The full corpus — beyond today's front page.
408 results · page 15 of 17
This headline and excerpt describe a military health and safety incident — it does not involve privacy, AI governance, digital rights, surveillance, or data collection. It falls outside the editorial scope of PrivacySignal, and writing a briefing for it would misrepresent the platform's focus to its
Who should care: Cybersecurity · Privacy officers · Administrators
Verizon Business has published its first Breach Impact Study, examining the financial consequences of data breaches. The report appears focused on quantifying the real costs organizations face when breaches occur, with coverage in a HIPAA-focused publication suggesting a healthcare angle.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Over 900 Oracle E-Business Suite (EBS) instances have been found exposed online amid ongoing attacks exploiting a critical security flaw. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A months-long supply chain campaign has been placing malicious packages on PyPI that impersonate Pyrogram, a popular Telegram bot library. Developers who install them unknowingly hand attackers the ability to read files on their servers.
Who should care: Cybersecurity · Privacy officers · Administrators
Kaspersky Lab has identified a new toolkit used by the threat actor group ToddyCat that targets corporate Gmail accounts through API-based access, allowing attackers to read emails, extract calendar data, and move through connected Google services while staying hidden for long periods.
Who should care: Cybersecurity · Privacy officers · Administrators
Business Email Compromise attacks operate as structured criminal enterprises, combining account takeovers, financial reconnaissance, and organized cash-out infrastructure. Analysis of underground forums reveals how these operations are planned, coordinated, and carried out before a single deceptive email is ever sent.
Who should care: Cybersecurity · Privacy officers · Administrators
Aflac has disclosed a data breach affecting its Japan subsidiary, in which attackers accessed and stole personal information and bank account data. The incident involves one of the largest supplemental insurance providers in the United States, a Fortune 500 company serving millions of customers.
Who should care: Cybersecurity · Privacy officers · Administrators
Aflac has disclosed a data breach stemming from an attack on its Japan-based subsidiary, in which personal information and bank account details were stolen from affected individuals. The company has not publicly confirmed the full scope of the breach.
Who should care: Cybersecurity · Privacy officers · Administrators
The Blackfield ransomware gang is asking for a $2 million ransom from Nidec Corporation, a large Japanese manufacturer of electronic components for automotive and computing applications. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
From outsourced labor to tiered pricing models, an inside look at how today's top ransomware threats operate less like rogue hackers and more like Fortune 500 companies. The post How ransomware syndicates weaponize corporate-style organization appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
CISA confirmed on Monday that ransomware gangs are now exploiting a Microsoft Defender privilege escalation vulnerability, dubbed BlueHammer, that has previously been abused in zero-day attacks. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Washington State's Department of Social and Health Services disclosed that an employee improperly accessed protected records belonging to approximately 8,600 individuals, constituting an insider data breach of sensitive personal information held by a state agency.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A commentary piece argues that Ireland's economic reliance on major US technology companies headquartered in Dublin creates a structural conflict of interest as Ireland assumes the EU Council presidency in July, during which key digital and AI regulations are set for renegotiation.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Fox Rothschild, a top-100 U.S. law firm, has suffered a data breach carried out by Silent Ransom Group, a threat actor known to target law firms specifically. The breach resulted in a data leak, exposing the firm and potentially its clients to serious confidentiality risks.
Who should care: Cybersecurity · Privacy officers · Administrators
Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability in data theft attacks previously linked to the ShinyHunters extortion group. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion group stole only publicly available data, outdated logs, and configuration files after breaching its systems by exploiting a zero-day vulnerability in an Oracle PeopleSoft server. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A federal court rejected a second attempt by Progress Software and co-defendants to dismiss negligence claims stemming from the large-scale MOVEit data breach, allowing lawsuits under the laws of California, Indiana, Michigan, and Ohio to move forward in multi-district litigation.
Who should care: Cybersecurity · Privacy officers · Administrators
Alex Scroxton reports: Fear of stigmatisation is likely leading businesses across the UK to drastically underreport data on ransomware attacks, especially when they have paid a ransom to a cyber criminal gang, as admission of such is often seen as supporting further criminal activity or defying compliance regulations. Data gleaned from the national Report Fraud service – which... Source
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Libya's Central Bank has confirmed it is investigating data that appeared on the dark web following a cyberattack earlier this month. The bank says its technical teams, alongside international experts, are working to determine what the data contains and whether it is directly tied to the breach.
Who should care: Cybersecurity · Privacy officers · Administrators
South Africa's data privacy law, POPIA, can require mandatory breach reporting even when personal information is exposed by something as routine as a misdirected email, according to attorneys citing an enforcement notice against a Johannesburg college. The case confirms that accidental internal disclosures are not exempt from the law's reporting obligations.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
The Trump administration accelerated a program enabling small companies to fast-track testing of new nuclear reactor designs. The push has drawn concern from some observers who believe the expedited process may be cutting corners on safety review.
Who should care: Cybersecurity · Privacy officers · Administrators
A forthcoming book by analyst Jack Watling examines how the U.S. conflict with Iran exposed persistent failures in American statecraft, arguing that Washington has struggled to coordinate its instruments of power toward coherent foreign policy goals. The excerpt suggests the current administration is unlikely to undertake an honest internal review of those shortcomings.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Japanese telecommunications company KDDI confirmed a data breach on June 17, 2026, in which attackers gained unauthorized access to a system shared by six ISP mail services. Up to 14.22 million email addresses and associated passwords may have been exposed as a result.
Who should care: Cybersecurity · Privacy officers · Administrators
Japanese telecommunications operator KDDI Corporation disclosed a data breach where threat actors gained access to one of its email systems used by five other internet service providers (ISPs) in the country. [...]
Who should care: Cybersecurity · Privacy officers · Administrators