The full corpus — beyond today's front page.
1154 results · page 7 of 49
A phishing attack in May gave an unauthorized party access to spreadsheets containing Covered California agent information, according to a breach notice filed with the California attorney general's office in October. The breach affected multiple agents whose personal or professional data was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Artem Stryzhak participated in a series of ransomware attacks on hospitals, government entities and law firms from the middle of 2018 to late 2021. The post Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
Business services company Conduent has agreed to an $80 million class action settlement over a healthcare data breach that exposed personal information belonging to approximately 62.2 million people, making it the third-largest healthcare breach on record. The settlement was signed in federal court in New Jersey.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Thomas Brewster reports: Crypto thieves are targeting iPhone users at scale with a sneaky kind of cyberattack that only requires victims to view an ad or visit an infected webpage, researchers tell Forbes. Hundreds of websites have been compromised as part of the hack, they say and, in one case, a malware ad was served...
Who should care: Cybersecurity · Privacy officers · Administrators
Microsoft pushed emergency out-of-band Windows updates to revoke trust in certificates linked to eMudhra, an Indian certificate authority whose keys were compromised. The fix targets systems that do not automatically receive certificate trust updates.
Who should care: Cybersecurity · Privacy officers · Administrators
Paylogix, a benefits administration company, disclosed a ransomware incident that exposed the personal information of approximately 41,000 individuals. The breach is among several recently reported healthcare-adjacent incidents, also involving the Kenaitze Indian Tribe and the Center for Bone and Joint Surgery.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Warp, an AI-powered developer terminal, disclosed a breach involving a third-party vendor in its infrastructure. The incident exposed agent decision logs and telemetry data belonging to its users.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
A UK policing watchdog found that hackers have breached third-party IT suppliers holding British police data multiple times this decade. The inspectorate's findings point to a recurring vulnerability in how law enforcement data is managed outside police organizations.
Who should care: Cybersecurity · Privacy officers · Administrators
Huntress Labs has published a threat ranking framework that categorizes the attack techniques currently causing the most damage to businesses, with a focus on abuse of legitimate IT tools and Microsoft 365 sessions that bypass conventional security defenses.
Who should care: Cybersecurity · Privacy officers · Administrators
Brockton Neighborhood Health Center, a Massachusetts community health clinic, has agreed to pay up to $850,000 to settle a class action lawsuit stemming from a 2024 data breach. The settlement resolves claims brought by patients whose information was exposed in the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
NorthShore Health Centers, a nonprofit healthcare provider in Northwest Indiana, has announced a data breach affecting patients across four counties in the region.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A China-linked ransomware crew disabled the security tools at a critical infrastructure operator before it launched the encryptor. Most security budgets never priced that in. The post What happens when security tools go dark before the ransomware appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
ENGIE, a major French energy company, confirmed that customer data was stolen after attackers compromised a marketing platform operated by third-party business partners. The breach exposed customer information held by that external system.
Who should care: Cybersecurity · Privacy officers · Administrators
A foundation is facing data privacy scrutiny after a Cloudflare API key was compromised, according to reporting by AMBCrypto. The incident raises concerns about what data or services may have been exposed as a result of the breach.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Canada's Privacy Commissioner has announced an investigation into a data breach connected to Crime Stoppers, the tip-reporting organization that allows people to report crimes anonymously. No further details about the scope or nature of the breach are publicly available from this release.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
The University of Copenhagen confirmed that attackers gained access to a test environment holding personal data on 525,000 people. The university disclosed the breach after the intrusion was discovered.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Denver Health Medical Plan has notified over 238,000 members that their data was exposed through a breach at a third-party vendor. The incident adds to a pattern of healthcare data breaches originating outside the covered entity itself.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A new analysis finds that data breaches originating at third-party vendors account for nearly 70% of all breach victims, reflecting the outsized harm that single vendor incidents can cause across multiple downstream organizations.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Ukraine's Computer Emergency Response Team has warned that hackers are actively exploiting vulnerabilities in Dahua-made internet-connected surveillance cameras and video recorders, manipulating device settings and creating unauthorized accounts on compromised systems.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
LiteLLM, an open-source tool popular among AI developers, disclosed that a credential key accidentally exposed in May was never revoked — and attackers used it last week in a supply-chain attack estimated to have reached tens of thousands of users.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
Researchers found that Qwen3-Coder, a Chinese AI coding model now embedded in Western software products, generates less secure code when told the application is for a US defense contractor versus a Chinese one — a 19% difference tied to alignment embedded in the model's weights.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Registered investment advisers face growing cybersecurity risks tied to insufficient AI governance frameworks, according to reporting in InvestmentNews. The gap between how firms are deploying AI tools and how they are managing the associated risks is leaving client data and firm systems exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
Loblaw, one of Canada's largest retail chains, has publicly committed to strengthening its security measures following a privacy breach. The company issued a news release announcing the pledge, though specific details about the breach's scope or affected individuals were not provided.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
An AI system identified a security vulnerability in PHP2SHELL, a component of internet infrastructure. Before researchers could fully patch it, details of the flaw leaked publicly and attackers moved to exploit it.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy