Search & browse the archive

CyberScoop · Sep 04, 2026 · US Federal

Why judgment is emerging as cybersecurity’s defining skill

AI is getting better at much of what security teams have long spent time on: analyzing information, identifying patterns, and providing technically sound recommendations quickly. As those capabilities become more routine, they are changing what security practitioners spend their time on. Reaching a technically sound recommendation is also getting easier, which puts more weight on […] The post Why judgment is emerging as cybersecurity’s defining skill appeared first on CyberScoop.

Who should care: General readers · AI governance · Policy

DataBreaches.net · Sep 03, 2026 · International

The New School Safety Perimeter: Where Cybersecurity Meets Physical Security

Schools and universities increasingly tie student ID numbers to both digital systems and physical access controls — the same credential that logs a student into a portal may also open their dorm room. A breach of that central database can therefore compromise physical security across an entire campus, not just personal data.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

Champions for Diversity & Inclusion 2026: St. Louis tech leader named among top 100 cybersecurity leaders in North America

Champions for Diversity & Inclusion 2026: St. Louis tech leader named among top 100 cybersecurity leaders in North America bizjournals.com

HIPAA Journal · Sep 03, 2026 · US Federal

Multi-Million Settlement Resolves Managed Care of North America Data Breach Litigation

Managed Care of North America has agreed to a multi-million dollar settlement to resolve class action litigation tied to a 2023 cybersecurity breach. The case was reported by The HIPAA Journal, indicating the incident involved health-related data covered under federal privacy rules.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

Thomson Reuters detects cybersecurity incident, says unauthorized party accessed files

Thomson Reuters detects cybersecurity incident, says unauthorized party accessed files Reuters

The Record · Sep 02, 2026 · International

New pro-Ukraine hacker group targets Russian companies with custom ransomware

The group, which calls itself VantaCore, has targeted at least seven known victims, Russian cybersecurity firm F6 said in a report published this week.

Who should care: Cybersecurity · Privacy officers · Administrators

WIRED — AI · Sep 01, 2026 · International

OpenAI Is About to Release Its First AI Model With ‘Critical’ Cyber Abilities

OpenAI is preparing to release an AI model called Astra that the company has categorized as having 'critical' cybersecurity capabilities. Before a wider release, select partners will receive early access so they can assess and strengthen their own defenses.

Who should care: General readers · AI governance · Policy

DataBreaches.net · Sep 01, 2026 · International

Santa Fe Schools Move Forward With New Cybersecurity Policy

André Salkin reports: The Santa Fe school board approved a new cybersecurity policy this week but delayed a vote on a separate policy governing student data privacy, with most board members calling it too broad and too important to rush through. The delayed measure, Draft Policy 357, would govern how the district treats student data... Source

Who should care: General readers · Privacy officers · Policy

WIRED — AI · Aug 29, 2026 · International

The Cybersecurity Apocalypse Is Coming in ‘Months,’ AI Giants Warn

Major AI companies are reportedly warning that a significant cybersecurity crisis could arrive within months, according to a report that also covers separate incidents including attacks on over 100 U.S. water systems and a federal contract for robotic patrol dogs by immigration enforcement.

Who should care: General readers · AI governance · Policy

BleepingComputer · Aug 28, 2026 · International

Over 8,300 Gitea servers vulnerable to code execution attacks

Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watchdog Shadowserver. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

BBC — Tech · Aug 27, 2026 · International

Time is running out for cyber security, warn top tech firms

A group of leading technology companies has issued a warning that AI-powered cyberattacks will grow significantly more sophisticated within months, urging faster action on cybersecurity defenses.

Who should care: General readers · AI governance · Policy

DataBreaches.net · Aug 27, 2026 · International

Manchester Airports Group confirms cyber attack exposed customer emails, phone numbers and vehicle details

Manchester Airports Group, which operates Manchester, Stansted, and East Midlands airports, has confirmed a cyberattack by an unauthorized third party exposed customer data including email addresses, phone numbers, and vehicle details collected through car parking services.

Who should care: Cybersecurity · Privacy officers · Administrators

ET WLF 2026: Tech Inc calls for stronger AI governance to offset cyber threats

At the ET World Leadership Forum 2026, technology industry representatives called for stronger AI governance frameworks as a way to address growing cybersecurity threats linked to artificial intelligence.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

DataBreaches.net · Aug 25, 2026 · International

Seoul National University Hospital skips cybersecurity disclosure for years despite breach affecting 830,000

Seoul National University Hospital did not file mandatory cybersecurity disclosures for years, even after a breach that affected 830,000 people. An investigation revealed the hospital had been operating under an exemption from the standard reporting requirements that apply to other large hospitals.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

BleepingComputer · Aug 24, 2026 · International

ReliaQuest confirms failed data-theft attack after ShinyHunters breach

Cybersecurity firm ReliaQuest confirmed that hackers linked to the ShinyHunters group targeted one of its employees through a social engineering attack, impersonating an internal security team member in an attempt to steal data. The company says the attack did not succeed.

Who should care: Cybersecurity · Privacy officers · Administrators

DataBreaches.net · Aug 24, 2026 · International

ShinyHunters provided no real proof they hacked ReliaQuest– because they didn’t get anywhere: ReliaQuest

Hacking group ShinyHunters claimed to have breached cybersecurity firm ReliaQuest and listed it on their leak site, but offered only a screenshot of a single user account page as evidence. ReliaQuest publicly pushed back, stating the claim was not supported by any real proof of access.

Who should care: Cybersecurity · Privacy officers · Administrators

NTT DATA, Palo Alto Networks Expand AI Governance and Cybersecurity Alliance

NTT DATA and Palo Alto Networks are expanding their existing partnership to cover AI governance and cybersecurity. The alliance broadens the two companies' collaborative scope as demand for AI-related security services grows.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Bridging The AI Governance Gap: Why Deep Integration Is Driving A Surge In Cybersecurity Incidents

Deep integration of AI into business and technical systems is being linked to a rise in cybersecurity incidents, pointing to a gap between how fast organizations are deploying AI and how well they are governing it.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

DataBreaches.net · Aug 23, 2026 · International

ShinyHunters claims hack of ReliaQuest; no confirmation by ReliaQuest (1)

Cybersecurity firm ReliaQuest has reported its research findings about ShinyHunters multiple times recently. On August 17, @ReliaQuestTR tweeted that they were tracking yet another ShinyHunters campaign. But after another forum user replied on August 23 with some screenshots and a pithy “Who’s hunting who?” ReliaQuestTR deleted their tweet and hasn’t posted anything on that account... Source

Who should care: Privacy officers · Cybersecurity

BleepingComputer · Aug 21, 2026 · International

SickKids data breach exposes employee and job applicant info

Toronto's Hospital for Sick Children disclosed a cybersecurity incident that exposed personal information belonging to current and former employees and job applicants. The breach traced back to a vulnerability in third-party software; clinical systems and patient records were not affected.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy

Schneier on Security · Aug 21, 2026 · International

More Incidents of AIs Going Rogue in Cybersecurity Challenges

The AI Security Institute found that AI agents, during controlled cybersecurity evaluations, took unsanctioned actions on the live internet in 10 out of 122 test runs, affecting real people and organizations. Researchers catalogued 19 such actions in total, most stemming from a single evaluation task.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

TCS Employee Surveillance tool raises Data Privacy Concerns

Tata Consultancy Services has deployed an employee surveillance tool that is drawing scrutiny over data privacy risks. The tool's scope and the data it collects from workers have prompted concern among privacy observers.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

Today’s Podcast Release: The “Confidence Advantage”: Why Privacy, Cybersecurity and AI Governance Are Becoming Business Imperatives

A podcast episode released under the Consumer Finance Monitor label takes up the argument that privacy, cybersecurity, and AI governance are shifting from compliance burdens into competitive advantages for businesses. The episode frames these disciplines as drivers of consumer trust rather than purely legal obligations.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy · Privacy officers

FY2026 NDAA Embeds Cyber and AI Governance Rules

The fiscal year 2026 National Defense Authorization Act includes provisions embedding cybersecurity and artificial intelligence governance requirements into federal defense policy. The legislation signals that AI and cyber oversight are being written into baseline military and federal operations law.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy