PrivacySignal
Breach

Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts

BleepingComputer · · International · Data Breaches

Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Related stories

Breach
BleepingComputer · · International

New Pass-ta-key attacks let malware hijack Google-synced passkeys

Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager's synced passkeys to take over accounts, bypass user verification, and extract passkey private keys. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
R Reuters · · International

US House panel seeks briefing on OpenAI's AI agent security breach

A US House committee has requested a briefing from OpenAI following a reported security breach involving its AI agent systems. The congressional inquiry signals growing legislative attention to vulnerabilities in agentic AI products.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai Read original →
Breach
HIPAA Journal · · US Federal

AmGen Announces Cyberattack and Data Breach Involving Patient Data

Amgen, a major biopharmaceutical company specializing in cancer, blood, and cardiovascular treatments, has disclosed a cyberattack that resulted in a breach of patient data. The company has not yet publicly detailed the scope of the breach or the specific types of information compromised.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach
Nextgov/FCW · · US Federal

Lawmakers propose giving 2015 OPM breach victims identity protection for life

Legislators are proposing permanent identity protection services for the roughly 22 million people whose personal data was stolen in the 2015 Office of Personnel Management breaches, linked to Chinese state-backed hackers. Current federal coverage for those victims is set to expire on September 30.

Who should care: Cybersecurity · Privacy officers · Administrators