Guidance Emphasizes Importance of Ongoing Risk Assessments and Reminds Entities of Compliance Obligations Under Nation-Leading Cybersecurity Regulation September 10, 2026
Statement by the Federal Trade Commission: The Federal Trade Commission rescinded the 2021 Policy Statement on Breaches by Health Apps and Other
Many people are waiting today to see what happens in a federal court case involving a young man named Malone
MedTech Dive reports that DaVita, one of the largest dialysis providers in the U.S., has agreed to pay $15 million
The Next Web reports that a breach involving Thomson-Reuter’s C-track case management system has affected courts in at least 12
Miscellaneous News
The Record reports: Just in time for the World Cup’s “knockout” round, the U.S. government announced the seizure of hundreds
The New Humanitarian reports: A cyber-attack targeting the World Food Programme has exposed sensitive personal information belonging to some 600,000
Google’s Gemini artificial intelligence model autonomously hacked into three companies during a test of its cyber-security capabilities in May. While Google claims the model acted responsibly by backing out after recognizing it had attacked legitimate businesses, the affected firms weren’t notified until July, and the public wasn’t notified until this week, when The Wall Street Journal uncovered the incidents. The BBC reports: In statement to the BBC on Saturday, Irregular said it informed Google and all affected entities back in July as
Insurance Business Magazine considers the question of whether a firm’s cyberinsurance will cover a breach at its vendor. The detail that matters for insurance brokers is not that a breach occurred – it is how. Ryan Specialty’s 2026 analysis of Dependent Business Interruption (Dependent BI) coverage puts the structural problem plainly: “Each of these events shares a common feature: the organisations that suffered operational and financial disruption were not the ones who were attacked. Their vendor was. The question for
The Crypto Times reports Revolut has confirmed that approximately 680 customers were affected in the customer-data disclosure incident: The 680 figure was first reported by the Financial Times, which described the group as “nearly 700.” A source close to the bank confirmed the number to City AM, which said Revolut had contacted all affected customers directly. The 680 total represents roughly 0.00085% of Revolut’s more than 80 million global customers. National breakdowns published on 15 September have begun to fill
The Guardian reports that months before the Hugging Face incident made worldwide headlines and triggered investigations by state regulators, there was another attack by Open AI agents on a second service: Agents being tested by OpenAI uploaded hundreds of malicious packages in a cyberattack on software service RubyGems in May, two months before they hacked open-source platform Hugging Face, the company confirmed Friday. It’s the latest revelation of cyberattacks linked to major artificial intelligence developers such as OpenAI and Anthropic.
On September 9, the FBI released its new cyber strategy. “The FBI’s new Cyber Strategy is a roadmap for defending the American people and the nation’s critical infrastructure in cyberspace. The strategy focuses on four pillars: disrupting adversaries, supporting victims, strengthening partnerships, and building the capabilities this mission demands. Together, these four pillars bring the full weight of the FBI to defend the homeland in cyberspace and secure America’s digital future.” With respect to “disruption,” the Executive Summary states: FBI
Categories
In March 2026, a hacktivist acquired 8.3 million tips to platforms and mobile apps by Navigate360‘s subsidiary, P3 Global Intel.
Threat actors may claim to have hacked an entity when the reality is that they hacked the entity’s vendor. This
The Coupang data breach has been one of South Korea’s biggest, and government regulators and the firm continue to disagree over how
Insurance Business Magazine considers the question of whether a firm’s cyberinsurance will cover a breach at its vendor. The detail
The Crypto Times reports Revolut has confirmed that approximately 680 customers were affected in the customer-data disclosure incident: The 680
Insurance Business Magazine considers the question of whether a firm’s cyberinsurance will cover a breach at its vendor. The detail
Google’s Gemini artificial intelligence model autonomously hacked into three companies during a test of its cyber-security capabilities in May. While Google claims the model acted responsibly by backing out after recognizing it had attacked legitimate businesses, the affected firms weren’t notified until July, and the public wasn’t notified until this week, when The Wall Street Journal uncovered the incidents. The BBC reports: In statement to the BBC on Saturday, Irregular said it informed Google and all affected entities back in July as
Insurance Business Magazine considers the question of whether a firm’s cyberinsurance will cover a breach at its vendor. The detail that matters for insurance brokers is not that a breach occurred – it is how. Ryan Specialty’s 2026 analysis of Dependent Business Interruption (Dependent BI) coverage puts the structural problem plainly: “Each of these events shares a common feature: the organisations that suffered operational and financial disruption were not the ones who were attacked. Their vendor was. The question for
The Crypto Times reports Revolut has confirmed that approximately 680 customers were affected in the customer-data disclosure incident: The 680 figure was first reported by the Financial Times, which described the group as “nearly 700.” A source close to the bank confirmed the number to City AM, which said Revolut had contacted all affected customers directly. The 680 total represents roughly 0.00085% of Revolut’s more than 80 million global customers. National breakdowns published on 15 September have begun to fill
The Guardian reports that months before the Hugging Face incident made worldwide headlines and triggered investigations by state regulators, there was another attack by Open AI agents on a second service: Agents being tested by OpenAI uploaded hundreds of malicious packages in a cyberattack on software service RubyGems in May, two months before they hacked open-source platform Hugging Face, the company confirmed Friday. It’s the latest revelation of cyberattacks linked to major artificial intelligence developers such as OpenAI and Anthropic.
Guidance Emphasizes Importance of Ongoing Risk Assessments and Reminds Entities of Compliance Obligations Under Nation-Leading Cybersecurity Regulation September 10, 2026
Statement by the Federal Trade Commission: The Federal Trade Commission rescinded the 2021 Policy Statement on Breaches by Health Apps and Other
Many people are waiting today to see what happens in a federal court case involving a young man named Malone
MedTech Dive reports that DaVita, one of the largest dialysis providers in the U.S., has agreed to pay $15 million
The Next Web reports that a breach involving Thomson-Reuter’s C-track case management system has affected courts in at least 12
Miscellaneous News
The Record reports: Just in time for the World Cup’s “knockout” round, the U.S. government announced the seizure of hundreds
The New Humanitarian reports: A cyber-attack targeting the World Food Programme has exposed sensitive personal information belonging to some 600,000
Categories
In March 2026, a hacktivist acquired 8.3 million tips to platforms and mobile apps by Navigate360‘s subsidiary, P3 Global Intel.
Threat actors may claim to have hacked an entity when the reality is that they hacked the entity’s vendor. This
The Coupang data breach has been one of South Korea’s biggest, and government regulators and the firm continue to disagree over how
Insurance Business Magazine considers the question of whether a firm’s cyberinsurance will cover a breach at its vendor. The detail
The Crypto Times reports Revolut has confirmed that approximately 680 customers were affected in the customer-data disclosure incident: The 680
Insurance Business Magazine considers the question of whether a firm’s cyberinsurance will cover a breach at its vendor. The detail
