The full corpus — beyond today's front page.
758 results · page 15 of 32
ZOLL Medical has agreed to a $3.5 million settlement to resolve a class action lawsuit stemming from a data breach, with a court granting preliminary approval to the deal.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
An Akira ransomware affiliate disabled the endpoint detection and response (EDR) solution on a compromised system by restarting the machine into Safe Mode with Networking. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A hacker group called Jewelbug has reportedly been running espionage operations against government and military targets, breaching official webmail systems, while simultaneously conducting cryptocurrency fraud schemes. The dual operations suggest a group blending state-adjacent intelligence gathering with financially motivated cybercrime.
Who should care: Cybersecurity · Privacy officers · Administrators
Trezor has disclosed a data breach affecting nearly 14,000 customers, traced to a hack of ShipMonk, the third-party shipping and logistics provider the hardware wallet company uses. The breach originated outside Trezor's own systems.
Who should care: Cybersecurity · Privacy officers · Administrators
Quincy Valley Medical Center has notified patients of a data security incident involving Aesto, a third-party vendor connected to the hospital. The disclosure, shared publicly on Facebook, indicates the breach originated outside the hospital's own systems.
Who should care: Cybersecurity · Privacy officers · Administrators
OnePoint Patient Care and Clay-Platte Family Medicine have reached settlements in lawsuits stemming from data breaches at both organizations. People affected by the breaches may now be eligible to file claims and receive compensation.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Two healthcare providers, Highland Health Systems and Albany Gastroenterology Consultants, have reached preliminary settlements in class action lawsuits stemming from data breaches. Courts have given initial approval to both settlements, moving the cases toward resolution for affected patients.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Taiwan's Ministry of Digital Affairs reported that government agencies were targeted by AI-assisted cyber-attacks beginning July 20, detected by national cybersecurity monitoring units. The attacks, described as abnormal and originating overseas, follow separate reports linking a similar first-of-its-kind breach to China-connected hackers.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Marianne Kolbasuk McGee reports: A Canadian hospital is dealing with a ransomware attack on its facility management systems that has affected the building’s doors and heating, ventilation and air conditioning equipment. Some experts said the incident underscores growing cyberthreats involving operational technology in healthcare. The attack this week on Manitoba, Ontario’s largest hospital – Winnipeg’s... Source
Who should care: Cybersecurity · Privacy officers · Administrators
A data theft campaign dubbed 'City-Forum' is actively targeting Salesforce Experience Cloud and ServiceNow customer portals, using custom tools to extract data that those platforms expose to anonymous, unauthenticated users.
Who should care: Cybersecurity · Privacy officers · Administrators
The FBI has warned that attackers are using leaked credentials, social engineering, and fake social media sites to access people's private accounts and steal explicit content, which is then sold online.
Who should care: Cybersecurity · Privacy officers · Administrators
Courts overseeing multidistrict litigation stemming from the 2024 Change Healthcare ransomware attack have established strict rules governing how the stolen dataset can be used in proceedings, reflecting the extraordinary volume and sensitivity of the compromised health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
The UK's ACRO Criminal Records Office suffered three separate intrusions that went undetected for two years, according to a regulatory reprimand. Investigators found that antivirus alerts had gone unread and a content management system was left unpatched, leaving the agency exposed.
Who should care: Cybersecurity · Privacy officers · Administrators
The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication with victims and data-leak activity. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A ransomware group attacked a hospital system and then took over its Facebook page as part of the ongoing fallout. The attackers claim to have stolen 6 terabytes of data, including records tied to sexual assault, mental health care, abortions, and sexual harassment incidents.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
CISA, the FBI, and international partners have issued a joint advisory warning healthcare organizations about Gunra, a ransomware-as-a-service operation actively targeting the sector.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Mozilla has replaced the GPG key used to cryptographically sign Firefox and Thunderbird releases after the key was accidentally exposed in a public GitHub repository. The update is intended to ensure users can continue to verify that software releases are authentic and untampered.
Who should care: Cybersecurity · Privacy officers · Administrators
CISA has confirmed that ransomware groups are actively exploiting a high-severity remote code execution vulnerability in Microsoft SharePoint, a flaw that has been flagged as under active attack since early July.
Who should care: Cybersecurity · Privacy officers · Administrators
U.S. federal agencies and South Korea's National Policy Agency warned government and critical infrastructure organizations worldwide to secure their systems against Gunra ransomware attacks. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
CISA, FBI and Partners Warn Organizations of Gunra Ransomware Actors Targeting Multiple Critical Infrastructure Sectors CISA (.gov)
Who should care: Cybersecurity · Privacy officers · Administrators
A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create rogue admin accounts. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
The Gunra ransomware gang is breaching critical infrastructure organizations through vulnerabilities in popular brands of firewalls, the FBI and South Korea’s government warned.
Who should care: Cybersecurity · Privacy officers · Administrators
The ransomware-as-a-service outfit has gone after a range of critical infrastructure sectors across the globe. The post U.S., South Korean government agencies caution to be on lookout for Gunra ransomware gang appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
Gunra is a ransomware-as-a-service (RaaS) used by affiliates to target government, critical infrastructure, and other organizations. The Gunra ransomware variant first appeared in 2025 and expanded to RaaS operations in 2026. The actors leverage a double-extortion model, both encrypting data and threatening to publish exfiltrated data to a dedicated leak site (DLS) if the ransom... Source
Who should care: Cybersecurity · Privacy officers · Administrators