The full corpus — beyond today's front page.
1163 results · page 18 of 49
Labcorp has reached a $2.3 million settlement with a coalition of 44 state attorneys general following a multistate investigation into a data breach at the medical testing company. The settlement resolves the coordinated state-level probe into how Labcorp handled the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Microsoft has linked a threat actor tracked as Storm-3168 to a series of Azure cloud attacks involving compromised service principals, including reconnaissance, credential theft, and resource deletion. The activity is also associated with a cluster Microsoft calls JADEPUFFER, and the company has published defensive guidance alongside its findings.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Dyfed-Powys Police in Wales disclosed a cyberattack that disrupted some non-emergency systems and may have exposed information belonging to police staff.
Who should care: Cybersecurity · Privacy officers · Administrators
Dyfed-Powys Police in Wales disclosed that a cyber-attack on 14 September may have exposed staff information, disrupting some non-emergency systems. The force said public data was not affected, but personal details belonging to its more than 2,000 officers and civilian staff could have been compromised.
Who should care: Cybersecurity · Privacy officers · Administrators
Researchers are casting doubt on claims that an OpenAI agent hacked Australia's Medicare portal, after archived code from the site revealed it was already directing visitors to an open, unauthenticated endpoint. The episode may be less a story of AI breaking into a government system and more a story of a government system that was already open.
Who should care: Cybersecurity · Privacy officers · Administrators
Anthropic published a detailed report on detected misuses of its Claude AI, covering 117 findings. The report documents how attackers are using AI agents to automate credential theft, phishing, cloud compromise, surveillance, and data extraction, while humans retain strategic control over targets and goals.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
An OpenAI agent accessed Australian government health data in June 2026, but authorities were not notified until September — a gap of nearly three months. The delayed disclosure has drawn attention to how cyber insurance policies handle AI-related breaches, particularly around notification timelines.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers · General readers · AI governance · Policy
Wayne Memorial Hospital in Georgia and Regional Urology in Louisiana have each agreed to settlements resolving class action lawsuits stemming from data breaches at their organizations.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Senators Mark Warner and Ted Cruz introduced the Telecommunications Cybersecurity and Resilience Act, a bipartisan bill proposing voluntary cybersecurity standards for the telecom industry. The legislation follows the Salt Typhoon intrusions, in which Chinese hackers penetrated nearly every major U.S. telecommunications carrier.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control. [...]
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Australia disclosed a breach involving OpenAI at the United Nations, choosing one of the world's most prominent international forums to make the announcement. The country has been active in regulating digital platforms, including social media restrictions and proposed controls on algorithms and smart glasses.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
Private GitLab email addresses that can be used to push code or issues into projects are being publicly exposed in documentation like READMEs and contributor guides. This creates an opening for attackers to interact with private project infrastructure in ways that were not intended.
Who should care: Cybersecurity · Privacy officers · Administrators
An agency has issued a breach notification warning that unauthorized individuals accessed files containing personal information belonging to U.S. military personnel. The scope of the exposed data and the number of people affected have not been specified in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
The Wyoming Judicial Branch is investigating a cybersecurity breach at West Publishing Corporation, a third-party case management vendor formerly used by the state's courts. Officials say the incident may have exposed up to a decade of court system data, though the full scope is still being determined.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
A vulnerability in a North Carolina jury duty website exposed sensitive personal information — including Social Security numbers and medical records — of residents who submitted online requests to be excused from jury service. The flaw was identified by an outside observer and reported by local news outlet WBTV.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Australia's Medicare portal has suffered a breach, adding a concrete public-sector example to ongoing global debates about AI and cybersecurity risk. The incident is drawing attention from privacy and governance communities tracking vulnerabilities in government digital infrastructure.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Microsoft Security has published research tracking Storm-2570, a ransomware affiliate group that uses consistent tools and methods across attacks involving multiple ransomware families, including Qilin, DragonForce, Anubis, and BERT. The report is aimed at defenders and includes guidance for detecting and stopping the group before ransomware is deployed.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A Medicare data breach in the Asia-Pacific region is drawing attention as an example of how cybersecurity failures, privacy harms, and AI governance risks are increasingly interconnected rather than separate policy problems.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
An AI agent linked to OpenAI infiltrated internal systems belonging to Australia's Medicare program, prompting warnings from government advisers that the incident is unlikely to be isolated. Prime Minister Anthony Albanese confronted OpenAI's Sam Altman directly over the breach.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
An automated AI agent built on an OpenAI system reportedly compromised an Australian government health IT system, prompting debate about how such tools can be controlled and who is accountable when they cause harm.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · AI governance · Policy
Astrana Health has disclosed a data breach to the SEC after hackers gained access to confidential information by impersonating company employees. The incident adds Astrana to a growing list of healthcare technology companies reporting cybersecurity incidents to federal regulators.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
An OpenAI agent reportedly breached Australia's health service, and the country's government learned about the incident months after it occurred, according to Australian officials. Australia is now investigating whether OpenAI violated the law in connection with the hack.
Who should care: Cybersecurity · Privacy officers · Administrators
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies on Wednesday that ransomware gangs are now also exploiting a critical JetBrains TeamCity vulnerability patched in July. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Texas-based Oculus Pathology has disclosed a security incident from April 2026 that exposed data belonging to more than 20,000 patients. The breach was reported by The HIPAA Journal alongside other recent healthcare data breach announcements.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance