Archive
(2,175 Total Articles)Page 4 of 25.
Fortinet VPNs are being abused in an active campaign that can shut users out and create a path to ransomware. The practical issue for defenders is exposure on perimeter access gear and the need to treat FortiGate patching, access review, and monitoring as urgent rather than routine.
This is a customer data breach involving two major utilities. The main defender impact is exposure of customer records and the need for disclosure, containment, and review of account and notification controls across critical infrastructure operations.
The piece appears to be about what CISA should tell federal agencies to do to better protect operational technology. For defenders, that points to guidance on OT hardening and federal expectations rather than a new incident or vulnerability.
This piece is about alleged exploitation of an unpatched Oracle PeopleSoft flaw after a third-party patching failure, with the FBI tied to the analysis and ShinyHunters named as the threat actor. For defenders, the immediate issue is patch governance and whether upstream patching dependencies left a business application exposed long enough for theft or intrusion.
McLean Mortgage has settled a data breach case tied to a 2025 incident that affected more than 30,000 people. The main defender takeaway is exposure to notification, legal, and remediation obligations after a customer-data event, especially for a financial services firm.
A multistate enforcement settlement over a vendor breach at a clinical lab shows that third-party incidents can still turn into regulatory exposure long after the breach itself. For defenders, the key issue is not just the original compromise but the downstream obligation to document vendor risk, notify properly, and withstand state-level scrutiny.
A ransomware incident disrupted a University of Illinois Chicago medical school and involved data theft. The story matters because it combines operational interruption with potential exposure of sensitive healthcare and education records, which raises response, notification, and containment obligations for the university and its partners.
Georgia Power says a cyberattack exposed customer personal information. For defenders, this is a utility-sector breach that raises exposure for identity theft and incident-response obligations, and it matters because critical infrastructure operators must treat customer-data security as part of operational resilience.
A Texas court has approved a settlement tied to AT&T’s data breach, which makes the incident a resolved legal and financial matter rather than just a disclosure. For defenders, the key issue is that the breach has crossed into enforcement and claims resolution, showing the downstream cost of exposed customer data and the pressure on large telecom operators after a compromise.
US and Australian authorities are warning defenders about a Citrix NetScaler vulnerability, which makes this a timely patching and exposure issue for organizations that rely on the product. The main defender impact is priority: identify affected systems, check for exploitation guidance from vendors and government, and apply mitigations or patches quickly.
California subpoenaing OpenAI signals that AI systems are now drawing regulator attention as potential cybersecurity and governance risks, not just consumer products. For defenders and compliance teams, the practical issue is how AI vendors handle security oversight, incident disclosure, and the controls around model use and customer data.
A third-party software vulnerability is reported to have exposed employee data tied to K-12 school districts using Frontline Education. For defenders, the immediate issue is supplier exposure: schools and education IT teams need to assess whether any Frontline-connected data was accessible, review third-party access paths, and confirm notification and containment steps.
This is a law-enforcement and accountability story, not a new intrusion report. It matters because the alleged campaign targeted universities at scale and the extradition suggests prosecutors are trying to turn attribution into enforcement, which raises the stakes for state-linked operators and the institutions they hit.
Epic is pausing product development because of cybersecurity concerns. For defenders, that signals a security issue serious enough to affect product delivery and should be read as an operational risk for customers and partners, even though the excerpt does not say whether this stems from a breach, vulnerability, or internal control problem.
A data-breach settlement tied to AT&T has cleared court approval, putting a large payout behind claims from users affected by the incident. For defenders, the main takeaway is that breach response now carries clear financial and legal exposure, not just notification and remediation costs.
The city is still restoring systems after a cyberattack, which puts basic municipal services and public operations at risk until recovery is complete. For defenders, the immediate question is whether this was a disruption-only incident or one with data exposure or malware persistence that could prolong recovery.
CISA is telling operators of critical infrastructure to tighten basic cyber hygiene during Cybersecurity Awareness Month. The piece matters because it points to defensive steps for organizations that run essential services and likely raises the priority of patching, access control, and incident readiness.
Fortinet FortiMail has a vulnerability that is already being exploited, which makes it an immediate defensive priority for mail security teams. CISA adding it to the Known Exploited Vulnerabilities list raises the obligation to identify exposed systems, patch quickly, and verify whether any mail gateways were already touched.
Five federal and industry reports from December 2023 to May 2024 trace water and energy sector breaches to the same root causes: default passwords, flat networks, and no OT visibility.
Five federal and industry reports from December 2023 to May 2024 trace water and energy sector breaches to the same root causes: default passwords, flat networks, and no OT visibility.
Senators are being told current cyber law does not clearly address autonomous AI systems used for hacking. For defenders and compliance teams, the issue is the legal and operational gap around attribution, response, and liability when AI acts with little human direction.
CrowdStrike's 13.9% jump on September 14 prices an agentic-AI exposure the archive has documented since February, from Clinejection to PixelLeak.
CrowdStrike's 13.9% jump on September 14 prices an agentic-AI exposure the archive has documented since February, from Clinejection to PixelLeak.
Telmate’s settlement turns an older cyber incident into a legal and financial consequence for the company and the people whose data may have been affected. For defenders, the story is a reminder that breach response does not end with containment; regulatory exposure and class-action risk can follow for years.
California has changed the legal exposure around website tracking by blocking lawsuits that relied on pen register theories. The practical effect is narrower litigation risk for operators using common web tools, while leaving broader privacy and compliance questions to other laws and enforcement channels.