The full corpus — beyond today's front page.
408 results · page 13 of 17
A 34-year-old Armenian man has pleaded guilty to hacking U.S. companies and deploying the infamous Ryuk ransomware to encrypt their systems. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
One man accused of deploying Ryuk ransomware pleaded guilty Wednesday in an Oregon federal court to conspiracy and computer fraud, while another man received a 70-month federal prison sentence in a Florida court for helping the Blackcat/AlphV gang extort multiple victims.
Who should care: Cybersecurity · Privacy officers · Administrators
Dutch police say they have found strong indications that Dutch nationals were behind a February cyberattack on telecom provider Odido. The investigation is ongoing, but authorities have pointed to domestic actors rather than foreign groups.
Who should care: Cybersecurity · Privacy officers · Administrators
Automated content moderation systems used by major platforms have a documented record of disproportionate errors, including a case where Meta's own internal data showed its algorithms incorrectly removed nonviolent Arabic-language content at very high rates while missing actual policy violations.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
Aitkin County Health and Human Services in Minnesota disclosed a data breach affecting approximately 81,000 individuals after unauthorized access to its email environment was discovered. The incident involves a county agency that handles sensitive health and social services records for residents.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Angelo Martino exploited his insider position and fed confidential information to ransomware co-conspirators to extort a combined $75.3 million from five U.S.-based victims. The post Former DigitalMint ransomware negotiator who duped clients sentenced to 70 months in jail appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
Dutch police announced they have identified evidence pointing to local criminal involvement in a cyberattack on telecom provider Odido that compromised the personal data of more than 6 million customers. The development shifts the investigation toward a domestic suspect, suggesting insider or locally coordinated access rather than a purely foreign threat.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Attackers breached the GitHub repository of Injective Labs and used that access to push a malicious version of the project's SDK to npm, the widely used JavaScript package registry. The tampered package was designed to silently harvest cryptocurrency wallet private keys and seed phrases from developers who installed it.
Who should care: Cybersecurity · Privacy officers · Administrators
Accenture, a global consulting and professional services giant, has confirmed a security intrusion after a hacker publicly claimed to have stolen 35GB of data from the firm. The breach was reported by The HIPAA Journal, suggesting potential concern about healthcare-related data among the compromised material.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational platform. This blog analyzes how the malware incorporates code from several previously separate malware families and provides guidance to help defenders detect and defend against similar threats. The post GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware appeared first on Microsoft Security Blog.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A foreign, financially motivated group was responsible for a cyberattack on state-owned forestry company Latvijas Valsts Mezi (LVM), officials said.
Who should care: Cybersecurity · Privacy officers · Administrators
Drug and Alcohol Treatment Services, a Pennsylvania-based addiction care provider, has reached a settlement over litigation stemming from a data breach. The organization falls under HIPAA, meaning the compromised data likely included protected health information belonging to patients seeking addiction treatment.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
AssuranceAmerica, a U.S. auto insurance provider, has disclosed a data breach affecting approximately 6.9 million drivers following unauthorized access to its systems earlier this year. The company has not yet detailed what specific types of personal information were exposed.
Who should care: Cybersecurity · Privacy officers · Administrators
Mount Royal University in Calgary has confirmed that attackers breached its network, stole data from file storage systems, and then deleted it. The university disclosed the incident after hackers publicly claimed responsibility for the attack.
Who should care: Cybersecurity · Privacy officers · Administrators
Japanese telecom company KDDI disclosed a data breach affecting more than 12 million people, after attackers compromised an email platform shared by five ISPs operating in Japan. The exposed data includes email addresses and passwords.
Who should care: Cybersecurity · Privacy officers · Administrators
Park Dental Research Corporation in Oklahoma and Wabi Sabi Behavioral Health Center have each disclosed data security incidents involving employee data. Both organizations operate in healthcare-adjacent sectors, placing the breaches within the scope of HIPAA reporting obligations.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A new Australian government report identifies telemarketers, advertising professionals, and accountants as among the occupations most exposed to AI displacement. The analysis found that workers in these higher-risk roles are disproportionately women and university graduates, while people with vocational or trade qualifications face less exposure.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
Washington's Department of Social and Health Services disclosed that a former employee accessed personal data belonging to roughly 8,600 people without authorization in March. The agency launched an internal investigation and is now notifying those whose information may have been compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
The General Services Administration has partnered with the National Design Studio to improve the user experience of Login.gov, the federal government's centralized identity and authentication platform. The collaboration aims to make the service more accessible and easier to navigate while maintaining its existing security standards.
Who should care: Cybersecurity · Privacy officers · Administrators
Chinese hackers tracked as 'UAT-7810' are actively evolving their malware to expand their Operational Relay Box (ORB) network by compromising internet-facing networking devices, primarily unpatched Ruckus routers. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A major Japanese telecommunications company disclosed a cyberattack that exposed roughly 12 million email accounts across five domestic internet service providers. The breach affected systems handling customer email accounts, webmail services, and stored messages.
Who should care: Cybersecurity · Privacy officers · Administrators
Calibrated Healthcare has agreed to settle a class action lawsuit arising from a data breach that occurred in February. The settlement resolves claims brought against two related entities, Calibrated Healthcare Systems and Calibrated Healthcare.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals