Search & browse the archive

The Guardian — Tech · Oct 01, 2026 · International

Google rolls out new Gemini AI model but restricts access over safety concerns

Google has released its latest AI model, Gemini 4 Argon, exclusively to a vetted group of cybersecurity professionals rather than the general public, citing concerns about potential misuse by malicious actors. The company described the restricted rollout as a necessary phased approach for deploying frontier AI capabilities safely.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

DataBreaches.net · Oct 01, 2026 · International

‘A treasure trove of information:’ Cybersecurity specialist says sensitive McMinnville records exposed online

A cybersecurity specialist discovered that sensitive city records from McMinnville, Oregon were exposed on the dark web and accessible in just a few clicks. The researcher described the breach as unusually easy to access, suggesting the exposed data was broad in scope.

Who should care: Cybersecurity · Privacy officers · Administrators

State-linked actor targets US AI policy experts in credential phishing campaigns

State-linked actor targets US AI policy experts in credential phishing campaigns Cybersecurity Dive

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

CyberScoop · Oct 01, 2026 · US Federal

AI policy circles targeted in China-linked phishing operation

Cybersecurity firm Proofpoint said TA419 impersonated officials and AI industry figures in an effort to gain access to cloud accounts held by U.S. think tank, university and legal-sector experts. The post AI policy circles targeted in China-linked phishing operation appeared first on CyberScoop.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Inside Privacy (Covington) · Sep 30, 2026 · International

Key Takeaways for Private Sector Entities from the FBI’s New Cyber Strategy

The FBI published a new Cyber Strategy on September 9, 2026, organized around four pillars and aimed at protecting critical infrastructure and the public from cyber threats. The strategy is positioned as guidance relevant to private sector organizations shaping their own cybersecurity approaches.

Who should care: Lawyers · Privacy officers · Compliance

DataBreaches.net · Sep 30, 2026 · International

Radford experiencing outage after potential data incident

The City of Radford, Virginia announced a potential data breach that has taken its internet systems offline. City officials have engaged cybersecurity experts and legal counsel, and have notified both state and federal law enforcement.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

EDPS · Sep 30, 2026 · EU

European CyberSecurity Month 2026

European CyberSecurity Month 2026 miriam Wed, 09/30/2026 - 13:49 Thu, 10/01/2026 - 12:00 European Cybersecurity Month is the European Union’s annual campaign dedicated to promoting cybersecurity among EU citizens and organisations. It raises awareness of cybersecurity challenges and provides hands-on information and good practices for strengthening digital security. Read more about the campaign. 0

CyberScoop · Sep 30, 2026 · US Federal

WaterISAC reckons with range of threats after summer of cyberattacks

WaterISAC, the water sector's cybersecurity information-sharing body, is tracking a broad set of vulnerabilities after a wave of attacks over the summer, including internet-exposed systems, programmable logic controllers, third-party integrators, and gaps in internal defenses.

Who should care: Cybersecurity · Privacy officers · Administrators

DataBreaches.net · Sep 30, 2026 · International

Data breach incident targets prisoner medical records at 2 Mass. jails

A cybersecurity incident has compromised the electronic health record system used at two Suffolk County jails in Massachusetts. The system provider, Computer Systems Integrated Inc., confirmed it is investigating the breach, which exposed prisoner medical and health data stored on its EHRs-C platform.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

CyberScoop · Sep 29, 2026 · US Federal

US is looking to weave AI into critical infrastructure for cybersecurity, national cyber director says

Sean Cairncross said CEOs need to be cognizant of how it’s being used, however. The post US is looking to weave AI into critical infrastructure for cybersecurity, national cyber director says appeared first on CyberScoop.

Who should care: General readers · AI governance · Policy

BleepingComputer · Sep 29, 2026 · International

Automated AI agent used to breach cybersecurity nonprofit DIVD

The Dutch Institute for Vulnerability Disclosure (DIVD) suffered an AI-driven cyberattack that the organization described as "loud and very, very messy." [...]

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

HIPAA Journal · Sep 28, 2026 · US Federal

California Critical Access Hospital Announces Cybersecurity Incident

Modoc Medical Center, a critical access hospital in California, has disclosed a cybersecurity incident, joining Vista Del Mar Child and Family Services in reporting recent data breaches in the state. Details about the scope, affected individuals, or data involved have not been specified in available reporting.

Who should care: Healthcare professionals · Privacy officers · Compliance

NPR — Tech · Sep 27, 2026 · International

From human rights to mathematical research: how AI is being used for good

Researchers and advocates in cybersecurity and human rights are exploring ways to use AI as a tool that advances beneficial outcomes, pushing back against narratives focused solely on AI's risks and harms.

Who should care: General readers · AI governance · Policy

The Record · Sep 25, 2026 · International

Labcorp to overhaul data security practices, pay $2.3 million fine for cybersecurity failings

Labcorp has agreed to pay a $2.3 million fine and overhaul its data security practices following cybersecurity failures. The settlement requires the lab company to tighten vendor data sharing, build out a risk management team, and create a formal incident response plan for vendor-related security events.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity

The Record · Sep 24, 2026 · International

Lawmakers introduce bill for voluntary telecom cyber rules after Salt Typhoon hacks

Senators Mark Warner and Ted Cruz introduced the Telecommunications Cybersecurity and Resilience Act, a bipartisan bill proposing voluntary cybersecurity standards for the telecom industry. The legislation follows the Salt Typhoon intrusions, in which Chinese hackers penetrated nearly every major U.S. telecommunications carrier.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

CyberScoop · Sep 24, 2026 · US Federal

New bill would create federal investigative body for AI-driven hacks

A new Democratic bill in Congress would establish a federal Cybersecurity and AI Board of Investigations to provide independent government oversight of cyberattacks carried out by AI agents, following recent hacks by models run at companies like Anthropic, OpenAI, Meta and others. The bill, introduced by Sen. Ed Markey, D-Mass., would attempt to establish a […] The post New bill would create federal investigative body for AI-driven hacks appeared first on CyberScoop.

Who should care: General readers · AI governance · Policy

DataBreaches.net · Sep 24, 2026 · International

Wyoming courts investigate extent of personal data exposed in cybersecurity breach

The Wyoming Judicial Branch is investigating a cybersecurity breach at West Publishing Corporation, a third-party case management vendor formerly used by the state's courts. Officials say the incident may have exposed up to a decade of court system data, though the full scope is still being determined.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

IAPP · Sep 24, 2026 · International

Global AI cybersecurity concerns face new twist following Australia Medicare portal breach

Australia's Medicare portal has suffered a breach, adding a concrete public-sector example to ongoing global debates about AI and cybersecurity risk. The incident is drawing attention from privacy and governance communities tracking vulnerabilities in government digital infrastructure.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

IAPP · Sep 24, 2026 · International

Notes from the Asia-Pacific region: Medicare breach shows convergence of AI governance, cybersecurity and privacy

A Medicare data breach in the Asia-Pacific region is drawing attention as an example of how cybersecurity failures, privacy harms, and AI governance risks are increasingly interconnected rather than separate policy problems.

Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy

The Record · Sep 24, 2026 · International

Astrana latest healthcare tech firm to report data breach to SEC

Astrana Health has disclosed a data breach to the SEC after hackers gained access to confidential information by impersonating company employees. The incident adds Astrana to a growing list of healthcare technology companies reporting cybersecurity incidents to federal regulators.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

Nextgov/FCW · Sep 24, 2026 · US Federal

AI scanning tools found security gaps at rail operator and hospitals, Wiz says

Security researchers using AI scanning tools found exposed access points at a rail operator and hospitals, including administration systems, an emergency alert channel, and sensitive records. The effort focused on organizations with fewer cybersecurity resources.

Who should care: General readers · AI governance · Policy

Cybersecurity startup Island valued at $6.4 billion amid AI agent security risks

Island, a cybersecurity startup focused on enterprise browser security, has been valued at $6.4 billion as investor attention grows around securing AI agents operating inside corporate environments.

Who should care: General readers · AI governance · Policy

BleepingComputer · Sep 24, 2026 · International

CISA: Ransomware gangs now exploiting critical TeamCity flaw

​The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies on Wednesday that ransomware gangs are now also exploiting a critical JetBrains TeamCity vulnerability patched in July. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

The Guardian — Tech · Sep 24, 2026 · International

Nick Clegg plays down fears ‘godlike’ AI could exterminate humanity

Nick Clegg, former UK Deputy Prime Minister and current tech industry figure, has dismissed existential fears about AI wiping out humanity, arguing that leaders in the sector are overstating speculative risks. He says attention should go toward concrete, near-term threats like cybersecurity and bioweapons instead.

Who should care: General readers · AI governance · Policy