Search & browse the archive

HIPAA Journal · Jun 29, 2026 · US Federal

Remote Desktop Tools are the Front Door in Healthcare, and Hackers are Walking Through

Healthcare organizations are increasingly being breached through remote desktop tools, which attackers are exploiting as a primary entry point, according to reporting in the HIPAA Journal. The trend persists even as overall cyberattack volume has shown some decline, per data from cybersecurity firm SonicWall.

Who should care: Healthcare professionals · Privacy officers · Compliance

BleepingComputer · Jun 29, 2026 · International

Agentic AI Has an Identity Problem and Attackers Know It

AI agents can access data, trigger workflows, and take action across enterprise systems. Token Security explains why governing these privileged identities is becoming essential for enterprise security. [...]

Who should care: General readers · AI governance · Policy

Australia and Vanuatu sign delayed security deal seen as curbing China

Australia and Vanuatu sign delayed security deal seen as curbing China Reuters

Hezbollah rejects US-brokered Israel-Lebanon security deal as 'surrender'

Hezbollah rejects US-brokered Israel-Lebanon security deal as 'surrender' Reuters

BleepingComputer · Jun 27, 2026 · International

Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious payload that remains invisible to security scanners, AI agents, and human reviewers. [...]

Who should care: General readers · AI governance · Policy

Explosive drone targets Iranian Kurdish opposition camp north of Iraq's Erbil, security sources say

Explosive drone targets Iranian Kurdish opposition camp north of Iraq's Erbil, security sources say Reuters

Cloud Security AI Controls Matrix Turns AI Governance Into Assessment Framework

A new Cloud Security AI Controls Matrix has been released, translating AI governance principles into a structured assessment framework that organizations can use to evaluate their security controls. The tool is aimed at practitioners who need to operationalize AI oversight rather than work from abstract policy guidance.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

UAE stresses Hormuz security in rare call with Iran after war tensions

UAE stresses Hormuz security in rare call with Iran after war tensions Reuters

The Record · Jun 26, 2026 · International

Russia used social engineering to breach prominent messaging accounts, Ukraine says

Ukraine's security service, the SBU, has detailed a sustained Russian intelligence operation in which operatives posed as technical support staff to trick targets into surrendering login credentials for their messaging accounts. The campaign gave attackers direct access to private communications.

Who should care: Cybersecurity · Privacy officers · Administrators

HIPAA Journal · Jun 26, 2026 · US Federal

Why You Don’t Need to Understand HIPAA to Make Your Small Practice HIPAA Compliant

An article from The HIPAA Journal argues that small medical practice owners can achieve HIPAA compliance without deep technical or legal knowledge of the regulation, suggesting that compliance is attainable through practical tools and guidance rather than expertise in the underlying rules.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

HIPAA Journal · Jun 26, 2026 · US Federal

Colorado Health Network; Kentucky Mountain Health Alliance Announce Data Breaches

Colorado Health Network and Kentucky Mountain Health Alliance have each disclosed separate data breaches, according to reporting in the HIPAA Journal. Details on the scope and nature of the compromised data remain limited in the available excerpt.

Who should care: Healthcare professionals · Privacy officers · Compliance

Schneier on Security · Jun 26, 2026 · International

One Million Passports Leaked Online

A database of nearly one million passport images, collected by an ID verification system used by cannabis dispensaries, was exposed online. The breach illustrates how sensitive government-issued credentials end up stored in peripheral, lower-security systems far removed from the original purpose of the document.

Who should care: Cybersecurity · Privacy officers · Administrators

China's Xi pledges to establish security partnership with Cambodia

China's Xi pledges to establish security partnership with Cambodia Reuters

DataBreaches.net · Jun 25, 2026 · International

No need to hack when it’s leaking: Dialog edition

A data exposure at Dialog, described as an exclusive, invite-only organization, left membership information accessible without any breach in the conventional sense. The organization reportedly framed the incident as a hack, though the data appears to have been leaking rather than stolen through an intrusion.

Who should care: Cybersecurity · Privacy officers · Administrators

Kenyan security forces deployed ahead of anniversary protests

Kenyan security forces deployed ahead of anniversary protests Reuters

HIPAA Journal · Jun 25, 2026 · US Federal

HIPAA Security Rule Training for Business Associates

The HIPAA Security Rule imposes direct compliance obligations on business associates that handle electronic protected health information on behalf of covered entities, requiring them to implement specific safeguards and workforce training programs.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

Reflecting Pool now under surveillance as Trump blames 'vandals' for green algae

The National Mall's Reflecting Pool has been placed under surveillance after the Trump administration attributed the water's green discoloration to vandalism. The algae growth, a recurring natural occurrence in the shallow pool, prompted the security response.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

HIPAA Journal · Jun 25, 2026 · US Federal

Bradford Health Services; Bradford Health Partners Settle Data Breach Lawsuit

Bradford Health Services and Bradford Health Partners have agreed to settle a lawsuit stemming from a December 2023 cybersecurity incident that exposed patient data. The breach prompted legal action under privacy and healthcare data protection laws.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

TechCrunch — Privacy · Jun 25, 2026 · International

Cellebrite said it cut off Russia, but Russia used its tools anyway

Security researchers found evidence that Russian authorities used a Cellebrite phone-unlocking device to access a political opponent's iPhone, despite Cellebrite's stated policy of cutting off sales to Russia following its invasion of Ukraine. The findings suggest the tools reached Russian law enforcement through channels the company either did not control or did not stop.

Who should care: Cybersecurity · Privacy officers · Administrators

HIPAA Journal · Jun 25, 2026 · US Federal

Healthcare Report Highlights Growing Vendor Risk and Lack of Cyberattack Readiness

A new healthcare cybersecurity report finds that healthcare organizations face mounting vulnerabilities as their attack surfaces expand, with third-party vendors and AI tool adoption compounding readiness gaps against cyber threats.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy

Inside Privacy (Covington) · Jun 24, 2026 · International

Five Eyes Cybersecurity Agencies Issue Statement Regarding AI-Related Shifts in Cybersecurity Risks, Urging Organizational Leaders to “Act Now”

The cybersecurity agencies of Australia, Canada, New Zealand, the UK, and the United States issued a joint statement on June 22 urging organizational leaders to treat cyber resilience as urgent. The agencies warned that frontier AI models could soon surpass current expectations and fundamentally change both attack and defense capabilities.

Who should care: General readers · AI governance · Policy

UK Met Announces Plan to Scale Drones, Live Facial Recognition and AI in Fight Against Criminals

The UK Metropolitan Police has unveiled plans to significantly expand its use of drones, live facial recognition technology, and AI-powered tools as part of a broader law enforcement strategy targeting criminal activity.

Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy

War on the Rocks · Jun 24, 2026 · International

AI Agents and the Unseen Work of War

Armies run on more than what happens at the front. Behind every operation is a vast amount of coordination, administration, logistics, and judgment. Bill Pessin, senior vice president of national security at Salesforce and a former U.S. Army logistics officer, joins Jonathan to discuss how military organizations can use AI agents, what makes these tools different from ordinary software, and why safety and accountability matter when new technology enters national security work. They also discuss what Pessin learned early in his Army career about the gap between plans, systems, and the people w…

Who should care: General readers · AI governance · Policy

SCoR GM reviews safety, security protocols of AP railway network

SCoR GM reviews safety, security protocols of AP railway network The Hindu