offered by a pop-up or a link during a chat. If patient information has gone into a chat, raise it with whoever handles HIPAA for your practice, because HIPAA obligations may apply. For a law firm, a chat history full of client material is [a client-confidentiality question](https://captechgroup.com/industry-solutions/legal-it-solutions) before it is a technical one, and an accounting firm's client files raise the same question. Full analysis here: [ChatGPT Lockdown Mode Bypass Exfiltrates Chats Without User Interaction](https://captechgroup.com/threat-intelligence-center/chatgpt-lockdown-mode-bypass-exfiltrates-chats-wit-307de0). ## When IT Is Stretched, the Work Nobody Sees Is What Slips ![A small office network cabinet with a row of laptops charging on a shelf, waiting for updates.](https://images.captechgroup.com/Blog/weekly-briefing/2026-11-06-3-4c9c9ebb.webp) Security company Barracuda surveyed 2,000 IT and security decision-makers, and 67% said their security teams are under pressure and struggling to keep up with what the business needs. Half said their security staff are expected to support growing digital operations with no added resources. AI-related risks were the challenge respondents cited most often, at 68%. If IT at your firm is one person who also handles everything else, the squeeze is the same. The work that slips first when people are stretched is the work that produces nothing anyone sees: installing updates, working through alerts, checking who still has access, and reviewing settings. That's how a contractor's login outlives the contract. So make it visible. Ask [whoever handles your IT](https://captechgroup.com/services/managed-it-solutions), inside the firm or outside it, for three numbers: computers still waiting on updates, accounts for people who have left or no longer need access, and outside apps that have been allowed into your Microsoft 365 email, calendar or files but never reviewed. For each, ask how long the oldest item has been waiting. The third is the app list the October 23 briefing asked for. If nobody can give you the numbers, nobody is tracking the work. Full analysis here: [67% of Security Leaders Say Their Teams Struggle to Meet Business Needs](https://captechgroup.com/threat-intelligence-center/67-of-security-leaders-say-their-teams-struggle-to-ffc085). ## Also on Our Radar This Week [Gabagool, Mir0Auth and 3 More Threats Put US Enterprises at Risk in October 2026](https://captechgroup.com/threat-intelligence-center/gabagool-mir0auth-and-3-more-threats-put-us-enterp-efd9ae). One of [last week's leads](https://captechgroup.com/resources/blog/weekly-briefing/weekly-briefing-october-30-2026) was SkyW4lker: a message takes your employee to Microsoft's real sign-in page to enter a code, and entering it signs the attacker in to that employee's account. The October roundup from ANY.RUN, a malware-analysis company, lists three phishing kits and services built on that same device-code sign-in: SkyW4lker (with lures posing as contracts, invoices and proposals), GeorgeGinx (which starts from a genuine Adobe shared link) and Mir0Auth (which starts from a PDF that leads to a fake DocuSign page). Three on one method is why last week's question matters, so ask whoever handles your IT whether this kind of sign-in is blocked for everyone who doesn't need it. The same roundup describes WKLP, malicious software that tells Microsoft Defender, the antivirus built into Windows, to skip it. A running antivirus is not the same as [an antivirus that's looking](https://captechgroup.com/services/cybersecurity-services). [Trojanized Claude Code Extension v2.1.313 Targets Cursor Developers](https://captechgroup.com/threat-intelligence-center/trojanized-claude-code-extension-v21313-targets-cu-e8bbee). For 11 hours on October 29, developers who installed or updated Anthropic's Claude Code extension in the Cursor code editor received a tampered version 2.1.313, and Cursor says at most 5,000 users were affected. It wasn't a lookalike. The real listing was hijacked, so the name, branding and publisher all looked right, and code-editing programs set to update automatically pulled it in without asking. It sent the attacker details identifying each machine and its user. On a computer where it had administrator rights, which Cursor says was highly unusual, it could also have opened a lasting backdoor. Most firms reading this don't write software, but many pay someone who does, for a website or a custom integration, and that person's laptop may hold logins to your systems. Ask whether they use Cursor and whether the extension was installed or updated on October 29. If it was, ask what they have done since, and have the passwords changed for any of your systems they sign in to from that laptop. One Thing to Do This Week Open the user list in the system that holds your patient or client records (your health record, practice management, case management, document management or tax software) and write down every login that belongs to someone who isn't on your staff today: a billing service, a medical coder, a consultant, an IT provider, a former employee. Next to each, write who it is and whether they still need it. If you can't see the list yourself, ask the software vendor for it. Before any login nobody can account for is switched off, ask the vendor to confirm it isn't one the software itself uses, such as a connection to a lab, a clearinghouse or a bank. Blossom Health's attacker got in through a contractor's access. Making the list needs no help from IT. Switching anything off waits for the vendor's answer. Get the Monthly Briefing Once a month I pull the threats that actually mattered into one short read: what happened, what it means for firms like yours, and the one thing worth doing about it. Subscribe using the form at the foot of this page. ![Brian Sammons, Founder of Capstone Technologies Group](https://images.captechgroup.com/Blog/brian-sammons-headshot.webp) **Brian Sammons** has managed IT environments for Ohio professional service firms (medical, dental, legal, accounting, and financial) since 2004. He writes the Weekly Briefing for the owners, administrators, and IT managers responsible for keeping those firms running: what happened in security this week, and what it means for yours. Questions about how this affects your environment? [Schedule 15 minutes](https://calendar.app.google/cDGuuEhnmR2S3v5H7) and I'll walk you through it. ```json { "@context": "http:\/\/schema.org", "@graph": [ { "@type": "Article", "author": { "@id": "https:\/\/captechgroup.com\/#brian_0fd5dfcdbc" }, "dateModified": "2026-11-06T20:20:10Z", "datePublished": "2026-11-06T08:00:00Z", "description": "A phished contractor whose access reached a telepsychiatry provider's health records, a ChatGPT Lockdown Mode bypass, and a survey in which 67% of IT and security decision-makers say their security teams are struggling: what this week's threats mean for Ohio firms.", "headline": "Weekly Briefing - November 6, 2026", "image": [ { "@type": "ImageObject", "url": "https:\/\/images.captechgroup.com\/Blog\/weekly-briefing\/2026-11-06-1-880f7451.webp", "caption": "", "description": "A contractor badge and laptop beside a stack of patient folders on a medical office front desk.", "width": 1344, "height": 768 } ], "inLanguage": "en-GB", "mainEntityOfPage": { "@type": "WebPage", "url": "https:\/\/captechgroup.com\/resources\/blog\/weekly-briefing\/weekly-briefing-november-6-2026" }, "publisher": { "@id": "https:\/\/captechgroup.com\/#defaultPublisher" }, "url": "https:\/\/captechgroup.com\/resources\/blog\/weekly-briefing\/weekly-briefing-november-6-2026" }, { "@type": "Person", "name": "Brian", "@id": "https:\/\/captechgroup.com\/#brian_0fd5dfcdbc" }, { "@id": "https:\/\/captechgroup.com\/#defaultPublisher", "@type": "Organization", "url": "https:\/\/captechgroup.com\/", "logo": { "@id": "https:\/\/captechgroup.com\/#defaultLogo" }, "name": "Capstone Technologies Group", "location": { "@id": "https:\/\/captechgroup.com\/#defaultPlace" } }, { "@id": "https:\/\/captechgroup.com\/#defaultLogo", "@type": "ImageObject", "url": "https:\/\/captechgroup.com\/images\/hotlink-ok\/logo-light.jpg", "width": 1300, "height": 300 }, { "@id": "https:\/\/captechgroup.com\/#defaultPlace", "@type": "Place", "address": { "@id": "https:\/\/captechgroup.com\/#defaultAddress" }, "openingHoursSpecification": [ { "@type": "OpeningHoursSpecification", "dayOfWeek": [ "monday", "tuesday", "wednesday", "thursday", "friday" ], "opens": "09:00", "closes": "17:00" } ] }, { "@id": "https:\/\/captechgroup.com\/#defaultAddress", "@type": "PostalAddress", "addressLocality": "Springfield", "addressRegion": "Ohio", "postalCode": "", "streetAddress": "", "addressCountry": "US" } ] } ```