LATEST POST
Data Breach Litigation in 2026: What Courts Expect From Companies’ Cybersecurity Programs
Attorneys at Parker Poe Adams & Bernstein LLP write: Companies facing data breaches are increasingly being judged not only on how they respond to cyberattacks, but also on the security measures they had in place before an incident occurred. Recent federal and state court decisions, including several involving businesses in the Southeast, highlight how failing […]
Binance links $6.3 billion crypto theft to compromised DevOps laptop and North Korean hackers
It appears to be the largest cyber heist in history. Bleeping Computer reports: Binance, the world’s largest crypto exchange, has linked the theft of about $6.3 billion in cryptocurrency to a DevOps engineer’s compromised laptop. The crypto exchange said the access let attackers submit unauthorized withdrawal transactions after they accessed a service container, and it […]
Frontline Education Notice of Data Breach
On October 26, Frontline Education issued a press release about a data breach: WAYNE, Penn., October 26, 2026–(BUSINESS WIRE)–Frontline Education, a leading provider of administration software purpose-built for K-12, today announced that it has begun sending notification letters to individuals whose data was impacted in the August 2026 cybersecurity incident involving Frontline Central and School […]
How Does Delaware’s New Data Breach Statute Impact Health Care Entities?
Attorneys at Saul Ewing LLP write: On September 2, 2026, HB 381 was signed into law and amends Delaware’s data breach notification statute effective immediately. The new Delaware breach law includes a 60-day notice provision to the Delaware Attorney General, narrows the safe harbor for institutions covered by the Gramm-Leach-Bliley Act (GLBA) and entities regulated […]
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
TechCrunch reports on what is almost certainly a very worrying breach for employees of the Department of Homeland Security (DHS): Personally identifiable information belonging to thousands of U.S. Department of Homeland Security employees has been published online after a hacker stole reams of data in a previously undisclosed breach at the government department earlier this […]
Emergency patches fix critical bugs in Nginx
Seen on exploit.in: Source: exploit.in. The original article appeared in Russian at rakep.ru.
Hackers scanning systems for recently-patched Oracle flaw
Bleeping Computer reports: Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability. Discovered in a core component of EBS’s Application Object Library and tracked as CVE-2026-101767, this flaw lets unauthenticated threat actors with HTTP network access take over vulnerable systems in low-complexity attacks. Oracle released […]
Conduent to pay $80M to settle 3rd-largest healthcare data breach
Becker’s Health IT reports: Business services provider Conduent has agreed to pay $80 million to settle class action litigation over the third-largest healthcare data breach on record, which exposed data on about 62.2 million people. Conduent signed the settlement Oct. 16 with plaintiffs in the U.S. District Court for the District of New Jersey, according […]