Guidance Emphasizes Importance of Ongoing Risk Assessments and Reminds Entities of Compliance Obligations Under Nation-Leading Cybersecurity Regulation September 10, 2026
Statement by the Federal Trade Commission: The Federal Trade Commission rescinded the 2021 Policy Statement on Breaches by Health Apps and Other
Many people are waiting today to see what happens in a federal court case involving a young man named Malone
MedTech Dive reports that DaVita, one of the largest dialysis providers in the U.S., has agreed to pay $15 million
The Next Web reports that a breach involving Thomson-Reuter’s C-track case management system has affected courts in at least 12
Miscellaneous News
The Record reports: Just in time for the World Cup’s “knockout” round, the U.S. government announced the seizure of hundreds
The New Humanitarian reports: A cyber-attack targeting the World Food Programme has exposed sensitive personal information belonging to some 600,000
404 Media continued its excellent reporting on the ShinyHunters attack that compromised the FBI job portal and exfiltrated sensitive information on intelligence personnel and others. The hackers behind the massive FBI breach told 404 Media on Monday they do not intend to publish the data. The breach, in which the hackers stole personal information on “all FBI employees and applicants” including physical addresses, job roles, names of spouses, and medical records, represents a significant national security and counterintelligence threat. Criminals
ABC News reports that a breach of the Pentagon’s personnel database exposed sensitive information, including Social Security numbers and details about the jobs they held: The breach affected 2.76 million living people and another 294,000 who are deceased, the official said. The scope and sensitivity of the exposed information could raise national security concerns, particularly because the files included details about the jobs performed by military and civilian personnel. “A Defense Manpower Data Center (DMDC) information system experienced unauthorized access
The New York Times reports that OpenAI went rogue – again. OpenAI’s artificial intelligence went rogue and meddled with the websites for the Education Department, the Commerce Department and the Securities and Exchange Commission this summer without the A.I. lab’s knowledge, according to security researchers and a person familiar with the episodes. The incidents involving the Commerce Department and the S.E.C. were confirmed by OpenAI, which said it was continuing to investigate the situation with the Department of Education. The
Claims that AU Medicare had been hacked by an OpenAI agent made headlines everywhere this week. But was the compromise really a sophisticated action by an OpenAI agent, or was it easy peasy because AU Medicare had an obvious vulnerability? The Record reports: Security researchers are questioning whether an OpenAI agent needed to hack an Australian government health portal to access it, after a review of the website’s archived code found it explicitly directed visitors to an unauthenticated endpoint. Prime
More details have emerged about data allegedly hacked from the FBI job application portal, and experts suggest it could put individuals at risk. Reuters reports: FBI data allegedly stolen by the hacking group ShinyHunters carries granular detail about scores of bureau officials’ job assignments, including sensitive work against Chinese spies, Russian intelligence, drug cartels, and more, Reuters has found. The 5,000-line spreadsheet – said by the hackers to represent only a small piece of their claimed two- to three-terabyte trove –
Categories
404 Media continued its excellent reporting on the ShinyHunters attack that compromised the FBI job portal and exfiltrated sensitive information
ABC News reports that a breach of the Pentagon’s personnel database exposed sensitive information, including Social Security numbers and details
In June, LabCorp settled a class action lawsuit over the 2018 American Medical Collection Agency (AMCA) breach for $35 million.
Insurance Business Magazine considers the question of whether a firm’s cyberinsurance will cover a breach at its vendor. The detail
The Crypto Times reports Revolut has confirmed that approximately 680 customers were affected in the customer-data disclosure incident: The 680
In June, LabCorp settled a class action lawsuit over the 2018 American Medical Collection Agency (AMCA) breach for $35 million.
404 Media continued its excellent reporting on the ShinyHunters attack that compromised the FBI job portal and exfiltrated sensitive information on intelligence personnel and others. The hackers behind the massive FBI breach told 404 Media on Monday they do not intend to publish the data. The breach, in which the hackers stole personal information on “all FBI employees and applicants” including physical addresses, job roles, names of spouses, and medical records, represents a significant national security and counterintelligence threat. Criminals
ABC News reports that a breach of the Pentagon’s personnel database exposed sensitive information, including Social Security numbers and details about the jobs they held: The breach affected 2.76 million living people and another 294,000 who are deceased, the official said. The scope and sensitivity of the exposed information could raise national security concerns, particularly because the files included details about the jobs performed by military and civilian personnel. “A Defense Manpower Data Center (DMDC) information system experienced unauthorized access
The New York Times reports that OpenAI went rogue – again. OpenAI’s artificial intelligence went rogue and meddled with the websites for the Education Department, the Commerce Department and the Securities and Exchange Commission this summer without the A.I. lab’s knowledge, according to security researchers and a person familiar with the episodes. The incidents involving the Commerce Department and the S.E.C. were confirmed by OpenAI, which said it was continuing to investigate the situation with the Department of Education. The
Claims that AU Medicare had been hacked by an OpenAI agent made headlines everywhere this week. But was the compromise really a sophisticated action by an OpenAI agent, or was it easy peasy because AU Medicare had an obvious vulnerability? The Record reports: Security researchers are questioning whether an OpenAI agent needed to hack an Australian government health portal to access it, after a review of the website’s archived code found it explicitly directed visitors to an unauthenticated endpoint. Prime
Guidance Emphasizes Importance of Ongoing Risk Assessments and Reminds Entities of Compliance Obligations Under Nation-Leading Cybersecurity Regulation September 10, 2026
Statement by the Federal Trade Commission: The Federal Trade Commission rescinded the 2021 Policy Statement on Breaches by Health Apps and Other
Many people are waiting today to see what happens in a federal court case involving a young man named Malone
MedTech Dive reports that DaVita, one of the largest dialysis providers in the U.S., has agreed to pay $15 million
The Next Web reports that a breach involving Thomson-Reuter’s C-track case management system has affected courts in at least 12
Miscellaneous News
The Record reports: Just in time for the World Cup’s “knockout” round, the U.S. government announced the seizure of hundreds
The New Humanitarian reports: A cyber-attack targeting the World Food Programme has exposed sensitive personal information belonging to some 600,000
Categories
404 Media continued its excellent reporting on the ShinyHunters attack that compromised the FBI job portal and exfiltrated sensitive information
ABC News reports that a breach of the Pentagon’s personnel database exposed sensitive information, including Social Security numbers and details
In June, LabCorp settled a class action lawsuit over the 2018 American Medical Collection Agency (AMCA) breach for $35 million.
Insurance Business Magazine considers the question of whether a firm’s cyberinsurance will cover a breach at its vendor. The detail
The Crypto Times reports Revolut has confirmed that approximately 680 customers were affected in the customer-data disclosure incident: The 680
In June, LabCorp settled a class action lawsuit over the 2018 American Medical Collection Agency (AMCA) breach for $35 million.
