A weekly cybersecurity program: breaches, ransomware, defence and resilience.
A flaw in a file-sharing system at the Defense Manpower Data Center left Social Security numbers and service records for current and…
The bank's deployment of Hawk's AI model targets a problem rule-based compliance systems can't solve on their own: too many false alerts…
SitusAMC, which handles real-estate loan and mortgage functions for more than 1,500 lenders, disclosed a November breach that exposed banks' accounting records…
CISA, the FBI and NSA say an Iranian-affiliated group has been manipulating Rockwell Automation and Siemens industrial controllers since at least March,…
West Pharmaceutical Services took systems offline globally after a May breach disrupted manufacturing, shipping and receiving — underscoring how concentrated a single…
Enhabit Home Health & Hospice says attackers used stolen credentials at a third-party physician communication platform to reach clinical data on more…
The Everest ransomware gang breached Stadler through a data-exchange platform shared with a supplier, but the company says production and rail vehicles…
CVE-2026-93952 lets attackers bypass authentication on VeloCloud Orchestrator without needing any credentials, and CISA gave federal agencies until September 25 to patch…
KDDI says attackers exploited an unrecognized vulnerability in shared email platform software on May 16, compromising email addresses and, for millions of…
A legal takedown and two arrests in London followed a campaign that used an AI chatbot at every stage of the attack,…
Two documented New York enforcement cases show how quickly payroll, Medicaid billing and cybersecurity gaps can turn into federal and state regulatory…
What documented enforcement cases can teach healthcare organizations about tracking technologies, patient information and digital compliance.