LATEST POST
Security Incident Report from NEAR AI Team
NEAR AI recently identified and contained unauthorized access to part of its infrastructure. The access has been closed, affected credentials have been replaced, the vulnerability that allowed it has been fixed, and access to NEAR AI Cloud has been restored. The unauthorized party exploited a remote code execution vulnerability in SGLang, the open-source inference engine […]
CISA Announces Enhanced Reporting Form for Cyber Incidents
A press release from the Cybersecurity and Infrastructure Security Agency (CISA): Today, the Cybersecurity and Infrastructure Security Agency (CISA) unveiled the updated cyber incident reporting form, an enhanced web-enabled questionnaire available on CISA’s Incident Reporting Portal for reporting cyber incidents. By improving data quality, the more robust form strengthens the effectiveness and efficiency of national […]
2026 US Data Security Law Recap
From the Ashurst Perkins Coie law firm: Read more about specific state updates at JDSupra.
Fireworks discloses second security breach following third-party cloud attack
SC Media reports: Fireworks, an artificial intelligence infrastructure startup, recently disclosed a security breach involving unauthorized access to its development machines after attackers compromised a third-party cloud provider, as first reported by Bleeping Computer. The incident, which occurred on October 23, allowed threat actors to access customer resource metadata, billing information, and incomplete model weights. […]
Beware this CAPTCHA scam designed to steal your data
Mac and Windows users, don’t click on pictures—or type out text that has been distorted—before you read this. Some important safety advice about how the scam works: The CAPTCHA scam shows a fake CAPTCHA pop-up on a malicious website that looks like the real website for a legitimate company, such as Amazon.com or Facebook.com. But […]
Judge Approves $3.9M ArCare Data Breach Settlement
HIPAA Journal reports: A settlement that resolves claims related to a 2022 security incident and data breach at ArCare has been granted preliminary approval by a District Court Judge. ArCare is a non-profit, federally qualified community health center that provides primary care, behavioral health services, pharmacies, and community outreach programs across Arkansas, Kentucky, and Mississippi. […]
Perry Johnson 2023 healthcare data breach: $10M settlement with four state attorneys general
BeInsure reports that the attorneys general of New York, Connecticut, Michigan and New Jersey have reached a $10 million settlement with five Perry Johnson companies over a 2023 data breach that exposed personal and medical information belonging to more than 13.3 million people. The agreement also requires extensive changes to information security, incident response, access […]
Critical Chrome alert confirmed with all users urged to restart their browser now
Express reports: Google has just confirmed the release of an important update that all Chrome users should install immediately. The important new software patch fixes a whopping 213 security issues, including 7 that Google has branded critical. According to the team at Malwarebytes, a number of the bugs could allow cyber crooks to run remote […]