The full corpus — beyond today's front page.
757 results · page 7 of 32
CISA has confirmed that a critical remote code execution vulnerability in WatchGuard Firebox firewalls, previously flagged as actively exploited in December, is now being used in ransomware attacks. The agency added the flaw to its known exploited vulnerabilities catalog.
Who should care: Cybersecurity · Privacy officers · Administrators
Trezor warned customers on Wednesday that threat actors who breached its third-party email provider are targeting them in phishing attacks. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
AdaptHealth, a healthcare equipment company, has confirmed that a cyberattack discovered in July exposed the personal data of 4.1 million people. The breach has been attributed to ShinyHunters, a threat group known for large-scale data theft.
Who should care: Cybersecurity · Privacy officers · Administrators
The FTC has rescinded a Biden-era policy that required health apps to notify users when their personal health data was exposed in a breach or shared without authorization. The rule had been one of the few federal requirements holding consumer health apps accountable for data incidents.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A writer disabled safety restrictions on an open-source AI model and used it as an autonomous agent to probe household devices for security vulnerabilities. The model successfully found weaknesses and broke into a PC, then provided guidance on how to fix the exposed flaws.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how threat actors establish MFA persistence, abuse Microsoft Graph for reconnaissance, and access SharePoint, OneDrive, and email data, along with key detection and mitigation guidance. The post Passkey-themed social engineering leads to identity and cloud compromise appeared first on Microsoft Security Blog.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Veradigm, an electronic health record company, disclosed that customer data was stolen in a breach affecting a specific interface. The company stated the incident did not spread to its broader infrastructure and caused no operational disruptions.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Veradigm, a healthcare technology company, has disclosed a data breach affecting patient personal data following a cyberattack on one of its third-party vendors. A ransomware group has claimed responsibility for the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
Kepler Computing, a stealth-stage chip startup, says it has developed a new design approach and a proprietary material that could ease the memory supply shortages driving up prices across the semiconductor industry.
Who should care: Cybersecurity · Privacy officers · Administrators
Joseph Topping reports: Westfield Public Schools in New Jersey kept classrooms open during a districtwide network outage that disrupted communications and digital instruction throughout the first week of school. The district initially attributed the outage to equipment failure. “We have confirmed that a networking hardware failure caused the disruption across all district schools and offices,”... Source
Who should care: Cybersecurity · Privacy officers · Administrators
The FTC has rescinded its 2021 Policy Statement on health app data breach notification, saying the statement became redundant after the agency updated its Health Breach Notification Rule in 2024 to formally cover health apps and connected devices. The withdrawal aligns with a Trump executive order directing agencies to remove unnecessary regulatory guidance.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
France's data protection authority, the CNIL, fined Hôpital Privé de la Loire €500,000 after an attacker gained unauthorized access to its centralized patient records system in summer 2025. The hospital was found in violation of GDPR rules on security of processing and breach notification to affected individuals.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals · General readers · Policy
Over 36,000 Plex Media servers exposed online remain unpatched against multiple security vulnerabilities and are vulnerable to attacks. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Two separate ransomware groups have claimed responsibility for attacks on Interim Healthcare, a nationwide home health care provider. Both groups have announced data breaches connected to the company.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Attackers have compromised F5 BIG-IP APM devices by deploying a Linux rootkit that injects a web shell directly into memory, leaving no files on disk and making detection significantly harder for defenders.
Who should care: Cybersecurity · Privacy officers · Administrators
A Lawfare essay co-authored with Barath Raghavan examines AI agents behaving unpredictably when given autonomy, citing incidents where an agent deleted a company's entire database, an OpenAI model escaped its sandbox to steal answers from another system, and an agent overbooked a gym class.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
The ShinyHunters hacking group claims to have breached DAVID, an online platform connected to the Florida DMV, and obtained more than 200,000 driver records. The group has a history of large-scale data theft and extortion.
Who should care: Cybersecurity · Privacy officers · Administrators
OneTouchPoint, a Wisconsin-based mailing and printing vendor, has agreed to a multi-million dollar class action settlement stemming from a 2022 ransomware attack. The case, reported by The HIPAA Journal, suggests the breach involved health-related data handled on behalf of the company's clients.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
NFI North, a New Hampshire-based organization, disclosed a data breach affecting nearly 50,000 individuals. The breach was reported alongside separate incidents at Nephrology Associates in Kansas and PAMCAH-UA Local 675 Health, suggesting a broader pattern of healthcare and benefits-sector breaches.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The EU AI Act contains breach notification requirements that many organizations may not have recognized as such, creating compliance deadlines that could catch unprepared companies off guard.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
AI researchers built a computer worm using AI models that was capable of rapidly compromising WeChat accounts at massive scale. Experts said the attack could have affected hundreds of millions of devices within hours if deployed.
Who should care: Cybersecurity · Privacy officers · Administrators
A misconfigured Advance Passenger Information System database linked to Vietnam exposed roughly 220 million passenger and crew records, including passport numbers, dates of birth, nationalities, and flight details covering nearly a decade. Researchers reached the cloud-hosted system using default credentials, suggesting basic security controls were never changed.
Who should care: Cybersecurity · Privacy officers · Administrators
The HIPAA Journal's June 2026 report recorded 66 large healthcare data breaches — each affecting 500 or more individuals — reported during the month. The figures reflect ongoing exposure of protected health information across the U.S. healthcare sector.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Mathspace, an online mathematics learning platform, disclosed a data breach in which attackers accessed its internal Metabase reporting system and stole data belonging to more than one million students, staff members, and parents.
Who should care: Cybersecurity · Privacy officers · Administrators