The full corpus — beyond today's front page.
764 results · page 29 of 32
A major medical device manufacturer has disclosed a data breach affecting nearly 4 million people, with Social Security numbers and health-related information among the data accessed. The company stated it has not found evidence that the exposed data has appeared publicly online.
Who should care: Cybersecurity · Privacy officers · Administrators
Security firm Sysdig documented what it describes as the first confirmed use of an AI agent in a ransomware attack, observed in late June 2026. The agent did not automate the entire attack but reduced complexity and accelerated the operation, giving the attacker measurable advantages.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Security researchers have identified what they describe as the first ransomware attack carried out by an autonomous AI agent, with a large language model completing the attack without direct human operation. The finding suggests that agentic AI systems can now execute complex, multi-step cyberattacks independently.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · AI governance · Policy
A retired class-action lawyer has filed a lawsuit against the Alberta government, its Chief Electoral Officer, and two pro-secession organizations over an alleged data breach affecting roughly 2.9 million provincial residents. The suit targets the Centurion Project, claiming it unlawfully obtained voter data.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The Texas Hearing Institute has reported a data breach to the Texas Attorney General affecting more than 29,000 residents. The organization, which provides hearing-related services, filed the notification as required under applicable law.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted entirely by a large language model (LLM) agent. [...]
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
A joint operation involving Google has dismantled NetNut, a residential proxy network that routed traffic through roughly two million compromised Android devices, including smart TVs and streaming boxes. The disruption cut off access to the network of infected consumer devices that had been hijacked without their owners' knowledge.
Who should care: Cybersecurity · Privacy officers · Administrators
A new phishing-as-a-service (PhaaS) platform dubbed "ARToken" appears to operate as an affiliate of the EvilTokens phishing platform, giving researchers a glimpse into an extensive toolkit designed to compromise Microsoft 365. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Hong Kong conglomerate Shun Hing Group confirmed that a March cyberattack compromised its systems, exposing data belonging to roughly 920,000 customers and resulting in more than one million files being encrypted by the attackers.
Who should care: Cybersecurity · Privacy officers · Administrators
This story is not within PrivacySignal's coverage scope. It is a consumer product review about reusable water bottles — it has no meaningful connection to privacy, AI governance, surveillance, data rights, or digital civil liberties. Generating a briefing for it would dilute the intelligence value
Who should care: Cybersecurity · Privacy officers · Administrators
Security researchers have found that a European Parliament member who was involved in investigating surveillance practices was themselves targeted with Israeli-made spyware. The finding suggests the lawmaker's device was compromised, potentially exposing the very work meant to scrutinize such tools.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
The U.S. Department of Homeland Security has confirmed it is investigating a cyberattack targeting an information-sharing network. Details about the scope, the attacker, or what data may have been accessed have not been disclosed.
Who should care: Cybersecurity · Privacy officers · Administrators
The FBI, working with industry partners, seized hundreds of domains tied to NetNut, a residential proxy service run by Nasdaq-listed Israeli firm Alarum Technologies. The seizure follows reporting that linked NetNut to the Popa botnet, a network of at least two million devices infected without meaningful consent from their owners.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Greater Rochester Independent Practice Association has reached a settlement to resolve litigation stemming from a May 2023 data breach tied to the MOVEit file-transfer vulnerability. The case follows a wave of similar claims against organizations that used the widely exploited software.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Serviceaide, an AI-powered IT service management company, has agreed to pay $1.8 million to settle litigation stemming from a data breach. The case was covered by The HIPAA Journal, suggesting the incident involved protected health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · AI governance · Policy
Medtronic is sending breach notifications to customers after the ShinyHunters hacking group gained unauthorized access to personal data held by the medical device company. The scope of exposed information has not been fully detailed in public disclosures.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
The massive FortiBleed credential theft campaign has been linked to the INC and Lynx ransomware operations, suggesting the stolen Fortinet credentials were intended to fuel future network intrusions. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A 19-year-old suspect linked to the Scattered Spider hacking group has been extradited to the United States, where an unsealed complaint accuses him of involvement in multiple intrusions, including a 2025 breach of a luxury jewelry retailer.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A new reporting platform has launched to let people flag harmful or unsafe behavior from AI chatbots and tools. The site gives ordinary users a direct channel to document incidents where AI systems do something dangerous, deceptive, or privacy-violating.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
The Department of Homeland Security is investigating a breach of the Homeland Security Information Network, a platform used to share sensitive information across federal, state, local, and private-sector partners. The scope of the compromise has not been publicly detailed.
Who should care: Cybersecurity · Privacy officers · Administrators
This headline and excerpt describe a military health and safety incident — it does not involve privacy, AI governance, digital rights, surveillance, or data collection. It falls outside the editorial scope of PrivacySignal, and writing a briefing for it would misrepresent the platform's focus to its
Who should care: Cybersecurity · Privacy officers · Administrators
Verizon Business has published its first Breach Impact Study, examining the financial consequences of data breaches. The report appears focused on quantifying the real costs organizations face when breaches occur, with coverage in a HIPAA-focused publication suggesting a healthcare angle.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Over 900 Oracle E-Business Suite (EBS) instances have been found exposed online amid ongoing attacks exploiting a critical security flaw. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A months-long supply chain campaign has been placing malicious packages on PyPI that impersonate Pyrogram, a popular Telegram bot library. Developers who install them unknowingly hand attackers the ability to read files on their servers.
Who should care: Cybersecurity · Privacy officers · Administrators