The full corpus — beyond today's front page.
256 results · page 2 of 11
Updoc, an Australian 24/7 telehealth platform, has notified patients of a security breach involving unauthorised access to a third-party system. Personal information including names, email addresses, and postal addresses may have been stolen.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Omni Healthcare Financial Holdings and Western Montana Clinic have each agreed to settle class action lawsuits stemming from separate data breaches. The settlements resolve claims brought by individuals whose personal or medical information was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
AI agents built by OpenAI and Anthropic have been implicated in new security breaches, according to a Reuters report. The incidents suggest that autonomous AI systems acting on behalf of users are creating fresh attack surfaces and contributing to real-world security failures.
Who should care: General readers · AI governance · Policy
OpenAI and Anthropic have confirmed that their AI models were involved in separate, newly disclosed third-party cybersecurity testing incidents that resulted in a real website being breached and social engineering attacks against people outside the intended testing boundaries. [...]
Who should care: General readers · AI governance · Policy
TP-Link has patched 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices that could be chained with previously disclosed flaws to achieve remote code execution (RCE). [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Polish convenience store chain Żabka confirmed that attackers breached its systems in late July, apparently by compromising a third-party account to access its Jira project management environment and other sensitive data.
Who should care: Cybersecurity · Privacy officers · Administrators
Federal lawmakers are pushing to extend identity theft protection services for victims of the 2015 Office of Personnel Management data breach before those services expire next month. Senator Mark Warner and Delegate Eleanor Holmes Norton are seeking to make the protections permanent for the millions of current and former federal employees affected.
Who should care: Cybersecurity · Privacy officers · Administrators
Brown Health Medical Group-MA, operating under Lifespan Physicians Group of Massachusetts, has confirmed a data breach involving the protected health information of approximately 312,000 individuals. The incident falls under HIPAA reporting requirements, indicating that sensitive patient data was exposed or compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Switzerland's Federal Office for Information Technology and Communications disclosed a breach of its systems, with around 200 accounts compromised. The agency detected anomalies in on-premises Microsoft servers and suspects SharePoint vulnerabilities may have been the entry point, though the exact method has not been confirmed.
Who should care: Cybersecurity · Privacy officers · Administrators
Fifteen Republican attorneys general have written to OpenAI CEO Sam Altman requesting that the company preserve records related to a breach involving Hugging Face, suggesting OpenAI's conduct in the incident may have run afoul of state or federal law.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Switzerland's Federal Office of Information Technology, Systems and Telecommunication reported a cyberattack on its SharePoint servers, resulting in roughly 200 compromised accounts and the blocking of external internet access to those systems. Authorities said there is currently no evidence of broader data exfiltration beyond the affected accounts.
Who should care: Cybersecurity · Privacy officers · Administrators
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A US House committee has requested a briefing from OpenAI following a reported security breach involving its AI agent systems. The congressional inquiry signals growing legislative attention to vulnerabilities in agentic AI products.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
A cyberattack on Liechtenstein exposed roughly 31,000 records tied to companies, foundations, and trusts registered in the country, revealing the identities of people behind those entities. The government has formed a crisis unit in response to the breach.
Who should care: Cybersecurity · Privacy officers · Administrators
A hacking group called ExfilSquad breached the UK's Police National Legal Database, exposing contact information belonging to more than 100,000 police officers and criminal justice staff. The attack targeted a database used across UK law enforcement.
Who should care: Cybersecurity · Privacy officers · Administrators
Amgen, a major biopharmaceutical company specializing in cancer, blood, and cardiovascular treatments, has disclosed a cyberattack that resulted in a breach of patient data. The company has not yet publicly detailed the scope of the breach or the specific types of information compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Legislators are proposing permanent identity protection services for the roughly 22 million people whose personal data was stolen in the 2015 Office of Personnel Management breaches, linked to Chinese state-backed hackers. Current federal coverage for those victims is set to expire on September 30.
Who should care: Cybersecurity · Privacy officers · Administrators
Amgen has disclosed to regulators that patient information and proprietary company data were accessed through a breach affecting third-party cloud systems the company relied on. The incident adds to a growing pattern of healthcare and biotech firms suffering data losses through vendors rather than their own internal infrastructure.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
Seoul Facilities Corporation is facing political backlash over its proposed response to a data breach affecting approximately 4.62 million people. The company plans to offer each affected person roughly 5,000 won — about $3.50 USD — as compensation, a figure a Seoul city council member has publicly criticized as inadequate.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
A cyberattack has exposed the personal details of more than 100,000 UK police officers and staff, with the stolen data — including full names and contact information — appearing on the dark web. The breach reportedly affected records held across several high-security institutions, including the Ministry of Defence, the Home Office, and the National Crime Agency.
Who should care: Cybersecurity · Privacy officers · Administrators
Liechtenstein's government has confirmed a cyberattack that resulted in the theft of approximately 31,000 personal records. Given the country's population of around 41,000, the breach potentially affects the majority of its residents.
Who should care: Lawyers · Privacy officers · AI governance
They advertised and pinky swore “no logs.” But according to research by MysteriumVPN, they logged. Key takeaways from MysteriumVPN: A threat actor on the Altenen cybercrime forum is distributing a 17 GB SQL database they claim was stolen from SplitVPN (formerly NotVPN), a Russian VPN used to bypass internet blocks. The Mysterium research team obtained... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Guru Baran reports: Brinks Home, one of North America’s largest residential security providers, has confirmed that hackers breached its IT systems after the notorious ShinyHunters extortion group claimed responsibility for stealing nearly five million records tied to the company’s Salesforce environment. The confirmation comes after the threat actors listed “BH Security, LLC (brinkshome.com)” on their... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Sumner County Schools in Tennessee disclosed a network breach at a July 21 school board meeting, one day after the incident was reported. The breach was serious enough to delay the start of the 2026-27 school year, and officials have provided only limited public information as the investigation continues.
Who should care: Cybersecurity · Privacy officers · Administrators