The full corpus — beyond today's front page.
1154 results · page 8 of 49
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Microsoft Threat Intelligence documented a supply chain attack embedded in LiteLLM version 1.107.0, a widely used Python library for AI model integrations. The malicious code used Python startup hooks to steal credentials and load remote code on affected systems.
Who should care: Cybersecurity · Privacy officers · Administrators
Quest Diagnostics disclosed that a threat actor gained unauthorized access to its Quanum LSM system, exposing patient records. The clinical laboratory company confirmed the breach, though the full scope of affected individuals has not been detailed in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Quest Diagnostics has disclosed that a system used in its laboratory services may have been compromised, potentially exposing patient data. The nationwide diagnostics company has not confirmed the full scope of what was taken.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Washington Gastroenterology has agreed to a $4.6 million settlement to resolve a class action lawsuit arising from a cybersecurity incident at the medical practice. The settlement follows litigation brought by patients affected by the breach.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
UltraMobile Imaging, a New York-based medical imaging provider, disclosed a data breach affecting approximately 75,000 individuals. The announcement is part of a wave of healthcare-related breach disclosures also involving Artistic Smiles in Colorado and Parkview Health in Indiana.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Indian certificate authority eMudhra Limited issued eight TLS certificates with private keys so weak — some containing as few as 3 to 8 bits of entropy — that they were effectively trivial to compromise. A standard key of this type should contain around 384 bits of entropy, making these certificates orders of magnitude below any acceptable security threshold.
Who should care: Cybersecurity · Privacy officers · Administrators
Manhattan law firm Tarter Krinsky & Drogin has reported a data breach affecting the protected health information of nearly 197,000 individuals. The incident was reported to HIPAA authorities, indicating the compromised data belongs to patients of a healthcare client the firm represented.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Cloudflare reported millions of attempts to exploit the widely used web software, while researchers warned that compromised sites could also put visitors at risk.
Who should care: Cybersecurity · Privacy officers · Administrators
Cloud hosting platform Railway detected suspicious activity affecting the systems where it stores customer environment variables, and issued an urgent notice urging developers to rotate their secrets immediately.
Who should care: Cybersecurity · Privacy officers · Administrators
Toronto Crime Stoppers has suspended its operations after disclosing details of a data breach, including a timeline of when the organization learned of the incident. The local chapter broke with the national association to make the disclosure public.
Who should care: Cybersecurity · Privacy officers · Administrators
Capcom has confirmed a breach of its CAPCOM ID membership service, with attackers exposing email addresses and related data belonging to more than 11.7 million customers.
Who should care: Cybersecurity · Privacy officers · Administrators
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Microsoft has attributed a recent supply chain attack on IT management software company ConnectWise to a Chinese state-aligned hacking group, which reportedly used automated AI agent tools called ARTEX in the operation. Microsoft says the same group is using these techniques in ongoing attacks against organizations globally.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Ridgeway Pharmacy, based in Montana, has disclosed a data breach affecting nearly 259,000 individuals. The incident was reported by The HIPAA Journal alongside other breach announcements.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Innovative Renal Care, a kidney dialysis provider operating more than 200 locations, has agreed to pay $900,000 to settle litigation stemming from a data breach. The company, formally known as American Renal Management LLC, reached the settlement without details of the breach terms made public in the available excerpt.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
More than 1,400 suspected cybercriminals were arrested across Africa this summer as part of a crackdown on the gangs perpetrating online fraud, ransomware and business email compromise attacks, Interpol said.
Who should care: Cybersecurity · Privacy officers · Administrators
Two Marines have filed a class-action lawsuit against the Pentagon, alleging that the Defense Manpower Data Center suffered a data breach that the Department of Defense could have prevented by addressing known cybersecurity vulnerabilities.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A coordinated law enforcement operation across Africa called Operation Serengeti III dismantled close to 11,000 cybercriminal networks and led to more than 1,400 arrests. The operation focused on business email compromise, ransomware attacks, and online fraud schemes.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Cisco Talos has identified eight intermediate certificates belonging to eMudhra, an intermediate certificate authority, that appear to have been compromised. The disclosure points to a potential integrity problem in a layer of infrastructure that underpins trusted digital communications.
Who should care: Cybersecurity · Privacy officers · Administrators
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Microsoft has linked a nation-state threat actor, tracked as Storm-0940, to a supply chain attack on ConnectWise that used an agentic AI tool called ARTEX to accelerate the compromise. The campaign targeted Microsoft 365 environments by abusing application credentials stolen through the breach.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Jefferson County Health Department in Hillsboro, Missouri has agreed to pay $2.25 million to settle a class action lawsuit stemming from a data breach. The public health agency's settlement resolves claims brought by individuals whose information was compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals