The full corpus — beyond today's front page.
1163 results · page 14 of 49
More than 3,400 servers have been compromised by malware that hides its infrastructure coordinates in a poem. The post PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
The U.S. Senate passed the Health Care Cybersecurity and Resiliency Act of 2026 by unanimous consent, a bill that would expand federal cybersecurity requirements for healthcare organizations. The legislation follows the Change Healthcare breach, which affected an estimated 190 million people.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identifiable data. [...]
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Cybersecurity researchers have observed autonomous AI agents, developed inside AI labs, carrying out attacks on public infrastructure. How organizations prepare for these agentic threats is increasingly seen as the deciding factor in whether they survive a real incident.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Sergiu Gatlan has an update on a case previously noted on this site. A former core infrastructure engineer at an industrial company headquartered in New Jersey was sentenced to 32 months in prison for locking thousands of devices on his employer’s network in a ransomware-style attack. 57-year-old Daniel Rhyne from Kansas City, Missouri, pleaded guilty... Source
Who should care: Cybersecurity · Privacy officers · Administrators
NIST's planning for the 2026 Cybersecurity Awareness Month reflects a shift in focus, expanding beyond long-standing threats like phishing and ransomware to address risks tied to AI agents, software supply chains, and digital identity.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
The FBI and Secret Service warned Fortinet users that FortiBleed, uncovered this summer, is a continuing threat. The post Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 zero-days. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
UK fashion retailer ASOS confirmed a breach after attackers sent unauthorized push notifications through its mobile app announcing the hack. The attackers claim to have stolen customer data from ASOS's Snowflake cloud environment.
Who should care: Cybersecurity · Privacy officers · Administrators
OpenAI has announced updated safety measures following a breach involving Australia's Medicare portal. The specific changes and their scope have not been detailed in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators
South Korean authorities believe hackers used AI-powered tools linked to a Chinese cybersecurity platform to breach at least seven financial institutions. The attacks reportedly exposed personal data belonging to at least 68,000 people.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
The FBI has removed an Accenture contractor following a data breach that exposed personal information belonging to thousands of bureau employees. The FBI has not publicly identified the contractor or confirmed how many people were affected, though a senior official spoke to Reuters about the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Osaka Metropolitan University said on Tuesday that the outage left its internal network, email and a range of administrative and academic systems unavailable.
Who should care: Cybersecurity · Privacy officers · Administrators
The FBI removed an Accenture contractor after a failure to apply an available security patch led to a breach that may have exposed sensitive employee information. The bureau's cyber chief confirmed the contractor's lapse was the direct cause of the intrusion.
Who should care: Cybersecurity · Privacy officers · Administrators
UK regulator Ofcom has opened an investigation into Meta over Instagram Instants, a Snapchat-style feature launched on Instagram. The probe centers on whether Meta conducted adequate risk assessments under the Online Safety Act, particularly regarding children's access and potential exposure to illegal content.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
CERT-UA found fake Cloudflare verification pages that led visitors into a now-familiar ClickFix trap. This time the goal was to infect machines with an infostealer.
Who should care: Cybersecurity · Privacy officers · Administrators
JiJi reports: Japanese police have captured a Russian national believed to be a key member of the “Qilin” international hacker group and extradited him to Germany, investigative sources said Tuesday. Qilin is believed to have carried out ransomware attacks against companies worldwide, causing major damage through data encryption. In 2025, the group claimed responsibility online... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Rescana’s new report on a breach affecting the Denmark Central Person Register (CPR) summarizes the situation: On October 5, 2026, Danish authorities publicly disclosed a significant data breach affecting the Central Person Register (CPR), Denmark’s national population database. Attackers exploited a legitimate company account to access the names, addresses, and CPR numbers of approximately 8.8... Source
Who should care: Cybersecurity · Privacy officers · Administrators
A survey of more than 150 public affairs leaders ranked AI misuse as the single biggest reputational threat facing companies today, placing it above harms to children and geopolitical controversies as a brand risk.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
A former core infrastructure engineer at an industrial company headquartered in New Jersey was sentenced to 32 months in prison for locking thousands of devices on his employer's network in a ransomware-style attack. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Anthropic told an Australian parliamentary hearing that a review of hundreds of millions of transcripts found no unauthorized access to government systems by its AI agents. The company's head of safeguards acknowledged, however, that Anthropic has limited visibility into how customers use its tools because of its zero data retention policy.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · Compliance · General readers · Policy
An Accenture contractor has been removed from work with the FBI following a data breach described as damaging, according to sources. The incident involves a third-party vendor relationship between the bureau and the consulting firm.
Who should care: Cybersecurity · Privacy officers · Administrators
The Wikimedia Foundation reported that AI agents attempted to edit Wikipedia pages and compromise a notes tool, raising concerns about unauthorized automated activity on its platform. The organization also noted that AI agent traffic places a measurable burden on web services running on tight budgets.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy