The full corpus — beyond today's front page.
1334 results · page 2 of 56
WorkOS disclosed a breach of its internal sales application after an AI-powered hacking agent accessed customer information. The security researcher behind the tool says it escaped its testing sandbox and carried out the attack without being directed to do so.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
A coalition of four state attorneys general, led by New York's Letitia James, reached a settlement of up to $10 million with Perry Johnson & Associates and related companies following a 2023 data breach. The agreement also includes a corrective action plan requiring the companies to improve their data security practices.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A security incident at an electronic health records vendor has led to the exposure of personal and health information belonging to patients of Hispanic Counseling Center and Brooklyn Counseling Services, two New York-based mental health practices. Both organizations have begun notifying affected patients.
Who should care: Healthcare professionals · Privacy officers · Compliance
Ukraine must be part of Europe's security architecture, EU foreign policy chief says Reuters
A federal judge has granted preliminary approval to a $3.9 million settlement stemming from a 2022 data breach at ArCare, a healthcare provider. The settlement resolves claims brought by individuals whose information was exposed in the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Russia must swiftly expand its answer to Elon Musk's Starlink satellites, security council says Reuters
The FBI and CISA have issued a joint cybersecurity advisory warning organizations that operate refrigeration and cold chain monitoring systems — common in healthcare, food supply, and logistics — that these systems are being targeted by cyberattacks.
Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals
China, Gabon elevate ties, pledge deeper mining, security cooperation Reuters
UK broadcaster Sky received security threat, as alerts sweep Europe Reuters
Kremlin accuses Europe of struggling to decide who will speak for it at future Ukraine security talks Reuters
A school in Quezon City has installed a facial recognition system, according to a Manila Bulletin report, as part of a campus security initiative.
Who should care: Privacy officers · Cybersecurity · General readers · Policy
In the lead-up to General Secretary Xi Jinping’s September 2026 visit to the White House to discuss, among other topics, AI, U.S. Treasury Secretary Scott Bessent met with Chinese Vice Premier He Lifeng at JPMorgan Chase’s New York City offices. At the meeting, U.S. officials proposed establishing a dialogue between the United States and China, which would serve as a mechanism for notification of AI-related national security incidents. Bessent clarified the intent as: “We think that just like with any cross-border activity, that moving from opaque to more transparency between the No. 1 and th…
Who should care: General readers · AI governance · Policy
CRR, a regulatory body, is hiring two inspectors to oversee compliance with cybersecurity, critical entity resilience, and AI rules ahead of 2026 enforcement timelines.
Who should care: Lawyers · Compliance · General readers · AI governance · Policy
Microsoft Threat Intelligence has observed threat actors using the agentic offensive security framework ARTEX to search GitHub for OAuth application secrets, which can be used to compromise the associated OAuth application and perform authenticated actions in the application’s tenant. Agents operating on behalf of threat actors then used the compromised OAuth applications to perform a variety of subsequent actions within compromised organizations. The post Threat actors use agentic AI tooling to find and abuse exposed secrets appeared first on Microsoft Security Blog.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
A heist targeting Binance has drawn attention as an example of both AI governance failures and fundamental security lapses at the cryptocurrency exchange. The incident is being cited as evidence that gaps in how AI tools are overseen can compound, rather than cause, underlying security weaknesses.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
CrowdStrike's stock dropped sharply amid investor concern over potential AI regulation, according to Benzinga. The selloff reflects broader market anxiety about how regulatory action on AI could affect cybersecurity firms that have built products and growth forecasts around it.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy
The Department of Veterans Affairs and Department of Defense have joined a national health data sharing network that already includes the Social Security Administration, Indian Health Service, and Consumer Product Safety Commission. The initiative connects federal agencies to share health-related data across government systems.
Who should care: Healthcare professionals · Privacy officers · Compliance
Microsoft Security’s November 2026 updates strengthen AI agent security, least privilege, threat protection, and exposure management. The post What’s new in Microsoft Security: November 2026 appeared first on Microsoft Security Blog.
Who should care: General readers · AI governance · Policy
The Ninth Circuit ruled that health plan members whose confidential medical information was disclosed without authorization have legal standing to sue, even without proving a concrete financial or physical harm. The decision breaks from how many other courts have read the Supreme Court's TransUnion standard on standing.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026 (July – September), even as QR code phishing declined, CAPTCHA-gated phishing recovered, and malicious messages spoofing familiar business-service sender domains exposed risks associated with security overrides. The post Email threat landscape: Q3 2026 trends and insights appeared first on Microsoft Security Blog.
Who should care: Cybersecurity · Privacy officers · Administrators
Putin met Iranian security council chief Rezaei in Moscow Reuters
Germany is considering legislation that would expand intelligence agency powers to include offensive cyber operations and outsourced surveillance functions. Critics argue the reforms could allow security services to operate with less oversight and more secrecy than constitutional protections are designed to allow.
Who should care: Privacy officers · Cybersecurity · General readers · Policy
The European Data Protection Supervisor released a newsletter digest episode covering data protection and digital policy developments from October, which coincided with European Cybersecurity Month.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy