LATEST POST
Expired credit cards revived by researchers to make unauthorized payments
The Register reports: Researchers affiliated with the University of Massachusetts Amherst have found that you can get payments out of certain expired contactless credit cards, a process detailed at the recent USENIX Security 2026 conference. Raja Hasnain Anwar, Gerard DeCunha, and Muhammad Taqi Raza describe their findings in a paper titled “Zombie Cards Back Online: Reviving Expired […]
#StopRansomware: Medusa Ransomware Update
In March 2025, CISA published an advisory on the Medusa ransomware gang. They have now updated it, noting: Medusa is a ransomware-as-a-service (RaaS) variant first identified in June 2021. As of April 2026, Medusa developers and affiliates—referred to as “Medusa actors” in this advisory—have impacted over 500 victims from a variety of critical infrastructure sectors. […]
Huntsville Hospital, Cerner/Oracle Health named in new federal lawsuit over data breach
Fox54 in Alabama reports: A second proposed class-action lawsuit has been filed over the data breach that compromised patient information at Huntsville Hospital Health System, this time in federal court and against both the hospital system and its electronic records vendor. Crystal Mullins filed the complaint Aug. 14 in the U.S. District Court for the Western District of […]
Scam Alert: Ransomware Actor Poses “Ransom Busters” Incident Recovery Service
Dark Reading reports: A ransomware affiliate is approaching victims of the attacks it may have helped carry out, in an interesting technique that actually undermines its own business model. According to the GuidePoint Research and Intelligence Team (GRIT), a malicious entity referring to itself as “Ransom Busters” has sent an email to cyberattack victims, claiming to have […]
CISA Unveils New Cybersecurity Resources for K-12 Schools and Districts
The Cybersecurity and Infrastructure Security Agency (CISA) released new resources for K-12 schools this week. Their press announcement: Source: CISA
French tax authority admits data heist after crook touts 2M records
The Register reports: France’s tax authority has confirmed that an intruder accessed its systems and extracted data in June after an alleged cybercriminal advertised a purported database of 2 million taxpayers. Using the alias “ZeroBytes,” the alleged crook behind the attack on the General Directorate of Public Finances (DGFiP) advertised the stolen database on a […]
Baylor Genetics notifying patients and employees of data breach
On June 15, Baylor Genetics in Texas discovered a breach. An investigation subsequently determined that an unauthorized party had accessed data between June 11 and June 17. From their press release: For all impacted patients, the information potentially involved varied by individual and may have included names and one or more of the following for […]
Utah-Based Mortgage Company Must Pay $825,000 for Failing to Protect Californians’ Personal Information
Source: California DFPI, August 13, 2026